Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/4d505fff-f719-381b-b822-2695a2e94aeb.roa
File:                     4d505fff-f719-381b-b822-2695a2e94aeb.roa (raw, json)
Hash identifier:          ZvYSM5GGGp/Lx4xielLzkF4wV0LdpOlDM+CdA1MMuRw=
Subject key identifier:   FC:B1:E5:72:D9:B4:49:F6:B2:9B:63:21:4F:88:6A:B0:66:C7:EB:BF
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584F4975CFF7C4F7CE2608139580
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/4d505fff-f719-381b-b822-2695a2e94aeb.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     400196
IP address blocks:        2607:8240:ffff::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:cf:f7:c4:f7:ce:26:08:13:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a4c9e511-80bf-4a58-a9d8-c402d3d2db27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a0:8b:52:eb:9c:80:b2:e7:8e:7c:4a:55:28:
                    c3:32:38:be:3a:7f:18:11:9b:de:64:0d:2c:49:01:
                    dd:11:4a:65:5d:89:5d:18:03:8d:5d:5a:16:0d:80:
                    67:a2:ef:ae:09:b0:a1:d5:a5:b2:48:e1:43:0d:1a:
                    ad:09:59:11:18:5a:7f:64:52:f4:45:49:3c:e4:32:
                    b8:bb:f6:49:bb:8e:d8:be:0c:ad:25:bd:c3:ac:d1:
                    a8:7e:34:7a:b1:01:8e:f6:4f:a3:58:9c:62:7f:6e:
                    cb:c9:ce:10:d3:7d:d1:a8:83:2b:df:84:d9:71:9b:
                    fd:60:7e:4e:01:b3:a5:45:71:93:36:06:12:34:83:
                    df:1c:06:9e:29:d4:0d:8b:17:85:96:53:43:cc:e2:
                    f6:20:a4:4b:c3:a2:e1:04:2b:87:61:a0:c2:60:0e:
                    70:d9:70:ba:12:61:57:84:b1:d3:55:60:92:b5:d3:
                    49:db:77:d0:5d:d9:8a:6f:22:0a:7d:82:95:7b:76:
                    a7:ec:80:c9:f3:19:88:8e:50:24:86:73:ea:76:38:
                    78:1a:69:ed:4d:e1:e3:27:aa:14:bf:bc:58:5e:30:
                    7a:be:44:9c:5e:ad:83:3f:c4:75:78:c0:7b:d8:48:
                    ea:55:eb:df:3f:52:8a:d6:f4:cb:2b:cc:29:1c:c8:
                    55:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B1:E5:72:D9:B4:49:F6:B2:9B:63:21:4F:88:6A:B0:66:C7:EB:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/4d505fff-f719-381b-b822-2695a2e94aeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8240:ffff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:62:d8:9d:c8:a1:e6:55:df:af:af:71:e3:fc:5d:04:da:0c:
         71:86:da:32:8c:ec:8e:42:17:19:88:cd:fe:ce:05:89:d2:bd:
         39:0a:c3:09:93:00:57:b2:1b:db:aa:0b:73:99:ff:e1:87:bf:
         23:ba:01:30:9c:a0:01:b8:2d:b0:22:75:95:f3:81:8d:38:b7:
         5f:e9:32:e0:2b:d1:d5:a8:2b:41:5e:01:c9:b8:04:ae:4c:52:
         61:79:15:59:9e:fa:f9:64:ee:c5:1d:7d:9e:00:eb:52:20:b4:
         5e:aa:70:0e:36:4b:14:0f:dc:89:90:19:e3:e2:cc:56:a1:d9:
         fe:30:df:da:db:1e:32:5b:55:1f:d2:3f:fa:2c:e6:53:71:22:
         e9:83:17:39:5f:df:3a:5a:e1:75:be:96:38:37:4d:eb:e6:3f:
         fb:27:8b:73:18:f8:8f:81:1a:82:45:5d:fd:de:5b:11:ef:11:
         49:79:3e:de:30:ed:13:54:db:a8:67:26:b8:62:71:1b:96:6f:
         40:60:b2:26:be:bb:b2:1e:0c:ff:5c:ae:6a:47:03:0c:1a:b1:
         48:65:af:5c:2e:b8:f3:89:52:90:1b:a9:88:c9:0a:db:bc:dd:
         42:57:27:4b:f8:38:81:70:d8:d7:6d:ed:f9:69:c9:73:65:cc:
         86:89:d7:61
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jdc/3xPfOJggTlYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRlNWQ3NDYtMzQwMi00MjYzLWI4ODAtZWE0ZDdlY2Zj
MTY4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YTRjOWU1MTEtODBiZi00YTU4LWE5ZDgtYzQwMmQzZDJkYjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaCLUuucgLLnjnxKVSjDMji+On8YEZveZA0s
SQHdEUplXYldGAONXVoWDYBnou+uCbCh1aWySOFDDRqtCVkRGFp/ZFL0RUk85DK4
u/ZJu47YvgytJb3DrNGofjR6sQGO9k+jWJxif27Lyc4Q033RqIMr34TZcZv9YH5O
AbOlRXGTNgYSNIPfHAaeKdQNixeFllNDzOL2IKRLw6LhBCuHYaDCYA5w2XC6EmFX
hLHTVWCStdNJ23fQXdmKbyIKfYKVe3an7IDJ8xmIjlAkhnPqdjh4GmntTeHjJ6oU
v7xYXjB6vkScXq2DP8R1eMB72EjqVevfP1KK1vTLK8wpHMhVjQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPyx5XLZtEn2sptjIU+IarBmx+u/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1
ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2VjZmMxNjgvNGQ1MDVmZmYtZjcxOS0z
ODFiLWI4MjItMjY5NWEyZTk0YWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmRlNWQ3NDYtMzQwMi00MjYzLWI4
ODAtZWE0ZDdlY2ZjMTY4LzJkZTVkNzQ2LTM0MDItNDI2My1iODgwLWVhNGQ3ZWNm
YzE2OC5jcmwwHwYDVR0jBBgwFoAUa7vQBHnN1sRmwfvAalg6KhVtSHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRk
N2VjZmMxNjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgeCQP//
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAZi2J3IoeZV36+vceP8XQTaDHGG2jKM7I5CFxmIzf7OBYnSvTkK
wwmTAFeyG9uqC3OZ/+GHvyO6ATCcoAG4LbAidZXzgY04t1/pMuAr0dWoK0FeAcm4
BK5MUmF5FVme+vlk7sUdfZ4A61IgtF6qcA42SxQP3ImQGePizFah2f4w39rbHjJb
VR/SP/os5lNxIumDFzlf3zpa4XW+ljg3TevmP/sni3MY+I+BGoJFXf3eWxHvEUl5
Pt4w7RNU26hnJrhicRuWb0Bgsia+u7IeDP9crmpHAwwasUhlr1wuuPOJUpAbqYjJ
Ctu83UJXJ0v4OIFw2Ndt7flpyXNlzIaJ12E=
-----END CERTIFICATE-----
Generated at Sat Oct 3 14:33:01 2026 by rpki-client