Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/a8fdc26f-9a21-34da-bf10-4ad59495c1f8.roa
File:                     a8fdc26f-9a21-34da-bf10-4ad59495c1f8.roa (raw, json)
Hash identifier:          plKvowi+ola/hkJKxma8qvGuEjIAFRsPyd3qxAtRT9o=
Subject key identifier:   A3:1D:78:03:54:F1:0C:24:10:05:66:80:F2:EF:86:6D:7E:D0:69:B0
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F4328584DD8F0676631B2D19F150B1980
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/a8fdc26f-9a21-34da-bf10-4ad59495c1f8.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     400097
IP address blocks:        2606:3d40:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:67:66:31:b2:d1:9f:15:0b:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=7da4aa86-5023-4035-b224-b66029c5bc43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:34:08:66:ab:f8:ab:09:d4:3b:d4:9a:77:93:
                    a5:77:b8:e0:ed:f2:f4:cd:d7:d4:3d:b5:bc:41:7d:
                    47:62:07:dc:31:a1:08:4b:18:09:dd:5c:59:cc:86:
                    22:a8:88:ca:49:19:39:05:c1:c1:7c:f1:e0:3f:1c:
                    b1:83:50:44:9d:14:e7:49:2e:ac:01:91:71:be:e1:
                    9a:9d:3f:67:32:8a:22:3f:28:00:e3:5c:47:ad:93:
                    9a:77:5e:6e:6d:91:fc:1b:54:84:d7:63:ea:40:26:
                    39:81:8a:a9:c2:0a:3c:2b:2d:71:94:e1:6d:bd:61:
                    f1:23:90:dd:36:e1:70:df:7d:31:fe:28:fa:c1:2e:
                    8d:b1:4d:38:11:7d:08:ec:41:e8:56:a0:cd:85:ac:
                    b7:d6:e7:c2:86:b0:b4:31:92:75:65:0e:d6:40:cd:
                    06:ad:96:b3:e8:8b:aa:93:15:1d:6c:ab:01:2b:22:
                    f0:7e:fb:ba:ee:b7:7d:87:98:60:55:ee:52:03:99:
                    aa:af:ec:d7:b9:17:bf:cf:25:a9:e8:ab:6a:19:bf:
                    84:04:95:83:28:01:ca:f5:0a:63:16:09:d0:c4:32:
                    08:f9:0c:f0:ce:a2:cd:89:d3:06:88:a6:b5:28:2c:
                    86:53:f2:89:cb:99:58:3c:e1:b8:14:79:9a:d4:00:
                    7a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1D:78:03:54:F1:0C:24:10:05:66:80:F2:EF:86:6D:7E:D0:69:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/a8fdc26f-9a21-34da-bf10-4ad59495c1f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:eb:a9:29:8b:f0:e5:3b:d4:5d:d4:e4:56:a3:d6:97:b0:cb:
         e8:20:3e:d4:d3:46:24:40:7e:6b:d1:d8:8f:af:f8:e0:36:18:
         7f:9f:72:66:8f:d4:6b:a4:b3:c5:10:86:12:67:f7:3f:fd:21:
         08:65:ce:d5:d7:48:ae:38:81:12:6e:26:6c:3c:90:45:63:a6:
         2e:e9:07:4b:1f:1f:58:0d:68:8e:18:7a:c1:c1:b2:2b:5d:e1:
         0c:fd:6f:15:ba:93:a3:c5:7b:79:f5:37:0b:07:fb:41:75:e1:
         24:46:b8:b0:e3:ea:f7:7b:34:97:0d:51:3f:4f:58:6f:42:cb:
         e8:87:24:9e:94:b6:c8:c4:b3:7e:51:da:65:71:b4:41:73:76:
         8e:8a:6f:13:f3:89:94:93:01:12:39:a9:f7:da:04:26:cf:3b:
         17:b0:31:c4:87:f7:90:70:22:7c:b7:20:cb:66:81:7c:05:43:
         43:7b:f5:5f:07:ff:a9:4d:2c:e1:2b:a8:93:79:6d:8c:fe:bb:
         1a:5d:bf:ea:67:65:e9:8d:cd:ca:19:a1:cf:7a:23:2b:e2:1b:
         76:4b:9d:1d:fc:e5:8a:3c:b7:02:e4:d5:d2:f7:54:85:a4:92:
         9b:fe:a7:f6:f7:95:b6:df:20:48:24:00:86:46:a4:cd:82:2c:
         1d:4a:0b:03
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3Y8GdmMbLRnxULGYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy
NDVkMB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk
N2RhNGFhODYtNTAyMy00MDM1LWIyMjQtYjY2MDI5YzViYzQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTQIZqv4qwnUO9Sad5Old7jg7fL0zdfUPbW8
QX1HYgfcMaEISxgJ3VxZzIYiqIjKSRk5BcHBfPHgPxyxg1BEnRTnSS6sAZFxvuGa
nT9nMooiPygA41xHrZOad15ubZH8G1SE12PqQCY5gYqpwgo8Ky1xlOFtvWHxI5Dd
NuFw330x/ij6wS6NsU04EX0I7EHoVqDNhay31ufChrC0MZJ1ZQ7WQM0GrZaz6Iuq
kxUdbKsBKyLwfvu67rd9h5hgVe5SA5mqr+zXuRe/zyWp6KtqGb+EBJWDKAHK9Qpj
FgnQxDII+QzwzqLNidMGiKa1KCyGU/KJy5lYPOG4FHma1AB6uwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKMdeANU8QwkEAVmgPLvhm1+0GmwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi
NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvYThmZGMyNmYtOWEyMS0z
NGRhLWJmMTAtNGFkNTk0OTVjMWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl
YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi
MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx
MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QAAG
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAHrqSmL8OU71F3U5Faj1pewy+ggPtTTRiRAfmvR2I+v+OA2GH+f
cmaP1Guks8UQhhJn9z/9IQhlztXXSK44gRJuJmw8kEVjpi7pB0sfH1gNaI4YesHB
sitd4Qz9bxW6k6PFe3n1NwsH+0F14SRGuLDj6vd7NJcNUT9PWG9Cy+iHJJ6UtsjE
s35R2mVxtEFzdo6KbxPziZSTARI5qffaBCbPOxewMcSH95BwIny3IMtmgXwFQ0N7
9V8H/6lNLOErqJN5bYz+uxpdv+pnZemNzcoZoc96IyviG3ZLnR385Yo8twLk1dL3
VIWkkpv+p/b3lbbfIEgkAIZGpM2CLB1KCwM=
-----END CERTIFICATE-----
Generated at Mon May 25 02:55:17 2026 by rpki-client