Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/294bffae-cf6d-3adc-a4b9-0c83d9c918b4.roa
File:                     294bffae-cf6d-3adc-a4b9-0c83d9c918b4.roa (raw, json)
Hash identifier:          6tJBZRl5/cJar+seHZ6ONILZT1mXUOOIwEnPdDXVK5Y=
Subject key identifier:   EE:44:A2:A6:B5:F5:12:A6:BE:D4:73:06:EA:EF:14:06:D8:58:54:44
Certificate issuer:       /CN=45c9903a-58e9-4d12-b429-df86258726e0
Certificate serial:       010D0C9F4328584ED861D207908D056310BAB140
Authority key identifier: 84:A0:E7:D9:92:5E:5B:4E:18:AB:0C:43:AA:A2:80:5E:84:52:0D:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/294bffae-cf6d-3adc-a4b9-0c83d9c918b4.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     14618
IP address blocks:        2602:f387::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/45c9903a-58e9-4d12-b429-df86258726e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/45c9903a-58e9-4d12-b429-df86258726e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:d2:07:90:8d:05:63:10:ba:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45c9903a-58e9-4d12-b429-df86258726e0
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=c749fa58-076f-4670-a542-62839a5bb7d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d7:7d:eb:a6:55:84:b5:ac:74:d4:f5:3d:60:
                    8f:4a:c5:16:dd:d2:60:59:16:c8:78:5d:84:9f:21:
                    ab:30:ce:57:67:f1:9c:e2:b7:34:60:82:de:a3:d3:
                    06:dc:26:43:67:dc:e5:cf:a5:a3:97:e9:aa:41:0b:
                    58:06:51:57:9e:d9:5a:b8:4b:f8:99:18:fb:15:44:
                    4e:47:37:22:4c:a2:78:68:6b:41:3f:ef:1e:22:3c:
                    8e:6f:32:60:51:df:41:22:f8:90:5b:ca:1e:53:90:
                    c6:74:c0:53:0c:ec:cc:1d:27:7a:b0:8c:e5:6b:f7:
                    49:30:81:c7:36:50:ff:c1:19:a7:7e:82:91:b9:10:
                    52:1c:9c:91:e8:1f:5b:1b:10:5f:a9:7a:f2:0a:b9:
                    ca:6e:25:90:80:54:04:28:f4:13:a1:8b:bb:8e:28:
                    53:a5:95:64:07:bc:27:16:b5:48:c5:2a:fe:02:17:
                    a5:77:9b:8f:e6:99:39:51:7e:97:41:ef:17:c0:9c:
                    a5:64:af:e6:b0:be:70:43:a4:ce:5f:fa:c2:3f:bc:
                    a4:bb:92:4f:5f:3f:64:2e:ab:74:3e:e2:96:59:f9:
                    98:5d:d4:2e:7b:1d:bc:f6:46:50:d8:b8:d2:2c:25:
                    09:e6:d5:e0:5b:40:6f:b3:6d:79:9e:d7:30:80:04:
                    c5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:44:A2:A6:B5:F5:12:A6:BE:D4:73:06:EA:EF:14:06:D8:58:54:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/294bffae-cf6d-3adc-a4b9-0c83d9c918b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0/45c9903a-58e9-4d12-b429-df86258726e0.crl

            X509v3 Authority Key Identifier:
                keyid:84:A0:E7:D9:92:5E:5B:4E:18:AB:0C:43:AA:A2:80:5E:84:52:0D:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/45c9903a-58e9-4d12-b429-df86258726e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f387::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:7a:0d:ea:7c:49:d5:35:ad:e3:93:58:d2:d9:e4:e4:4b:82:
         c0:86:00:fc:89:b5:bb:4e:3a:2a:30:5a:d2:76:98:9b:bc:04:
         7d:3f:a5:ea:42:55:74:c5:3f:a1:48:b5:e6:30:55:16:b2:d3:
         6d:83:4c:a4:a8:71:3d:8f:29:b8:bc:5d:6e:51:a1:d3:a3:49:
         20:67:a2:25:1d:e7:39:f3:5b:b0:0a:06:0f:41:1c:d5:de:e6:
         49:87:9a:0c:c1:14:55:c9:6b:4a:ed:bd:1a:fa:ce:6d:56:fa:
         88:78:ac:35:c7:74:6d:0b:0d:35:c1:71:04:68:3a:ef:84:21:
         6f:4b:21:36:91:5d:24:04:db:1e:28:63:67:e0:8a:d0:29:c7:
         ca:98:2e:ba:42:f3:7d:f5:8b:07:16:eb:11:f4:98:51:d4:eb:
         cc:0f:89:0d:a4:ed:83:6d:83:3b:a1:c6:31:49:1c:4d:ec:4f:
         95:1c:30:79:80:ac:d5:b5:13:ba:5b:11:27:e2:14:66:c2:71:
         9a:b0:c3:fe:b4:ae:4e:a3:23:8e:14:e2:e3:f1:76:da:4b:f2:
         21:e9:1c:0e:06:b5:bb:07:9e:0e:51:30:24:0a:31:42:fe:4c:
         cd:ab:75:97:bd:db:62:d7:87:c6:ce:cb:ca:b9:7e:45:48:5f:
         fe:2c:0c:2d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7YYdIHkI0FYxC6sUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDVjOTkwM2EtNThlOS00ZDEyLWI0MjktZGY4NjI1ODcy
NmUwMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
Yzc0OWZhNTgtMDc2Zi00NjcwLWE1NDItNjI4MzlhNWJiN2Q1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNd966ZVhLWsdNT1PWCPSsUW3dJgWRbIeF2E
nyGrMM5XZ/Gc4rc0YILeo9MG3CZDZ9zlz6Wjl+mqQQtYBlFXntlauEv4mRj7FURO
RzciTKJ4aGtBP+8eIjyObzJgUd9BIviQW8oeU5DGdMBTDOzMHSd6sIzla/dJMIHH
NlD/wRmnfoKRuRBSHJyR6B9bGxBfqXryCrnKbiWQgFQEKPQToYu7jihTpZVkB7wn
FrVIxSr+Aheld5uP5pk5UX6XQe8XwJylZK/msL5wQ6TOX/rCP7yku5JPXz9kLqt0
PuKWWfmYXdQuex289kZQ2LjSLCUJ5tXgW0Bvs215ntcwgATF4wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO5Eoqa19RKmvtRzBurvFAbYWFREMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80NWM5
OTAzYS01OGU5LTRkMTItYjQyOS1kZjg2MjU4NzI2ZTAvMjk0YmZmYWUtY2Y2ZC0z
YWRjLWE0YjktMGM4M2Q5YzkxOGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNDVjOTkwM2EtNThlOS00ZDEyLWI0
MjktZGY4NjI1ODcyNmUwLzQ1Yzk5MDNhLTU4ZTktNGQxMi1iNDI5LWRmODYyNTg3
MjZlMC5jcmwwHwYDVR0jBBgwFoAUhKDn2ZJeW04YqwxDqqKAXoRSDaYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi80NWM5OTAzYS01OGU5LTRkMTItYjQyOS1kZjg2
MjU4NzI2ZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgLzhwAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHZ6Dep8SdU1reOTWNLZ5ORLgsCGAPyJtbtOOiowWtJ2mJu8BH0/
pepCVXTFP6FIteYwVRay022DTKSocT2PKbi8XW5RodOjSSBnoiUd5znzW7AKBg9B
HNXe5kmHmgzBFFXJa0rtvRr6zm1W+oh4rDXHdG0LDTXBcQRoOu+EIW9LITaRXSQE
2x4oY2fgitApx8qYLrpC8331iwcW6xH0mFHU68wPiQ2k7YNtgzuhxjFJHE3sT5Uc
MHmArNW1E7pbESfiFGbCcZqww/60rk6jI44U4uPxdtpL8iHpHA4GtbsHng5RMCQK
MUL+TM2rdZe922LXh8bOy8q5fkVIX/4sDC0=
-----END CERTIFICATE-----
Generated at Thu Aug 20 21:57:57 2026 by rpki-client