Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a/d7cda45f-b76a-3f06-9106-01fe319b1784.roa
File:                     d7cda45f-b76a-3f06-9106-01fe319b1784.roa (raw, json)
Hash identifier:          2R3WXZXgWPXUrq8mMQHV0eFCP/2eT7zxDl893qL0LFc=
Subject key identifier:   09:2F:AE:6F:96:65:13:40:FB:E7:08:E3:3A:27:64:8D:51:89:06:D0
Certificate issuer:       /CN=4b15b5cd-4c26-4ee5-85c9-521eeef73d1a
Certificate serial:       010D0C9F4328584EED52455FA608C99F27E6AFC0
Authority key identifier: E2:E4:E9:38:6D:35:64:52:30:47:98:FF:10:CD:3E:A0:D5:6E:C2:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a/d7cda45f-b76a-3f06-9106-01fe319b1784.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     399220
IP address blocks:        2605:d340:7000::/36 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:45:5f:a6:08:c9:9f:27:e6:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b15b5cd-4c26-4ee5-85c9-521eeef73d1a
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=05b4efe9-e159-4dd5-9dba-b2051ccd638d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3e:ad:e1:f3:50:31:39:41:87:5d:f9:e5:a4:
                    1d:71:1f:b5:93:a9:7c:d7:47:9a:c1:f2:70:c0:2a:
                    cc:8e:af:d8:b2:da:70:11:3e:ca:8e:4b:fb:6f:ce:
                    14:db:61:36:3c:db:bf:48:f7:61:90:db:f5:2d:0b:
                    58:64:91:62:2f:1a:ee:75:f6:95:07:ad:c7:9e:24:
                    8f:77:8e:8d:b3:c3:39:29:05:fc:84:91:50:b8:f4:
                    bf:81:d3:f7:97:82:f1:02:47:23:0c:28:17:05:41:
                    4f:e0:17:41:d6:7c:d6:7e:81:ff:55:f8:02:39:11:
                    76:24:ac:f7:ce:bc:ae:0f:ea:00:6d:20:77:31:4a:
                    e7:1f:8f:1f:7a:1f:6d:a5:a8:63:9e:83:b8:92:f1:
                    b6:cc:ec:88:a5:4b:2f:0b:32:37:22:53:17:8a:57:
                    63:45:e8:9a:71:06:43:4f:98:7a:65:4e:0d:2d:8d:
                    c8:0e:c3:b4:e4:f3:eb:04:35:e2:d9:9a:a6:fb:8e:
                    72:d8:9a:79:7c:3c:86:4e:23:b2:f3:c1:64:59:e4:
                    ab:7d:9e:43:74:b5:e4:71:06:ce:60:ca:a4:9a:63:
                    16:be:ef:85:1b:a8:7b:0d:eb:08:5e:b4:ab:6c:41:
                    e5:32:9f:17:fc:be:36:69:c0:1b:ba:9d:34:49:fa:
                    ef:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2F:AE:6F:96:65:13:40:FB:E7:08:E3:3A:27:64:8D:51:89:06:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a/d7cda45f-b76a-3f06-9106-01fe319b1784.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E4:E9:38:6D:35:64:52:30:47:98:FF:10:CD:3E:A0:D5:6E:C2:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4b15b5cd-4c26-4ee5-85c9-521eeef73d1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:d340:7000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:08:85:52:d6:58:be:3d:88:b4:d3:ba:b5:35:b7:3f:98:3e:
         6b:36:81:e2:d9:0f:a1:7c:d6:e0:18:0f:f8:4c:9e:5e:f5:0e:
         89:2b:5d:b9:eb:a9:c5:14:ad:bf:94:eb:b4:31:0a:cc:33:b1:
         68:34:31:e1:82:21:7c:2d:f9:9b:61:f9:02:b8:37:58:77:7f:
         ac:05:7c:6f:11:a3:87:2d:03:e6:10:ae:e7:8f:6c:9c:5f:31:
         5b:ea:1c:de:39:51:4c:af:bb:ba:e5:d8:b8:57:19:1c:1b:4f:
         d0:80:30:54:52:f1:20:f3:a0:21:9c:af:81:ef:3c:63:72:09:
         53:16:34:79:4d:b0:e5:5d:32:ff:06:ae:fb:bd:ac:97:67:6e:
         77:b8:1d:b7:4d:ad:d8:5b:ae:35:c5:9c:24:0b:37:24:be:dc:
         1b:9f:30:dd:a1:ee:2f:69:67:e7:f7:5f:42:2e:30:3f:91:48:
         b9:10:ec:5e:be:49:e0:35:14:3d:49:fd:67:fa:e7:78:98:66:
         b3:cc:25:43:f1:72:9f:09:dc:c1:da:c0:e1:9b:ad:4b:d7:c4:
         0c:b8:d2:46:2d:23:1e:b0:5e:4d:cb:8b:0a:3d:62:b1:26:fd:
         b8:9b:d2:9e:13:8d:a9:5a:16:76:67:01:c8:3b:3c:30:69:92:
         19:04:8d:a1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7tUkVfpgjJnyfmr8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGIxNWI1Y2QtNGMyNi00ZWU1LTg1YzktNTIxZWVlZjcz
ZDFhMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
MDViNGVmZTktZTE1OS00ZGQ1LTlkYmEtYjIwNTFjY2Q2MzhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT6t4fNQMTlBh1355aQdcR+1k6l810eawfJw
wCrMjq/YstpwET7Kjkv7b84U22E2PNu/SPdhkNv1LQtYZJFiLxrudfaVB63HniSP
d46Ns8M5KQX8hJFQuPS/gdP3l4LxAkcjDCgXBUFP4BdB1nzWfoH/VfgCORF2JKz3
zryuD+oAbSB3MUrnH48feh9tpahjnoO4kvG2zOyIpUsvCzI3IlMXildjReiacQZD
T5h6ZU4NLY3IDsO05PPrBDXi2Zqm+45y2Jp5fDyGTiOy88FkWeSrfZ5DdLXkcQbO
YMqkmmMWvu+FG6h7DesIXrSrbEHlMp8X/L42acAbup00SfrvYQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAkvrm+WZRNA++cI4zonZI1RiQbQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80YjE1
YjVjZC00YzI2LTRlZTUtODVjOS01MjFlZWVmNzNkMWEvZDdjZGE0NWYtYjc2YS0z
ZjA2LTkxMDYtMDFmZTMxOWIxNzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNGIxNWI1Y2QtNGMyNi00ZWU1LTg1
YzktNTIxZWVlZjczZDFhLzRiMTViNWNkLTRjMjYtNGVlNS04NWM5LTUyMWVlZWY3
M2QxYS5jcmwwHwYDVR0jBBgwFoAU4uTpOG01ZFIwR5j/EM0+oNVuwjgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi80YjE1YjVjZC00YzI2LTRlZTUtODVjOS01MjFl
ZWVmNzNkMWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgXTQHAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAZwiFUtZYvj2ItNO6tTW3P5g+azaB4tkPoXzW4BgP+EyeXvUOiStd
ueupxRStv5TrtDEKzDOxaDQx4YIhfC35m2H5Arg3WHd/rAV8bxGjhy0D5hCu549s
nF8xW+oc3jlRTK+7uuXYuFcZHBtP0IAwVFLxIPOgIZyvge88Y3IJUxY0eU2w5V0y
/wau+72sl2dud7gdt02t2FuuNcWcJAs3JL7cG58w3aHuL2ln5/dfQi4wP5FIuRDs
Xr5J4DUUPUn9Z/rneJhms8wlQ/FynwncwdrA4ZutS9fEDLjSRi0jHrBeTcuLCj1i
sSb9uJvSnhONqVoWdmcByDs8MGmSGQSNoQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:52:31 2026 by rpki-client