Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/1256e8f1-f8bd-3361-8ac6-61b8e1e6f915.roa
File:                     1256e8f1-f8bd-3361-8ac6-61b8e1e6f915.roa (raw, json)
Hash identifier:          +frnVMfcTMq5pOymUIRBlH3QWmsPgeuCgYUwPPISQ4c=
Subject key identifier:   68:D6:69:14:9B:FB:1D:7D:D7:43:6D:0B:9A:17:BF:D7:70:B0:A8:40
Certificate issuer:       /CN=b43c5615-9630-4bab-8258-f3b32e00f304
Certificate serial:       010D0C9F4328584E4C548D377AE638EB7E47CAC0
Authority key identifier: F8:68:64:D8:02:6E:DD:51:CD:3C:54:F5:81:BF:E8:A0:A1:30:FC:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/1256e8f1-f8bd-3361-8ac6-61b8e1e6f915.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     213798
IP address blocks:        2602:f8c4:1000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/b43c5615-9630-4bab-8258-f3b32e00f304.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/b43c5615-9630-4bab-8258-f3b32e00f304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:8d:37:7a:e6:38:eb:7e:47:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b43c5615-9630-4bab-8258-f3b32e00f304
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=25f8fa1a-9935-445c-a03e-a4d93fefec04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f4:da:7d:b1:39:e6:7f:47:41:d9:93:b4:a2:
                    97:50:67:cc:1b:fa:9d:cc:36:fb:ef:3f:f2:e7:ac:
                    93:3f:7d:78:f1:8b:7e:87:26:3e:8a:b8:ed:cb:2e:
                    88:58:e0:3a:8d:e8:b4:ce:c3:ff:2d:4f:3f:9a:d8:
                    4b:37:6d:76:d3:19:f6:78:cc:f1:c9:72:7e:2f:d5:
                    df:41:b5:63:86:b6:f4:fd:fd:52:3c:1b:42:11:56:
                    b2:12:ac:b8:fc:09:4b:3b:e4:58:6a:8a:38:33:d8:
                    43:ec:9a:aa:c9:56:b4:dc:4f:46:15:9f:8c:d8:c3:
                    07:48:d5:08:ed:93:94:ca:ee:e6:40:c6:d1:6c:f9:
                    f5:0b:99:62:96:3c:be:50:20:30:84:03:39:a1:5a:
                    3c:a4:42:9d:5e:34:04:34:fb:88:cf:25:ea:90:55:
                    9d:30:63:c8:06:a9:0f:cc:f3:58:30:1c:18:02:c6:
                    a6:ec:42:3d:6e:b7:1c:e6:22:ee:fd:28:73:4e:16:
                    74:fe:13:5e:1f:5f:3c:4a:e5:6b:db:51:e4:96:0b:
                    51:e1:47:57:1a:72:16:13:2f:a5:df:7c:ec:26:57:
                    37:1b:eb:6b:15:1a:a1:5f:46:ee:f6:b0:ee:77:7b:
                    53:96:3c:43:2f:ed:d2:fd:26:74:25:e9:ca:9e:5c:
                    12:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D6:69:14:9B:FB:1D:7D:D7:43:6D:0B:9A:17:BF:D7:70:B0:A8:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/1256e8f1-f8bd-3361-8ac6-61b8e1e6f915.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/b43c5615-9630-4bab-8258-f3b32e00f304.crl

            X509v3 Authority Key Identifier:
                keyid:F8:68:64:D8:02:6E:DD:51:CD:3C:54:F5:81:BF:E8:A0:A1:30:FC:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8c4:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:c8:77:63:c8:ff:52:e2:d7:00:9e:80:b9:df:01:bd:08:43:
         ed:fe:b2:82:39:a4:6d:cf:9d:c8:ff:bd:c5:ad:d8:a1:bf:85:
         a5:52:bf:4c:88:45:3a:67:db:89:9a:da:5f:48:84:f9:46:e1:
         b9:b9:4c:65:46:c1:7c:a9:a5:bb:70:e2:58:19:be:76:19:d4:
         ee:3a:38:df:d5:8b:fa:84:b7:5b:44:6f:97:4f:38:e3:19:4a:
         f6:68:d3:2b:a7:79:08:a5:8f:be:fd:0c:6b:4b:cb:df:37:79:
         00:b0:75:4e:79:5c:b3:53:c5:6b:5b:84:f6:06:2f:c8:b9:62:
         21:39:c9:58:f5:7a:1c:51:45:0e:23:66:35:26:46:87:26:26:
         b7:27:a4:58:e7:1b:da:5e:52:92:64:1d:dc:9d:f5:5b:be:d6:
         c8:51:be:dd:73:53:1c:30:86:73:8f:23:32:42:29:0c:03:fc:
         4f:16:04:a9:1e:b0:69:b7:fd:47:0d:89:ba:7c:db:06:b0:c2:
         e2:7a:05:53:8e:1c:6f:63:0f:8c:d3:50:68:24:ef:c7:7c:c5:
         d0:33:b8:56:f9:13:57:32:88:c6:ea:39:5c:b4:0b:a9:09:3b:
         ed:f8:25:84:34:b8:fd:32:bd:bb:01:a4:76:b5:36:c4:c5:eb:
         a6:3e:7e:8f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5MVI03euY4635HysAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzYzU2MTUtOTYzMC00YmFiLTgyNTgtZjNiMzJlMDBm
MzA0MB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk
MjVmOGZhMWEtOTkzNS00NDVjLWEwM2UtYTRkOTNmZWZlYzA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfTafbE55n9HQdmTtKKXUGfMG/qdzDb77z/y
56yTP3148Yt+hyY+irjtyy6IWOA6jei0zsP/LU8/mthLN2120xn2eMzxyXJ+L9Xf
QbVjhrb0/f1SPBtCEVayEqy4/AlLO+RYaoo4M9hD7JqqyVa03E9GFZ+M2MMHSNUI
7ZOUyu7mQMbRbPn1C5liljy+UCAwhAM5oVo8pEKdXjQENPuIzyXqkFWdMGPIBqkP
zPNYMBwYAsam7EI9brcc5iLu/ShzThZ0/hNeH188SuVr21HklgtR4UdXGnIWEy+l
33zsJlc3G+trFRqhX0bu9rDud3tTljxDL+3S/SZ0JenKnlwSZQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGjWaRSb+x1910NtC5oXv9dwsKhAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iNDNj
NTYxNS05NjMwLTRiYWItODI1OC1mM2IzMmUwMGYzMDQvMTI1NmU4ZjEtZjhiZC0z
MzYxLThhYzYtNjFiOGUxZTZmOTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjQzYzU2MTUtOTYzMC00YmFiLTgy
NTgtZjNiMzJlMDBmMzA0L2I0M2M1NjE1LTk2MzAtNGJhYi04MjU4LWYzYjMyZTAw
ZjMwNC5jcmwwHwYDVR0jBBgwFoAU+Ghk2AJu3VHNPFT1gb/ooKEw/CwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iNDNjNTYxNS05NjMwLTRiYWItODI1OC1mM2Iz
MmUwMGYzMDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4xBAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAbch3Y8j/UuLXAJ6Aud8BvQhD7f6ygjmkbc+dyP+9xa3Yob+FpVK/
TIhFOmfbiZraX0iE+UbhublMZUbBfKmlu3DiWBm+dhnU7jo439WL+oS3W0Rvl084
4xlK9mjTK6d5CKWPvv0Ma0vL3zd5ALB1Tnlcs1PFa1uE9gYvyLliITnJWPV6HFFF
DiNmNSZGhyYmtyekWOcb2l5SkmQd3J31W77WyFG+3XNTHDCGc48jMkIpDAP8TxYE
qR6wabf9Rw2JunzbBrDC4noFU44cb2MPjNNQaCTvx3zF0DO4VvkTVzKIxuo5XLQL
qQk77fglhDS4/TK9uwGkdrU2xMXrpj5+jw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:24:21 2026 by rpki-client