Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c8a2ab43-0c26-4824-b796-4892f6a7c9bc/07a6b943-4c71-36b6-9984-3d0a48505aea.roa
File:                     07a6b943-4c71-36b6-9984-3d0a48505aea.roa (raw, json)
Hash identifier:          Yy1PmHNRvL4YVaD+hM+xya5faDa5itXiVFYvLwrWj+Q=
Subject key identifier:   30:83:1A:32:D6:3D:27:EB:53:12:19:0B:86:12:D7:7F:A1:6B:48:EA
Certificate issuer:       /CN=c8a2ab43-0c26-4824-b796-4892f6a7c9bc
Certificate serial:       010D0C9F4328584F4974553793DDEA8054C94180
Authority key identifier: F3:8B:E0:1B:1C:26:4B:A1:0E:12:3E:1B:D7:2C:E0:C8:FD:CC:2D:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c8a2ab43-0c26-4824-b796-4892f6a7c9bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c8a2ab43-0c26-4824-b796-4892f6a7c9bc/07a6b943-4c71-36b6-9984-3d0a48505aea.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23262
IP address blocks:        2604:4380::/36 maxlen: 36
                          2604:4380:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c8a2ab43-0c26-4824-b796-4892f6a7c9bc/c8a2ab43-0c26-4824-b796-4892f6a7c9bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c8a2ab43-0c26-4824-b796-4892f6a7c9bc/c8a2ab43-0c26-4824-b796-4892f6a7c9bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c8a2ab43-0c26-4824-b796-4892f6a7c9bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:55:37:93:dd:ea:80:54:c9:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8a2ab43-0c26-4824-b796-4892f6a7c9bc
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f96048db-d604-44c0-81a0-157ea045d2c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7b:81:ee:35:9f:b8:3c:b1:78:d8:2e:8b:76:
                    23:cb:6d:9f:ae:f8:d5:16:47:8d:e9:ff:66:6e:a8:
                    17:49:e2:10:58:5e:2b:cb:a1:2a:2c:cb:9d:ee:64:
                    fc:a9:fc:94:e7:04:df:ef:82:b3:51:47:90:2f:5b:
                    98:52:bf:1c:82:17:bc:bb:06:59:79:61:8e:3c:ff:
                    80:e2:e7:c8:b7:5b:c5:36:b2:87:38:ed:d0:ad:8e:
                    ff:0a:d1:97:cf:e6:70:f8:c1:fb:a3:a3:dc:95:ec:
                    25:08:61:74:09:5a:fe:f2:66:fa:5a:a1:c6:0e:f5:
                    d1:10:1a:d0:1d:e5:6e:d0:1d:9b:7f:7c:b7:05:c0:
                    bf:22:32:e1:0f:d1:ad:0e:6f:d5:b4:1c:c4:67:0e:
                    de:d4:d0:ae:42:3a:bf:cf:0e:84:77:b2:cd:e3:21:
                    e3:04:f9:95:42:77:68:9b:6d:f5:61:04:b2:94:4e:
                    e6:46:45:dc:c0:85:62:69:2b:d3:6b:2d:59:ae:59:
                    cc:bf:b5:4d:83:7c:ca:f7:cf:9f:7e:b4:57:cc:20:
                    4a:34:cf:e5:bb:6e:72:e9:27:28:50:fe:d3:e6:70:
                    a3:b9:9a:60:c0:82:9a:b8:f5:eb:8d:1a:86:5e:14:
                    36:9e:3a:9a:78:9b:67:b8:a7:cc:b6:17:77:fb:11:
                    a5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:83:1A:32:D6:3D:27:EB:53:12:19:0B:86:12:D7:7F:A1:6B:48:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c8a2ab43-0c26-4824-b796-4892f6a7c9bc/07a6b943-4c71-36b6-9984-3d0a48505aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c8a2ab43-0c26-4824-b796-4892f6a7c9bc/c8a2ab43-0c26-4824-b796-4892f6a7c9bc.crl

            X509v3 Authority Key Identifier:
                keyid:F3:8B:E0:1B:1C:26:4B:A1:0E:12:3E:1B:D7:2C:E0:C8:FD:CC:2D:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c8a2ab43-0c26-4824-b796-4892f6a7c9bc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4380::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:72:0d:1b:ab:8a:c0:5f:8e:e6:df:4a:fd:3e:ec:a8:36:5e:
         ce:c4:37:c8:85:47:b6:a7:78:dd:34:2f:7f:ca:2b:d9:78:cb:
         a6:10:45:7e:e8:35:52:a3:3d:1b:bf:2d:ce:92:0c:22:8e:63:
         e2:16:26:dc:1d:3f:50:86:71:15:66:cd:11:e8:ec:79:7e:21:
         ea:d8:5b:44:e6:8e:ff:c2:14:9f:0e:2b:d9:c9:6e:b9:a7:1a:
         3e:95:f7:eb:e5:c9:d4:94:da:c0:4f:a5:32:35:23:35:2c:f2:
         83:dd:7c:f1:33:f9:c7:5a:be:d6:a9:d4:df:63:df:5f:a3:7a:
         7d:1b:62:9f:93:c2:53:84:69:ce:15:c6:c2:67:13:a0:c0:d6:
         f3:b7:8f:5f:b6:9b:ce:ff:04:39:4c:d9:88:71:e7:e3:38:01:
         c7:02:e1:63:03:12:be:3d:61:c6:f9:01:77:e1:f4:7a:68:a6:
         3c:26:fa:bf:29:1d:3e:b2:ff:96:5e:8e:76:ad:12:90:08:c7:
         ea:b1:96:e3:77:3e:a1:c7:5b:68:87:6d:8f:3d:3d:04:a3:d5:
         aa:87:53:64:5f:74:f5:2d:02:e7:72:4c:e7:65:91:73:35:97:
         c6:6d:a7:3e:7e:ca:0a:8c:eb:65:c2:e6:a5:db:a4:24:93:66:
         2f:5c:54:dc
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdFU3k93qgFTJQYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzhhMmFiNDMtMGMyNi00ODI0LWI3OTYtNDg5MmY2YTdj
OWJjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Zjk2MDQ4ZGItZDYwNC00NGMwLTgxYTAtMTU3ZWEwNDVkMmMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHuB7jWfuDyxeNgui3Yjy22frvjVFkeN6f9m
bqgXSeIQWF4ry6EqLMud7mT8qfyU5wTf74KzUUeQL1uYUr8cghe8uwZZeWGOPP+A
4ufIt1vFNrKHOO3QrY7/CtGXz+Zw+MH7o6PclewlCGF0CVr+8mb6WqHGDvXREBrQ
HeVu0B2bf3y3BcC/IjLhD9GtDm/VtBzEZw7e1NCuQjq/zw6Ed7LN4yHjBPmVQndo
m231YQSylE7mRkXcwIViaSvTay1ZrlnMv7VNg3zK98+ffrRXzCBKNM/lu25y6Sco
UP7T5nCjuZpgwIKauPXrjRqGXhQ2njqaeJtnuKfMthd3+xGlCQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDCDGjLWPSfrUxIZC4YS13+ha0jqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jOGEy
YWI0My0wYzI2LTQ4MjQtYjc5Ni00ODkyZjZhN2M5YmMvMDdhNmI5NDMtNGM3MS0z
NmI2LTk5ODQtM2QwYTQ4NTA1YWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYzhhMmFiNDMtMGMyNi00ODI0LWI3
OTYtNDg5MmY2YTdjOWJjL2M4YTJhYjQzLTBjMjYtNDgyNC1iNzk2LTQ4OTJmNmE3
YzliYy5jcmwwHwYDVR0jBBgwFoAU84vgGxwmS6EOEj4b1yzgyP3MLb0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jOGEyYWI0My0wYzI2LTQ4MjQtYjc5Ni00ODky
ZjZhN2M5YmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgRDgAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAh3ING6uKwF+O5t9K/T7sqDZezsQ3yIVHtqd43TQvf8or2XjLphBF
fug1UqM9G78tzpIMIo5j4hYm3B0/UIZxFWbNEejseX4h6thbROaO/8IUnw4r2clu
uacaPpX36+XJ1JTawE+lMjUjNSzyg9188TP5x1q+1qnU32PfX6N6fRtin5PCU4Rp
zhXGwmcToMDW87ePX7abzv8EOUzZiHHn4zgBxwLhYwMSvj1hxvkBd+H0emimPCb6
vykdPrL/ll6Odq0SkAjH6rGW43c+ocdbaIdtjz09BKPVqodTZF909S0C53JM52WR
czWXxm2nPn7KCozrZcLmpdukJJNmL1xU3A==
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:15:57 2026 by rpki-client