Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/4540e5d3-46e3-3ed7-869a-f2feb5431daa.roa
File:                     4540e5d3-46e3-3ed7-869a-f2feb5431daa.roa (raw, json)
Hash identifier:          s4r0q3tv1iELh0rnv7gbO4Yoib4q0vmlBekjMHv57oQ=
Subject key identifier:   4E:5B:2F:8E:FA:91:5B:F0:22:ED:ED:F0:D2:5E:0F:10:22:15:93:BD
Certificate issuer:       /CN=1cf4d4e0-24be-4d3b-9028-c14846f6b0f3
Certificate serial:       010D0C9F4328584E7FFA2A8D8CB731B2D784F500
Authority key identifier: 91:8F:8A:57:12:0B:3C:A3:C2:E0:06:E1:41:57:10:31:67:EF:25:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/4540e5d3-46e3-3ed7-869a-f2feb5431daa.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     6304
IP address blocks:        2602:f714::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:2a:8d:8c:b7:31:b2:d7:84:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf4d4e0-24be-4d3b-9028-c14846f6b0f3
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=731e54ff-7eb8-4925-9f8b-758985d93d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:71:42:93:3a:33:14:d6:4b:14:48:46:94:49:
                    cd:7e:cd:32:c5:b5:1d:88:97:e2:e9:29:b1:c3:29:
                    d1:04:17:47:0f:29:00:b5:b1:c5:89:41:c2:4a:2c:
                    2f:cc:75:5b:da:82:2a:e1:7e:bf:7c:a6:78:2a:1c:
                    9f:a4:1b:00:d3:8b:55:d5:65:54:48:ef:b2:e6:af:
                    33:61:38:df:ad:e9:7d:f5:6d:58:f8:a3:1e:7c:19:
                    05:c6:f9:5e:af:fc:24:36:a0:d6:12:69:2d:91:f9:
                    b4:72:74:53:4f:cd:a7:5e:f3:bb:5b:2b:2c:96:be:
                    ab:b0:eb:19:5a:d7:d3:59:00:d5:e5:fa:8d:c6:25:
                    90:5c:db:0c:b1:e8:c2:bc:4f:ec:18:a6:ad:4d:32:
                    06:4b:27:21:60:27:76:33:05:da:c1:22:58:af:52:
                    19:b9:41:9a:37:15:af:c1:d7:4e:78:a1:e9:49:8b:
                    41:d7:8d:6f:03:81:09:9e:1b:89:1f:0c:7b:43:c6:
                    cc:09:38:49:0d:3d:e5:64:fa:fe:12:5c:fd:80:ea:
                    b4:6f:2d:00:b8:fe:73:0a:06:a1:71:6a:ba:61:84:
                    60:7f:91:a7:01:93:89:1e:1e:84:df:52:91:a4:05:
                    06:1b:aa:79:eb:f2:6c:ab:38:b1:64:09:28:60:78:
                    c1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5B:2F:8E:FA:91:5B:F0:22:ED:ED:F0:D2:5E:0F:10:22:15:93:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/4540e5d3-46e3-3ed7-869a-f2feb5431daa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.crl

            X509v3 Authority Key Identifier:
                keyid:91:8F:8A:57:12:0B:3C:A3:C2:E0:06:E1:41:57:10:31:67:EF:25:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f714::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:f0:d5:18:4a:d9:f3:e2:7a:05:b2:56:7c:35:e2:81:b1:2b:
         88:c4:31:dc:7f:74:60:b3:2c:c3:2e:92:af:1e:05:78:bb:c6:
         d5:74:b3:da:ee:b7:e8:dd:6b:4c:a7:81:4d:8f:ac:2b:ed:b1:
         1b:c8:58:c5:a8:80:c8:2d:d2:21:54:3f:16:8f:72:d1:47:04:
         47:cd:3b:b6:6e:3e:2f:27:fc:9a:6b:aa:03:6e:fe:f9:6e:8a:
         7b:32:54:69:de:b1:2d:a3:1c:9d:4a:7e:34:cf:13:fa:28:c7:
         af:ba:e8:b0:a1:76:d4:87:8e:5f:bc:e4:c4:8e:d3:aa:3e:fd:
         2c:7e:03:af:5a:c9:08:da:26:b0:1a:ca:53:6e:e7:57:79:2b:
         ed:86:86:ac:26:b8:3d:d5:15:96:ba:48:42:21:78:f9:60:b1:
         5f:39:dc:a8:ad:01:ff:cf:4e:29:73:71:8c:89:61:75:a0:11:
         89:a0:45:e0:41:1a:66:87:8e:a8:dd:01:3c:75:d4:18:94:44:
         a8:8b:fa:06:59:e0:f6:92:dd:45:ab:d3:bb:03:be:3e:71:8e:
         15:86:48:f7:4e:2d:7d:56:54:36:a9:a1:f0:9c:1e:2b:cb:43:
         61:8e:96:85:94:39:4e:ae:07:f8:23:f5:c3:da:49:1b:ae:b1:
         78:f6:19:4b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5/+iqNjLcxsteE9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWNmNGQ0ZTAtMjRiZS00ZDNiLTkwMjgtYzE0ODQ2ZjZi
MGYzMB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk
NzMxZTU0ZmYtN2ViOC00OTI1LTlmOGItNzU4OTg1ZDkzZDVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53FCkzozFNZLFEhGlEnNfs0yxbUdiJfi6Smx
wynRBBdHDykAtbHFiUHCSiwvzHVb2oIq4X6/fKZ4KhyfpBsA04tV1WVUSO+y5q8z
YTjfrel99W1Y+KMefBkFxvler/wkNqDWEmktkfm0cnRTT82nXvO7Wysslr6rsOsZ
WtfTWQDV5fqNxiWQXNsMsejCvE/sGKatTTIGSychYCd2MwXawSJYr1IZuUGaNxWv
wddOeKHpSYtB141vA4EJnhuJHwx7Q8bMCThJDT3lZPr+Elz9gOq0by0AuP5zCgah
cWq6YYRgf5GnAZOJHh6E31KRpAUGG6p56/JsqzixZAkoYHjBdQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFE5bL476kVvwIu3t8NJeDxAiFZO9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xY2Y0
ZDRlMC0yNGJlLTRkM2ItOTAyOC1jMTQ4NDZmNmIwZjMvNDU0MGU1ZDMtNDZlMy0z
ZWQ3LTg2OWEtZjJmZWI1NDMxZGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWNmNGQ0ZTAtMjRiZS00ZDNiLTkw
MjgtYzE0ODQ2ZjZiMGYzLzFjZjRkNGUwLTI0YmUtNGQzYi05MDI4LWMxNDg0NmY2
YjBmMy5jcmwwHwYDVR0jBBgwFoAUkY+KVxILPKPC4AbhQVcQMWfvJbYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8xY2Y0ZDRlMC0yNGJlLTRkM2ItOTAyOC1jMTQ4
NDZmNmIwZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3FAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAUPDVGErZ8+J6BbJWfDXigbEriMQx3H90YLMswy6Srx4FeLvG1XSz
2u636N1rTKeBTY+sK+2xG8hYxaiAyC3SIVQ/Fo9y0UcER807tm4+Lyf8mmuqA27+
+W6KezJUad6xLaMcnUp+NM8T+ijHr7rosKF21IeOX7zkxI7Tqj79LH4Dr1rJCNom
sBrKU27nV3kr7YaGrCa4PdUVlrpIQiF4+WCxXzncqK0B/89OKXNxjIlhdaARiaBF
4EEaZoeOqN0BPHXUGJREqIv6Blng9pLdRavTuwO+PnGOFYZI904tfVZUNqmh8Jwe
K8tDYY6WhZQ5Tq4H+CP1w9pJG66xePYZSw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:50:02 2026 by rpki-client