Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b95371c1-c1d8-3e6d-802e-5783e35d6b9f.roa
File:                     b95371c1-c1d8-3e6d-802e-5783e35d6b9f.roa (raw, json)
Hash identifier:          Nlnv1NirzH3YoBgMmShFy5ad0ROENpRjkm3kagrRjTc=
Subject key identifier:   EE:FF:21:35:E9:84:B4:2F:54:1C:3D:4D:14:9A:74:BC:60:2B:7A:73
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584ECBD1DD5966DB57B673F3BF60
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b95371c1-c1d8-3e6d-802e-5783e35d6b9f.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     62651
IP address blocks:        2604:fc80:2400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:dd:59:66:db:57:b6:73:f3:bf:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=71af23db-0725-4f03-b380-43851bd753b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:11:c4:f8:3a:21:59:76:5c:23:33:ce:f8:ce:
                    cd:5c:65:ab:45:98:c8:7a:bb:fc:bc:fe:ec:d5:d7:
                    f5:bd:e4:a0:cd:12:91:ec:f5:12:ac:24:d6:84:07:
                    c0:b1:ba:61:40:a5:0d:44:ca:dd:05:b9:31:9b:98:
                    36:c3:3d:f8:78:a4:76:eb:65:3b:c2:cb:dd:fd:3e:
                    6b:b1:d0:e9:99:3a:45:6a:18:3e:b9:f4:9b:d9:fc:
                    2f:e5:ad:ce:84:1b:ea:9a:7a:53:17:65:b7:c6:a3:
                    aa:d8:8b:cd:84:51:49:7d:68:1f:cb:36:12:c3:8f:
                    cd:54:64:01:46:fe:1a:c5:3c:d6:5a:c8:fc:aa:5c:
                    8a:ad:6e:b7:6e:08:3d:68:4f:9c:d7:66:e5:d1:85:
                    53:99:54:d0:b0:c1:b6:08:96:20:2a:f5:de:62:06:
                    ab:4b:7f:c2:64:3a:f5:ff:b8:70:b7:c6:dc:86:cf:
                    77:83:97:c9:44:e3:80:d0:fe:1d:da:59:64:08:52:
                    83:a7:44:2d:29:bb:64:70:cf:9a:e1:d1:e4:41:87:
                    cb:46:5f:14:42:4f:49:36:e4:d9:47:40:57:fc:1b:
                    66:3a:3a:57:e1:c9:9a:fe:34:a0:87:92:11:b5:e3:
                    60:ca:06:ca:e0:ce:c9:f2:b4:3a:eb:35:e9:60:92:
                    c9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FF:21:35:E9:84:B4:2F:54:1C:3D:4D:14:9A:74:BC:60:2B:7A:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b95371c1-c1d8-3e6d-802e-5783e35d6b9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fc80:2400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:35:e7:6f:fb:4d:01:c1:e5:7d:ba:ef:a7:a8:17:1e:2c:1b:
         c6:7f:c5:d0:57:1d:62:47:06:4a:8f:7d:47:d9:26:a7:c3:ba:
         10:4c:20:ce:66:ef:3b:51:a5:b0:2a:f5:cb:54:ec:b0:91:a6:
         99:8a:9d:04:32:0e:4c:a9:a4:00:a1:13:30:c1:72:0e:9c:8d:
         a0:b1:85:d9:d3:44:50:99:16:54:79:ab:85:c2:af:6e:92:0d:
         6b:d6:8d:26:d2:03:62:54:dd:c1:e0:32:a0:86:49:9e:1a:0f:
         64:8b:93:ed:17:07:c2:e9:04:5f:f3:b9:8c:c0:88:4e:0e:cb:
         3d:ec:34:a2:e3:36:58:ee:01:a8:22:2e:4e:ee:cd:ba:f2:a6:
         8a:36:ae:82:36:86:a8:6e:f5:41:65:27:4e:79:96:88:2a:1b:
         4f:94:c7:2b:f6:d0:d6:1f:3a:60:11:c2:50:ea:75:66:44:88:
         0b:b3:30:3b:21:c3:6f:67:3c:c4:e7:d4:12:bd:1b:68:66:dc:
         ef:4e:22:ca:ea:2c:fc:d0:eb:93:7a:51:59:1b:67:50:71:50:
         98:85:93:8e:cc:4b:b1:06:15:96:8c:e2:44:44:4a:c4:e4:bf:
         51:35:02:b2:e9:7b:c4:30:25:c6:35:df:cb:e7:97:86:e0:8f:
         c8:ce:af:4a
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7L0d1ZZttXtnPzv2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk
NzFhZjIzZGItMDcyNS00ZjAzLWIzODAtNDM4NTFiZDc1M2IyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRHE+DohWXZcIzPO+M7NXGWrRZjIerv8vP7s
1df1veSgzRKR7PUSrCTWhAfAsbphQKUNRMrdBbkxm5g2wz34eKR262U7wsvd/T5r
sdDpmTpFahg+ufSb2fwv5a3OhBvqmnpTF2W3xqOq2IvNhFFJfWgfyzYSw4/NVGQB
Rv4axTzWWsj8qlyKrW63bgg9aE+c12bl0YVTmVTQsMG2CJYgKvXeYgarS3/CZDr1
/7hwt8bchs93g5fJROOA0P4d2llkCFKDp0QtKbtkcM+a4dHkQYfLRl8UQk9JNuTZ
R0BX/BtmOjpX4cma/jSgh5IRteNgygbK4M7J8rQ66zXpYJLJmQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFO7/ITXphLQvVBw9TRSadLxgK3pzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvYjk1MzcxYzEtYzFkOC0z
ZTZkLTgwMmUtNTc4M2UzNWQ2YjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgT8gCQw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAbTXnb/tNAcHlfbrvp6gXHiwbxn/F0FcdYkcGSo99R9kmp8O6EEwg
zmbvO1GlsCr1y1TssJGmmYqdBDIOTKmkAKETMMFyDpyNoLGF2dNEUJkWVHmrhcKv
bpINa9aNJtIDYlTdweAyoIZJnhoPZIuT7RcHwukEX/O5jMCITg7LPew0ouM2WO4B
qCIuTu7NuvKmijaugjaGqG71QWUnTnmWiCobT5THK/bQ1h86YBHCUOp1ZkSIC7Mw
OyHDb2c8xOfUEr0baGbc704iyuos/NDrk3pRWRtnUHFQmIWTjsxLsQYVloziRERK
xOS/UTUCsul7xDAlxjXfy+eXhuCPyM6vSg==
-----END CERTIFICATE-----
Generated at Fri Sep 18 23:25:33 2026 by rpki-client