Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/46e2c153-590d-39ff-8e1c-3e16eabe188f.roa
File:                     46e2c153-590d-39ff-8e1c-3e16eabe188f.roa (raw, json)
Hash identifier:          9HSRttJqsef+6wgeghao71pOyMvQFHXnpRxexrRIJ4Y=
Subject key identifier:   F6:6D:D2:A1:74:5B:BF:81:CB:14:41:1E:37:54:7A:00:0F:B6:93:1C
Certificate issuer:       /CN=1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a
Certificate serial:       010D0C9F4328584EE7BCB4931EC7C87A58E63A00
Authority key identifier: 41:7C:7B:A8:34:ED:81:03:82:86:EE:D9:97:FA:70:1C:5B:6F:27:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/46e2c153-590d-39ff-8e1c-3e16eabe188f.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     394177
IP address blocks:        2607:29c0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:b4:93:1e:c7:c8:7a:58:e6:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=f4b1327a-256c-4b6e-ad28-d153c86ca55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b1:a5:16:97:5d:9b:77:93:c5:7a:5b:16:9b:
                    e5:26:58:07:8b:1f:c7:98:2a:f5:e2:9f:1c:45:37:
                    3d:59:95:8d:22:c8:49:42:a7:7f:3d:2c:4f:f1:b1:
                    3a:be:ca:97:35:cb:a8:68:56:2f:85:9f:39:4e:9f:
                    77:78:9a:09:dc:0f:71:97:d3:d2:97:1a:e7:2f:4f:
                    ff:d4:6e:bb:a8:72:69:e9:42:f6:ae:a5:d5:7d:8e:
                    4b:c1:de:a3:f8:42:1d:42:a0:82:e9:e8:24:3c:a7:
                    a0:0f:71:1f:93:4b:b4:50:43:2a:12:e9:ee:76:67:
                    92:10:45:3b:08:8a:c7:05:68:6d:2a:88:21:5a:bd:
                    21:56:e7:c2:9b:cb:6d:b0:1f:80:d6:b1:58:98:e6:
                    85:5d:02:7c:1d:a1:0a:de:8e:f1:19:c2:e1:32:da:
                    ce:53:14:93:c5:6e:e5:21:61:57:e9:f1:6e:3e:10:
                    09:15:a5:34:96:93:a6:ee:dc:6d:59:c9:28:1f:2b:
                    64:cd:ac:70:40:f8:00:40:77:df:12:07:32:59:c4:
                    92:93:b1:c0:f3:5d:36:89:ec:f1:15:fe:37:2d:22:
                    c0:93:bd:f5:48:74:9c:73:a8:9f:f2:90:8e:7a:54:
                    97:49:5b:fd:b2:52:2d:58:68:8f:0d:99:a7:ff:89:
                    03:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6D:D2:A1:74:5B:BF:81:CB:14:41:1E:37:54:7A:00:0F:B6:93:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/46e2c153-590d-39ff-8e1c-3e16eabe188f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.crl

            X509v3 Authority Key Identifier:
                keyid:41:7C:7B:A8:34:ED:81:03:82:86:EE:D9:97:FA:70:1C:5B:6F:27:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:29c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:1c:a2:18:37:47:f7:4a:81:6b:5d:c4:ed:cc:ac:07:d2:6b:
         04:89:9e:81:b7:b2:94:2c:eb:94:d5:d7:36:4d:78:3a:bc:1d:
         c9:d0:64:96:d8:3f:3c:ae:13:e5:16:44:84:a8:25:17:a7:5b:
         7a:a1:7b:f1:9c:56:22:a4:4f:80:b3:b2:ce:85:b7:ae:07:2f:
         94:51:0d:b8:b3:db:3a:35:1c:ef:29:de:26:9c:65:fb:97:de:
         60:67:5a:d9:4e:75:ab:98:22:1c:44:6e:38:49:2b:90:ff:5d:
         67:9a:aa:8b:c9:33:d4:d0:0e:6c:6e:71:8b:35:41:4c:0b:4b:
         30:1a:00:7f:c9:3b:90:7c:2c:de:03:d2:ec:35:64:67:7a:83:
         ac:91:10:a1:ce:2d:28:c8:ae:36:2d:07:88:b8:b9:cb:63:9a:
         58:86:29:14:ec:ae:43:14:76:78:70:90:e0:39:ab:96:ce:d3:
         b5:93:93:61:3b:b4:1a:05:a9:dc:63:b7:2e:13:04:bf:d1:ac:
         33:19:18:b2:82:16:3f:32:28:80:8e:c4:5a:03:db:97:e0:7a:
         eb:2e:32:d0:9b:1d:62:0d:cd:45:5c:4a:af:97:39:37:36:98:
         ce:2e:c1:d1:5c:ce:f9:7b:c0:9b:2b:f1:ec:ca:54:33:cb:b1:
         1c:1b:a1:23
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7nvLSTHsfIeljmOgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRiYmJjYTAtMDFmNS00YzcyLTk1OGYtOWU1ZWUyYzk5
ZTJhMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk
ZjRiMTMyN2EtMjU2Yy00YjZlLWFkMjgtZDE1M2M4NmNhNTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLGlFpddm3eTxXpbFpvlJlgHix/HmCr14p8c
RTc9WZWNIshJQqd/PSxP8bE6vsqXNcuoaFYvhZ85Tp93eJoJ3A9xl9PSlxrnL0//
1G67qHJp6UL2rqXVfY5Lwd6j+EIdQqCC6egkPKegD3Efk0u0UEMqEunudmeSEEU7
CIrHBWhtKoghWr0hVufCm8ttsB+A1rFYmOaFXQJ8HaEK3o7xGcLhMtrOUxSTxW7l
IWFX6fFuPhAJFaU0lpOm7txtWckoHytkzaxwQPgAQHffEgcyWcSSk7HA8102iezx
Ff43LSLAk731SHScc6if8pCOelSXSVv9slItWGiPDZmn/4kDXwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPZt0qF0W7+ByxRBHjdUegAPtpMcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZGJi
YmNhMC0wMWY1LTRjNzItOTU4Zi05ZTVlZTJjOTllMmEvNDZlMmMxNTMtNTkwZC0z
OWZmLThlMWMtM2UxNmVhYmUxODhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWRiYmJjYTAtMDFmNS00YzcyLTk1
OGYtOWU1ZWUyYzk5ZTJhLzFkYmJiY2EwLTAxZjUtNGM3Mi05NThmLTllNWVlMmM5
OWUyYS5jcmwwHwYDVR0jBBgwFoAUQXx7qDTtgQOChu7Zl/pwHFtvJwAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZGJiYmNhMC0wMWY1LTRjNzItOTU4Zi05ZTVl
ZTJjOTllMmEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcpwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCZHKIYN0f3SoFrXcTtzKwH0msEiZ6Bt7KULOuU1dc2TXg6vB3J0GSW
2D88rhPlFkSEqCUXp1t6oXvxnFYipE+As7LOhbeuBy+UUQ24s9s6NRzvKd4mnGX7
l95gZ1rZTnWrmCIcRG44SSuQ/11nmqqLyTPU0A5sbnGLNUFMC0swGgB/yTuQfCze
A9LsNWRneoOskRChzi0oyK42LQeIuLnLY5pYhikU7K5DFHZ4cJDgOauWztO1k5Nh
O7QaBancY7cuEwS/0awzGRiyghY/MiiAjsRaA9uX4HrrLjLQmx1iDc1FXEqvlzk3
NpjOLsHRXM75e8CbK/HsylQzy7EcG6Ej
-----END CERTIFICATE-----
Generated at Wed Sep 16 07:08:40 2026 by rpki-client