Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4b908f77-6738-3091-ba08-0e32e4f0d4c3.roa
File:                     4b908f77-6738-3091-ba08-0e32e4f0d4c3.roa (raw, json)
Hash identifier:          u1otlIZveG/DMSiw5v6nsOn1/oD61SFmpRwxQkiqicc=
Subject key identifier:   B9:37:16:C9:BB:3B:12:32:BA:14:E5:96:9B:E0:94:84:D0:7C:34:59
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EDDF74553041C94ADC6B60480
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4b908f77-6738-3091-ba08-0e32e4f0d4c3.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     22616
IP address blocks:        2605:4300:1e00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:45:53:04:1c:94:ad:c6:b6:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=07fa843b-7f65-473d-95be-4c523399f2f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7a:ef:04:2b:0f:73:09:1c:de:71:42:bf:b9:
                    b7:88:5c:70:9c:07:68:72:a5:92:62:8d:9d:88:5f:
                    ae:97:5a:09:b1:a4:e6:ab:fa:a2:33:46:4d:12:85:
                    bc:33:60:a4:8f:7d:3d:60:c6:01:15:e3:c8:9c:42:
                    74:11:0b:5f:27:5e:c5:95:73:98:5d:0f:70:d0:eb:
                    b1:34:a3:af:fb:13:93:e8:fc:c2:69:85:6d:b8:17:
                    44:f4:eb:b0:ac:a8:4c:a7:93:74:a7:75:b1:85:c3:
                    a1:a0:93:90:da:cc:2a:f7:5d:8f:74:07:0c:85:f9:
                    f0:5c:db:3a:cb:3a:b4:9b:ee:ec:13:b7:bb:8a:82:
                    58:63:fa:8c:8d:22:9f:da:a4:6b:93:95:5f:11:08:
                    d7:1a:7e:71:cc:99:ed:f8:58:c6:8e:15:37:56:f1:
                    3e:59:e5:91:1f:c3:ee:29:37:cc:8f:2d:08:5f:b2:
                    7c:90:2d:59:59:35:fe:1b:3d:d9:2a:10:ee:7f:c9:
                    78:ec:48:7c:a7:db:3e:9c:bd:b1:4f:cb:f1:14:7b:
                    9e:86:10:37:ef:e9:9d:85:86:64:98:b2:20:0c:af:
                    99:8b:06:2b:9e:38:a7:ac:d8:de:b7:4e:19:42:df:
                    42:b5:5b:77:6a:9c:c4:71:f2:d7:e6:5a:98:c1:84:
                    13:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:37:16:C9:BB:3B:12:32:BA:14:E5:96:9B:E0:94:84:D0:7C:34:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4b908f77-6738-3091-ba08-0e32e4f0d4c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:1e00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:f0:65:0f:4f:06:a0:8f:f5:29:30:64:4c:6e:e8:00:44:70:
         51:8f:8e:4e:92:b3:e4:3b:ac:51:29:6b:89:dd:b8:d4:e6:54:
         72:fd:09:25:42:e0:d2:c0:d1:79:30:49:b0:04:7c:75:b3:a4:
         02:7a:58:4b:76:ec:ad:61:cb:96:da:f0:4e:7f:d7:ae:42:b1:
         0a:a5:b4:34:4b:88:36:c5:94:10:7d:c1:d1:b5:05:89:89:87:
         46:bf:29:97:1d:fb:35:34:86:c5:46:ca:9c:3d:ba:5b:87:a5:
         a5:2d:fb:08:ce:91:f0:48:46:92:5f:ee:5c:be:59:be:33:c2:
         44:a1:52:79:e2:f6:c9:fe:97:0e:aa:5a:d0:99:87:52:79:6e:
         b1:6c:66:16:d1:e2:43:11:63:d6:eb:56:5f:ea:95:c9:b7:7c:
         b8:69:63:1f:12:79:c8:43:9f:67:9e:28:75:5a:80:e5:e9:15:
         3b:1f:72:f3:80:89:cf:28:c3:8b:39:e9:7e:3e:1c:1c:2c:c6:
         ac:e6:3c:66:f2:65:bf:14:bd:69:9e:89:e8:bd:65:c2:5d:90:
         06:5a:17:05:14:ec:2b:08:e9:6b:0d:a4:a6:e0:2a:9b:f5:c4:
         ed:6f:de:8a:e9:85:78:44:34:73:55:d4:c5:7d:6f:bd:f3:24:
         2e:eb:eb:d8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7d90VTBByUrca2BIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MDgxNzEzMDAxMVoXDTI2MTExNTE0MDAxMVowLzEtMCsGA1UEAxMk
MDdmYTg0M2ItN2Y2NS00NzNkLTk1YmUtNGM1MjMzOTlmMmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHrvBCsPcwkc3nFCv7m3iFxwnAdocqWSYo2d
iF+ul1oJsaTmq/qiM0ZNEoW8M2Ckj309YMYBFePInEJ0EQtfJ17FlXOYXQ9w0Oux
NKOv+xOT6PzCaYVtuBdE9OuwrKhMp5N0p3WxhcOhoJOQ2swq912PdAcMhfnwXNs6
yzq0m+7sE7e7ioJYY/qMjSKf2qRrk5VfEQjXGn5xzJnt+FjGjhU3VvE+WeWRH8Pu
KTfMjy0IX7J8kC1ZWTX+Gz3ZKhDuf8l47Eh8p9s+nL2xT8vxFHuehhA37+mdhYZk
mLIgDK+ZiwYrnjinrNjet04ZQt9CtVt3apzEcfLX5lqYwYQTQwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLk3Fsm7OxIyuhTllpvglITQfDRZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNGI5MDhmNzctNjczOC0z
MDkxLWJhMDgtMGUzMmU0ZjBkNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgVDAB4w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAOfBlD08GoI/1KTBkTG7oAERwUY+OTpKz5DusUSlrid241OZUcv0J
JULg0sDReTBJsAR8dbOkAnpYS3bsrWHLltrwTn/XrkKxCqW0NEuINsWUEH3B0bUF
iYmHRr8plx37NTSGxUbKnD26W4elpS37CM6R8EhGkl/uXL5ZvjPCRKFSeeL2yf6X
Dqpa0JmHUnlusWxmFtHiQxFj1utWX+qVybd8uGljHxJ5yEOfZ54odVqA5ekVOx9y
84CJzyjDiznpfj4cHCzGrOY8ZvJlvxS9aZ6J6L1lwl2QBloXBRTsKwjpaw2kpuAq
m/XE7W/eiumFeEQ0c1XUxX1vvfMkLuvr2A==
-----END CERTIFICATE-----
Generated at Sun Sep 13 14:22:53 2026 by rpki-client