Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/c523154b-c7f2-3606-a21c-a30854fcb6bb.roa
File:                     c523154b-c7f2-3606-a21c-a30854fcb6bb.roa (raw, json)
Hash identifier:          PizTmGGRyKBoNtOpHoyqnyMtay96Ga0ZdisD4hA69nA=
Subject key identifier:   3F:47:D1:52:C7:90:C5:A6:09:ED:AE:38:48:3C:46:AA:66:65:D3:0C
Certificate issuer:       /CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8
Certificate serial:       010D0C9F4328584EF01CCAF548D4E092AD515C80
Authority key identifier: D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/c523154b-c7f2-3606-a21c-a30854fcb6bb.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        2620:117:507c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:ca:f5:48:d4:e0:92:ad:51:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=6a936d72-b259-42d5-8643-618e60dafab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:23:b0:40:5f:ce:51:b7:79:92:2f:2a:72:54:
                    05:c6:08:09:be:b4:77:69:f9:22:cc:64:e7:cb:52:
                    83:63:f8:70:c6:c0:97:5d:5b:93:10:7b:d2:58:4a:
                    85:57:c0:5c:2c:c0:37:e1:ef:a7:51:cf:57:c7:3e:
                    75:98:01:a7:f3:80:ec:99:fb:4e:f3:e5:49:52:19:
                    a0:6a:5f:2c:be:90:51:7b:e2:dd:79:10:48:2b:5d:
                    f5:29:2e:ca:e5:11:52:f3:83:1b:62:60:a4:c4:e3:
                    74:d5:1f:d1:f4:6d:c2:fa:7b:aa:1b:e7:58:7c:d0:
                    55:9b:b7:56:2d:83:ca:55:1e:57:e6:49:27:cb:47:
                    af:1f:b4:a6:59:60:cc:a8:aa:a2:d3:33:2f:f5:8b:
                    c1:33:f1:26:80:dc:99:0d:46:7d:91:35:88:49:52:
                    9c:b7:8f:16:7d:67:84:28:73:f4:fe:82:95:71:9c:
                    e8:bc:c0:df:13:3f:44:3f:4c:25:1e:fc:2a:b2:bb:
                    9d:44:53:43:96:77:9b:d6:13:61:84:12:9d:57:60:
                    93:8c:3d:c0:7e:ed:49:20:b2:40:da:0a:2f:0d:c2:
                    ca:56:17:e1:84:b4:42:3e:24:b7:58:39:25:e5:07:
                    f6:47:77:06:e0:bf:18:ef:09:c4:b7:13:fe:b3:7a:
                    15:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:47:D1:52:C7:90:C5:A6:09:ED:AE:38:48:3C:46:AA:66:65:D3:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/c523154b-c7f2-3606-a21c-a30854fcb6bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl

            X509v3 Authority Key Identifier:
                keyid:D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:117:507c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:e3:63:dd:11:42:fb:23:5b:24:51:13:64:45:4e:d0:b9:1e:
         3b:f6:92:3d:93:97:66:7b:e9:3e:8f:ef:9a:79:1b:32:7b:d3:
         37:cb:a9:07:23:15:99:85:c5:fe:a6:37:05:5f:df:71:89:94:
         66:30:55:8e:af:f7:9d:8a:b0:1d:a5:5f:92:c5:dc:6b:7b:03:
         8f:14:6d:65:92:16:7c:8f:c9:a3:d2:3f:d2:5b:53:fb:e1:fd:
         21:fa:47:04:d8:3f:2c:01:be:85:dd:c3:3e:7a:4c:97:28:5b:
         10:f3:31:b5:09:d6:1c:43:9e:87:94:8a:53:be:64:ea:46:9c:
         83:cc:53:71:3d:e3:7a:18:df:8d:a4:1b:c6:04:af:4a:fb:b3:
         c3:00:f3:e4:0a:a6:40:a4:3d:0f:b8:9e:5b:b4:7b:cc:ab:a0:
         f1:3f:fa:38:29:34:1e:52:a5:ed:e4:16:c1:52:38:79:72:1d:
         7e:ac:30:b1:8c:bb:22:46:66:b2:97:96:84:2f:bc:5b:c2:51:
         5a:f5:0c:20:55:93:3a:ee:7c:83:12:f8:d4:ce:14:a2:e2:a9:
         d0:8d:2b:2e:06:ee:e5:46:0e:ca:89:2b:18:69:b4:8d:ce:89:
         f7:05:69:97:48:30:58:b8:e5:7e:a9:6e:74:7b:c6:52:17:94:
         7d:ff:89:ff
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7wHMr1SNTgkq1RXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTU1MGY2NGMtNDYzMy00NWYwLWI4OTYtM2FjN2JkZjdl
NWI4MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
NmE5MzZkNzItYjI1OS00MmQ1LTg2NDMtNjE4ZTYwZGFmYWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCOwQF/OUbd5ki8qclQFxggJvrR3afkizGTn
y1KDY/hwxsCXXVuTEHvSWEqFV8BcLMA34e+nUc9Xxz51mAGn84DsmftO8+VJUhmg
al8svpBRe+LdeRBIK131KS7K5RFS84MbYmCkxON01R/R9G3C+nuqG+dYfNBVm7dW
LYPKVR5X5kkny0evH7SmWWDMqKqi0zMv9YvBM/EmgNyZDUZ9kTWISVKct48WfWeE
KHP0/oKVcZzovMDfEz9EP0wlHvwqsrudRFNDlneb1hNhhBKdV2CTjD3Afu1JILJA
2govDcLKVhfhhLRCPiS3WDkl5Qf2R3cG4L8Y7wnEtxP+s3oVfwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD9H0VLHkMWmCe2uOEg8RqpmZdMMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNTUw
ZjY0Yy00NjMzLTQ1ZjAtYjg5Ni0zYWM3YmRmN2U1YjgvYzUyMzE1NGItYzdmMi0z
NjA2LWEyMWMtYTMwODU0ZmNiNmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTU1MGY2NGMtNDYzMy00NWYwLWI4
OTYtM2FjN2JkZjdlNWI4L2E1NTBmNjRjLTQ2MzMtNDVmMC1iODk2LTNhYzdiZGY3
ZTViOC5jcmwwHwYDVR0jBBgwFoAU0bK/CQCZzu0rGnHmo5haYV5HPtAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNTUwZjY0Yy00NjMzLTQ1ZjAtYjg5Ni0zYWM3
YmRmN2U1YjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABF1B8
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAL/jY90RQvsjWyRRE2RFTtC5Hjv2kj2Tl2Z76T6P75p5GzJ70zfL
qQcjFZmFxf6mNwVf33GJlGYwVY6v952KsB2lX5LF3Gt7A48UbWWSFnyPyaPSP9Jb
U/vh/SH6RwTYPywBvoXdwz56TJcoWxDzMbUJ1hxDnoeUilO+ZOpGnIPMU3E943oY
342kG8YEr0r7s8MA8+QKpkCkPQ+4nlu0e8yroPE/+jgpNB5Spe3kFsFSOHlyHX6s
MLGMuyJGZrKXloQvvFvCUVr1DCBVkzrufIMS+NTOFKLiqdCNKy4G7uVGDsqJKxhp
tI3OifcFaZdIMFi45X6pbnR7xlIXlH3/if8=
-----END CERTIFICATE-----
Generated at Sun Oct 4 07:47:34 2026 by rpki-client