Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/203f9651-52ba-397f-8a32-968fec6b1d7a.roa
File:                     203f9651-52ba-397f-8a32-968fec6b1d7a.roa (raw, json)
Hash identifier:          fOCNT5rQTYv/9pyAWWC8qWhVN/c47Z71ZE14Pi719Po=
Subject key identifier:   9F:77:4D:D8:39:BC:E4:83:2F:64:80:7D:4A:52:85:6A:C3:DE:D4:C9
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584EDF5C8E7CC1410237E291DB80
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/203f9651-52ba-397f-8a32-968fec6b1d7a.roa
Signing time:             Tue 18 Aug 2026 01:00:12 +0000
ROA not before:           Tue 18 Aug 2026 01:00:12 +0000
ROA not after:            Mon 16 Nov 2026 02:00:12 +0000
asID:                     396356
IP address blocks:        2604:c980:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:df:5c:8e:7c:c1:41:02:37:e2:91:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Aug 18 01:00:12 2026 GMT
            Not After : Nov 16 02:00:12 2026 GMT
        Subject: CN=61da8c48-190a-4a0e-9b93-04cbfe78bfb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ee:37:c6:c6:49:7b:dd:00:4e:1d:b4:c9:47:
                    97:63:b4:2f:93:3c:52:e1:3d:64:39:a6:d6:24:a7:
                    43:57:8d:e0:22:89:b6:5f:27:8c:6b:04:aa:02:04:
                    bb:b2:53:25:91:3a:56:f9:b2:48:81:4d:dd:91:56:
                    ab:66:0d:b9:bb:f8:0d:9a:86:6d:73:47:18:7a:f7:
                    0e:45:99:8b:27:04:c0:1a:37:1d:9a:1d:0f:76:b4:
                    8a:98:3e:c3:b5:33:57:91:c0:fd:91:a8:60:64:a9:
                    7f:70:76:bf:b8:3c:7f:f9:1a:b4:1f:f2:fe:92:5f:
                    77:a3:be:cd:10:b5:e7:df:30:2a:00:ac:b6:33:55:
                    fa:d1:a9:f8:5b:05:71:25:e6:94:97:7d:b4:ba:cf:
                    ce:71:a3:37:9b:e9:dc:13:e6:7e:3e:58:84:ba:65:
                    ac:84:90:43:bc:0d:8a:97:89:ea:d9:65:0b:1d:05:
                    00:fb:9e:14:36:d9:68:6c:18:9a:05:d3:62:32:1e:
                    2a:80:23:a5:90:29:09:6e:6e:fc:2f:85:4d:bb:b5:
                    6f:c1:7e:be:0e:c2:aa:09:9f:5c:e6:7b:49:5d:84:
                    8f:db:11:62:a6:8a:3b:49:82:ed:31:8c:eb:e8:73:
                    33:d6:37:8f:a6:c8:36:e8:71:3b:5b:87:1d:5e:da:
                    f3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:77:4D:D8:39:BC:E4:83:2F:64:80:7D:4A:52:85:6A:C3:DE:D4:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/203f9651-52ba-397f-8a32-968fec6b1d7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:75:cf:e4:5f:eb:cb:bc:9f:3c:77:59:a4:f1:29:23:80:ac:
         02:07:2b:5b:ac:0c:33:17:da:97:54:34:aa:23:29:69:e6:d9:
         d3:14:6a:cd:b1:b8:4e:1c:ec:ad:e9:17:22:3c:94:0c:3b:47:
         ad:59:1a:45:78:4b:b9:ba:c5:b0:33:43:39:dc:6f:0e:1f:24:
         35:cf:d9:d5:94:51:63:65:6f:43:b1:e3:d7:e8:fb:fd:95:c3:
         94:90:f6:dd:ed:4e:86:d6:04:fb:06:52:7c:33:8d:71:fb:dc:
         23:58:f4:b8:2b:80:11:7c:0b:c2:10:15:bd:81:8a:6b:6c:80:
         38:93:a5:e1:75:47:0b:01:96:50:bd:50:c3:8f:e2:8e:14:82:
         4d:b8:b3:bf:ce:6f:73:8c:4f:0e:db:15:8c:79:8a:22:ee:7d:
         64:00:72:2b:6a:78:38:e4:3e:c8:b5:d5:45:e3:4a:4c:28:0e:
         11:e9:09:7e:5c:41:f0:6a:0f:83:7a:43:46:ac:8b:68:97:7a:
         88:4f:e9:45:79:a3:d0:a8:b1:45:86:fd:c7:47:c7:57:d9:01:
         48:1d:07:31:b6:a6:cf:77:6f:19:e2:86:29:5a:40:aa:9f:c0:
         ec:29:dc:41:8d:20:6d:02:ac:4a:e6:70:97:ba:da:39:de:31:
         7f:43:8c:a8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7fXI58wUECN+KR24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI2MDgxODAxMDAxMloXDTI2MTExNjAyMDAxMlowLzEtMCsGA1UEAxMk
NjFkYThjNDgtMTkwYS00YTBlLTliOTMtMDRjYmZlNzhiZmIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+43xsZJe90ATh20yUeXY7QvkzxS4T1kOabW
JKdDV43gIom2XyeMawSqAgS7slMlkTpW+bJIgU3dkVarZg25u/gNmoZtc0cYevcO
RZmLJwTAGjcdmh0PdrSKmD7DtTNXkcD9kahgZKl/cHa/uDx/+Rq0H/L+kl93o77N
ELXn3zAqAKy2M1X60an4WwVxJeaUl320us/OcaM3m+ncE+Z+PliEumWshJBDvA2K
l4nq2WULHQUA+54UNtlobBiaBdNiMh4qgCOlkCkJbm78L4VNu7VvwX6+DsKqCZ9c
5ntJXYSP2xFipoo7SYLtMYzr6HMz1jePpsg26HE7W4cdXtrzuQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJ93Tdg5vOSDL2SAfUpShWrD3tTJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMjAzZjk2NTEtNTJiYS0z
OTdmLThhMzItOTY4ZmVjNmIxZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTJgCAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAOnXP5F/ry7yfPHdZpPEpI4CsAgcrW6wMMxfal1Q0qiMpaebZ0xRq
zbG4ThzsrekXIjyUDDtHrVkaRXhLubrFsDNDOdxvDh8kNc/Z1ZRRY2VvQ7Hj1+j7
/ZXDlJD23e1OhtYE+wZSfDONcfvcI1j0uCuAEXwLwhAVvYGKa2yAOJOl4XVHCwGW
UL1Qw4/ijhSCTbizv85vc4xPDtsVjHmKIu59ZAByK2p4OOQ+yLXVReNKTCgOEekJ
flxB8GoPg3pDRqyLaJd6iE/pRXmj0KixRYb9x0fHV9kBSB0HMbamz3dvGeKGKVpA
qp/A7CncQY0gbQKsSuZwl7raOd4xf0OMqA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:05:02 2026 by rpki-client