Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/fc272ac0-727f-343b-81b4-1ac741b74caa.roa
File:                     fc272ac0-727f-343b-81b4-1ac741b74caa.roa (raw, json)
Hash identifier:          Mk8WOeRkfuEKF78xVGPaG/HPbDfxf+8CYyIvDOcdQVs=
Subject key identifier:   30:A3:4D:B6:F7:C5:D4:2A:6F:D6:9C:6D:40:D4:13:EB:C5:CF:AC:D8
Certificate issuer:       /CN=b8e4e496-994f-4877-8328-aec6386bbc01
Certificate serial:       010D0C9F4328584F86DDA2117F576660C780BF80
Authority key identifier: 4F:95:9B:1C:A9:FD:5E:F7:60:26:87:0B:BE:BA:20:7C:7A:F3:5A:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/fc272ac0-727f-343b-81b4-1ac741b74caa.roa
Signing time:             Sat 17 Oct 2026 01:00:13 +0000
ROA not before:           Sat 17 Oct 2026 01:00:13 +0000
ROA not after:            Fri 15 Jan 2027 02:00:13 +0000
asID:                     10662
IP address blocks:        2620:112:1000::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/b8e4e496-994f-4877-8328-aec6386bbc01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/b8e4e496-994f-4877-8328-aec6386bbc01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:86:dd:a2:11:7f:57:66:60:c7:80:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8e4e496-994f-4877-8328-aec6386bbc01
        Validity
            Not Before: Oct 17 01:00:13 2026 GMT
            Not After : Jan 15 02:00:13 2027 GMT
        Subject: CN=f0e00d7b-2c19-444e-bf1d-7d1cc8df242c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:35:2b:0b:43:99:01:8e:6c:75:ed:48:72:18:
                    b1:89:e1:5f:d2:c4:a7:77:ae:53:df:ef:e8:9a:b6:
                    d4:ac:bd:65:08:9a:d6:91:e7:28:9d:c9:ba:d9:1c:
                    55:44:fc:1c:8b:73:0f:02:52:c4:d9:1b:ba:f3:3c:
                    bd:cd:76:17:c4:20:22:b6:dd:d9:5a:c6:9f:0c:f6:
                    c9:13:9b:99:9d:19:63:29:aa:b0:6e:80:d6:54:a9:
                    d0:14:45:4e:80:79:80:00:91:3e:f2:69:cd:c9:43:
                    8e:fb:6e:a3:cd:f9:ea:2b:c1:bd:83:d1:d9:ff:9e:
                    a1:21:d7:3c:d1:39:e6:55:b5:16:a9:5f:9f:1a:6f:
                    ef:f7:b5:32:91:80:39:5f:2f:14:78:66:34:05:a6:
                    71:a4:ea:94:59:90:af:b0:54:ba:36:4d:93:c7:2f:
                    e2:74:91:4c:23:d2:a2:ec:95:e2:7e:46:43:24:45:
                    b2:da:1e:42:b8:c7:e2:c1:d4:08:8a:2c:de:13:f1:
                    24:5f:c2:d4:a7:08:48:cd:0c:11:dd:8e:4a:52:f1:
                    39:ec:53:b5:e3:59:73:62:a9:10:30:3e:b6:6a:26:
                    76:4c:4e:32:ea:5a:1c:c1:d5:cc:c6:ce:c5:57:58:
                    ad:6d:72:e9:92:05:fd:05:a1:8f:c2:6f:41:01:8f:
                    86:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A3:4D:B6:F7:C5:D4:2A:6F:D6:9C:6D:40:D4:13:EB:C5:CF:AC:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/fc272ac0-727f-343b-81b4-1ac741b74caa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01/b8e4e496-994f-4877-8328-aec6386bbc01.crl

            X509v3 Authority Key Identifier:
                keyid:4F:95:9B:1C:A9:FD:5E:F7:60:26:87:0B:BE:BA:20:7C:7A:F3:5A:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b8e4e496-994f-4877-8328-aec6386bbc01.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:112:1000::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:b4:61:51:0d:b2:f9:e0:24:91:b4:44:f1:cc:7a:23:24:fb:
         d9:6f:d2:73:f3:f9:76:ef:d0:04:be:ff:43:7d:21:7d:94:5f:
         ab:5b:c0:bc:71:cb:38:e9:c2:c1:96:9f:c1:e7:c1:8f:0c:64:
         37:be:53:70:7a:65:8e:1d:3a:77:c0:7a:b8:a5:74:74:ad:bb:
         c8:b1:ce:e1:0c:45:ad:88:c4:ee:2a:c8:68:ca:b0:c7:7b:61:
         1f:ba:60:58:f4:90:ce:1c:11:76:f4:3e:05:92:52:ff:90:ee:
         f5:91:e1:ee:0f:43:98:e4:ac:86:1a:b0:46:ed:a7:af:12:35:
         bf:44:93:62:98:89:f7:21:a6:4a:ca:7a:a9:11:9e:38:19:3e:
         f5:af:54:53:06:cb:5d:80:ae:4f:07:eb:0c:5e:5a:f1:2a:24:
         50:a1:7d:98:45:8f:73:7a:93:a4:69:6e:35:a5:b4:d7:0c:9c:
         ce:75:79:af:0c:ee:25:a1:ed:98:22:e4:0d:1f:0a:db:00:29:
         6e:c5:9c:a6:8d:13:73:65:c0:51:ce:7d:34:56:79:75:41:95:
         72:1a:a0:f5:3f:74:be:6e:cc:ea:33:87:14:6b:d0:ff:ed:ee:
         66:ee:79:b8:23:7f:b5:4a:a0:a8:fa:d8:f8:41:a7:6c:dd:18:
         95:af:2b:33
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+G3aIRf1dmYMeAv4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhlNGU0OTYtOTk0Zi00ODc3LTgzMjgtYWVjNjM4NmJi
YzAxMB4XDTI2MTAxNzAxMDAxM1oXDTI3MDExNTAyMDAxM1owLzEtMCsGA1UEAxMk
ZjBlMDBkN2ItMmMxOS00NDRlLWJmMWQtN2QxY2M4ZGYyNDJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjUrC0OZAY5sde1IchixieFf0sSnd65T3+/o
mrbUrL1lCJrWkeconcm62RxVRPwci3MPAlLE2Ru68zy9zXYXxCAitt3ZWsafDPbJ
E5uZnRljKaqwboDWVKnQFEVOgHmAAJE+8mnNyUOO+26jzfnqK8G9g9HZ/56hIdc8
0TnmVbUWqV+fGm/v97UykYA5Xy8UeGY0BaZxpOqUWZCvsFS6Nk2Txy/idJFMI9Ki
7JXifkZDJEWy2h5CuMfiwdQIiizeE/EkX8LUpwhIzQwR3Y5KUvE57FO141lzYqkQ
MD62aiZ2TE4y6locwdXMxs7FV1itbXLpkgX9BaGPwm9BAY+GNQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDCjTbb3xdQqb9acbUDUE+vFz6zYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iOGU0
ZTQ5Ni05OTRmLTQ4NzctODMyOC1hZWM2Mzg2YmJjMDEvZmMyNzJhYzAtNzI3Zi0z
NDNiLTgxYjQtMWFjNzQxYjc0Y2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjhlNGU0OTYtOTk0Zi00ODc3LTgz
MjgtYWVjNjM4NmJiYzAxL2I4ZTRlNDk2LTk5NGYtNDg3Ny04MzI4LWFlYzYzODZi
YmMwMS5jcmwwHwYDVR0jBBgwFoAUT5WbHKn9XvdgJocLvrogfHrzWm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9iOGU0ZTQ5Ni05OTRmLTQ4NzctODMyOC1hZWM2
Mzg2YmJjMDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJiABEhAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHq0YVENsvngJJG0RPHMeiMk+9lv0nPz+Xbv0AS+/0N9IX2UX6tb
wLxxyzjpwsGWn8HnwY8MZDe+U3B6ZY4dOnfAerildHStu8ixzuEMRa2IxO4qyGjK
sMd7YR+6YFj0kM4cEXb0PgWSUv+Q7vWR4e4PQ5jkrIYasEbtp68SNb9Ek2KYifch
pkrKeqkRnjgZPvWvVFMGy12Ark8H6wxeWvEqJFChfZhFj3N6k6RpbjWltNcMnM51
ea8M7iWh7Zgi5A0fCtsAKW7FnKaNE3NlwFHOfTRWeXVBlXIaoPU/dL5uzOozhxRr
0P/t7mbuebgjf7VKoKj62PhBp2zdGJWvKzM=
-----END CERTIFICATE-----
Generated at Fri Oct 23 22:46:20 2026 by rpki-client