Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa
File:                     4443ea3e-5515-393f-9b6c-71ed5816326b.roa (raw, json)
Hash identifier:          JKPoyg2dN7NXDH/JlZvrodBnDNZnNjerESdtdzqZ/t0=
Subject key identifier:   09:C2:DC:2D:D3:E2:60:73:1F:AB:BD:A1:F0:56:C0:0F:2F:8F:D9:14
Certificate issuer:       /CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979
Certificate serial:       010D0C9F4328584EB2B1A978072F7E9BA4815740
Authority key identifier: 1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     394449
IP address blocks:        2604:3dc0:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 11 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:a9:78:07:2f:7e:9b:a4:81:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=c413097d-1352-442a-bac6-14a30a4899a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:79:66:41:14:8b:af:43:a8:02:a6:b7:59:34:
                    e1:aa:b0:16:ab:c3:f9:4e:fa:fa:1e:bb:7e:3d:ed:
                    08:74:40:e8:a2:ac:38:69:71:b2:6e:c5:31:b3:51:
                    f5:17:3c:9d:27:87:d0:c8:b6:c4:4c:a4:44:24:2e:
                    23:3c:53:de:9c:b3:64:92:a4:8c:59:ce:30:cc:1a:
                    a2:64:ef:96:c8:eb:77:19:c2:e3:1b:c6:ca:5e:33:
                    47:0a:3e:8c:fe:d7:f4:81:b0:0d:8c:e2:01:3a:c5:
                    56:63:af:75:27:29:ba:ff:81:1c:6b:d4:d3:30:a2:
                    ab:16:19:11:9f:14:61:be:17:a7:d8:87:76:e1:4d:
                    48:91:11:6e:1a:7d:4f:c0:1e:8f:a5:32:eb:2c:90:
                    4f:1a:01:fb:ba:76:1e:fd:a9:a4:5e:86:f7:1b:07:
                    bb:4b:6e:d7:ad:d1:79:ad:75:53:d8:a3:e4:49:b8:
                    20:73:fb:06:4e:89:cf:30:95:70:ca:a4:dc:89:97:
                    fe:d1:9e:71:dc:da:9c:41:bf:47:29:b9:b7:dc:2b:
                    35:4d:ed:34:d0:72:bd:6d:6a:92:0c:ed:76:b4:cd:
                    e6:87:a2:01:51:ec:33:5e:c1:32:36:17:46:87:41:
                    72:73:5c:37:a8:fc:7a:9c:0b:7a:0e:b2:6b:4f:ea:
                    1d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C2:DC:2D:D3:E2:60:73:1F:AB:BD:A1:F0:56:C0:0F:2F:8F:D9:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl

            X509v3 Authority Key Identifier:
                keyid:1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3dc0:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:74:57:f5:9d:24:bb:90:61:3a:90:8b:8b:94:e1:f0:1e:49:
         de:7c:77:d2:17:f7:08:6b:6f:d4:c6:fe:b1:32:51:c4:60:57:
         c8:fe:26:24:28:b8:0a:cf:dc:96:7e:ab:95:94:b8:4e:9d:e0:
         0c:6f:97:75:b2:96:e1:eb:74:6e:06:6c:6c:b9:0f:a0:13:a9:
         4d:13:56:33:6f:1f:12:19:42:da:2e:52:2e:6b:c1:61:4e:6f:
         96:fc:59:93:04:df:93:2d:e7:5a:d0:3d:cb:ab:c4:76:01:db:
         f1:b4:1e:12:fd:85:0c:a9:11:e7:61:be:96:18:b8:9d:cb:5f:
         1d:4d:73:37:90:13:7f:aa:d9:a3:97:82:79:3f:b3:7b:b5:a2:
         3c:c3:1d:51:78:2a:65:7f:fc:40:76:60:81:10:82:9a:00:7d:
         d2:3e:89:02:70:c9:10:89:69:7b:c8:a5:d0:73:41:08:0b:1f:
         13:ea:b6:8a:25:60:be:88:ea:66:10:e9:3d:5a:cb:52:54:2a:
         c5:36:59:69:c0:79:6e:11:08:28:a7:00:47:2e:9d:b9:8e:ff:
         3f:b5:6d:eb:a6:8c:a9:26:2e:47:70:b0:09:36:79:7e:27:77:
         c9:fb:bd:d6:87:45:1b:dc:d6:33:df:d8:b3:63:37:0f:af:ac:
         08:9c:51:7b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6ysal4By9+m6SBV0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU4N2Q4M2YtYjUwYy00YTY1LTlkOWEtYzI4NDU4ZmMx
OTc5MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
YzQxMzA5N2QtMTM1Mi00NDJhLWJhYzYtMTRhMzBhNDg5OWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3lmQRSLr0OoAqa3WTThqrAWq8P5Tvr6Hrt+
Pe0IdEDooqw4aXGybsUxs1H1FzydJ4fQyLbETKREJC4jPFPenLNkkqSMWc4wzBqi
ZO+WyOt3GcLjG8bKXjNHCj6M/tf0gbANjOIBOsVWY691Jym6/4Eca9TTMKKrFhkR
nxRhvhen2Id24U1IkRFuGn1PwB6PpTLrLJBPGgH7unYe/amkXob3Gwe7S27XrdF5
rXVT2KPkSbggc/sGTonPMJVwyqTciZf+0Z5x3NqcQb9HKbm33Cs1Te000HK9bWqS
DO12tM3mh6IBUewzXsEyNhdGh0Fyc1w3qPx6nAt6DrJrT+odoQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAnC3C3T4mBzH6u9ofBWwA8vj9kUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3
ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0NThmYzE5NzkvNDQ0M2VhM2UtNTUxNS0z
OTNmLTliNmMtNzFlZDU4MTYzMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGU4N2Q4M2YtYjUwYy00YTY1LTlk
OWEtYzI4NDU4ZmMxOTc5LzRlODdkODNmLWI1MGMtNGE2NS05ZDlhLWMyODQ1OGZj
MTk3OS5jcmwwHwYDVR0jBBgwFoAUGggBUYL46DBD52qzRc1UcqS0zfwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0
NThmYzE5NzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQ9wAAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADZ0V/WdJLuQYTqQi4uU4fAeSd58d9IX9whrb9TG/rEyUcRgV8j+
JiQouArP3JZ+q5WUuE6d4Axvl3WyluHrdG4GbGy5D6ATqU0TVjNvHxIZQtouUi5r
wWFOb5b8WZME35Mt51rQPcurxHYB2/G0HhL9hQypEedhvpYYuJ3LXx1NczeQE3+q
2aOXgnk/s3u1ojzDHVF4KmV//EB2YIEQgpoAfdI+iQJwyRCJaXvIpdBzQQgLHxPq
toolYL6I6mYQ6T1ay1JUKsU2WWnAeW4RCCinAEcunbmO/z+1beumjKkmLkdwsAk2
eX4nd8n7vdaHRRvc1jPf2LNjNw+vrAicUXs=
-----END CERTIFICATE-----
Generated at Mon Aug 10 09:59:27 2026 by rpki-client