Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/3dda45f3-4cd1-308c-bc09-6c1819da3b3b.roa
File:                     3dda45f3-4cd1-308c-bc09-6c1819da3b3b.roa (raw, json)
Hash identifier:          f4AapbxTHCaymyB55BfF3SBUWPJan4MEjT+iiqjJ+1s=
Subject key identifier:   EA:E9:7D:E2:A1:66:F6:40:9B:8E:47:05:CD:DB:60:AE:24:EA:31:3C
Certificate issuer:       /CN=f5d93400-0a6f-4938-9925-856c6ace39df
Certificate serial:       010D0C9F4328584EAD1C6D61B67FF2F22AAA0DC0
Authority key identifier: AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/3dda45f3-4cd1-308c-bc09-6c1819da3b3b.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     43641
IP address blocks:        2602:fa02:4b0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:6d:61:b6:7f:f2:f2:2a:aa:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d93400-0a6f-4938-9925-856c6ace39df
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=63023942-796e-458f-ad10-3332c59b1245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8f:25:28:11:7f:8e:4d:14:c0:e2:c7:a5:0d:
                    93:99:1c:85:cb:dd:b1:3e:3e:43:95:ff:5a:a2:c4:
                    c6:f3:ef:94:dc:f3:c0:aa:61:bb:c7:84:d6:37:e4:
                    11:38:81:1a:47:c1:44:0e:ea:5b:ca:11:a6:1d:fd:
                    f6:c8:eb:34:3b:73:7e:30:2a:3b:07:c0:ec:da:f2:
                    ac:d4:f7:5f:7a:c2:97:4d:67:a5:f0:72:1a:42:4c:
                    57:5c:f5:e3:88:fe:1f:d7:79:61:ed:fe:13:d1:a3:
                    d4:ad:f5:7f:35:f3:74:a1:59:bc:8e:de:3a:5a:fe:
                    ad:1e:ff:82:1e:f7:66:1c:b0:08:c9:1a:9c:1a:d7:
                    89:43:3f:2b:ee:b0:e4:88:69:c3:b6:94:26:62:9c:
                    e3:86:d8:55:8d:71:ba:d4:3e:78:65:69:f5:d3:90:
                    9f:4a:ff:7a:3f:b3:11:1b:c5:4f:a1:dd:c2:28:40:
                    da:21:55:f1:5f:45:54:88:a1:57:3b:1b:d2:e1:5b:
                    2a:62:1c:f7:29:50:06:1f:26:75:3a:6c:52:49:62:
                    13:cf:eb:24:99:f9:c8:34:b9:b6:65:63:2f:49:52:
                    8d:82:b7:22:03:8f:3c:04:c1:0b:e6:e7:ed:fe:05:
                    6d:f8:87:56:83:ee:5c:33:fc:ac:66:eb:20:98:21:
                    38:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E9:7D:E2:A1:66:F6:40:9B:8E:47:05:CD:DB:60:AE:24:EA:31:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/3dda45f3-4cd1-308c-bc09-6c1819da3b3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl

            X509v3 Authority Key Identifier:
                keyid:AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa02:4b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:c5:fb:8a:74:fa:f7:43:3f:6a:a6:81:e0:0d:fc:54:7a:6b:
         5f:6d:e2:40:e4:f2:22:76:0b:69:df:b0:cb:0b:05:86:c6:8f:
         e8:10:5b:4b:16:6b:fa:66:92:c6:33:b5:36:b6:67:ac:d5:e4:
         c7:ab:5a:59:48:19:7d:2a:8f:b4:c5:8a:3b:cf:63:c0:e4:f1:
         ff:4a:b7:fd:27:7a:39:94:5f:4b:fa:b8:ce:23:2a:65:f7:6a:
         f0:61:35:fd:44:57:48:fc:b5:35:31:09:7f:5a:b2:cd:41:5a:
         75:65:82:0c:91:e3:9b:d2:e6:0b:f3:b8:25:21:f7:19:bd:33:
         c3:cd:0e:e9:3a:f0:d3:d5:ef:81:2d:a6:a0:a8:ea:e4:97:46:
         60:03:65:f8:03:24:aa:44:0f:ef:01:00:68:37:fe:1a:9b:5f:
         fb:e1:8b:ad:ec:da:ac:a9:60:ed:03:b7:b6:7a:51:8f:53:d6:
         58:19:e4:7e:72:c5:bf:e6:54:24:fa:27:fc:12:6b:56:8e:36:
         93:75:25:f8:24:8d:49:b1:38:e2:e6:52:70:2e:68:d0:b9:4c:
         97:de:75:4c:3b:8b:64:37:04:61:7e:f8:4d:ea:db:94:f6:4b:
         a9:d9:0e:72:75:b4:a2:20:98:75:58:10:ab:b4:aa:af:f7:47:
         6a:fe:c7:57
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6tHG1htn/y8iqqDcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVkOTM0MDAtMGE2Zi00OTM4LTk5MjUtODU2YzZhY2Uz
OWRmMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk
NjMwMjM5NDItNzk2ZS00NThmLWFkMTAtMzMzMmM1OWIxMjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI8lKBF/jk0UwOLHpQ2TmRyFy92xPj5Dlf9a
osTG8++U3PPAqmG7x4TWN+QROIEaR8FEDupbyhGmHf32yOs0O3N+MCo7B8Ds2vKs
1PdfesKXTWel8HIaQkxXXPXjiP4f13lh7f4T0aPUrfV/NfN0oVm8jt46Wv6tHv+C
HvdmHLAIyRqcGteJQz8r7rDkiGnDtpQmYpzjhthVjXG61D54ZWn105CfSv96P7MR
G8VPod3CKEDaIVXxX0VUiKFXOxvS4VsqYhz3KVAGHyZ1OmxSSWITz+skmfnINLm2
ZWMvSVKNgrciA488BMEL5uft/gVt+IdWg+5cM/ysZusgmCE41QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOrpfeKhZvZAm45HBc3bYK4k6jE8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNWQ5
MzQwMC0wYTZmLTQ5MzgtOTkyNS04NTZjNmFjZTM5ZGYvM2RkYTQ1ZjMtNGNkMS0z
MDhjLWJjMDktNmMxODE5ZGEzYjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjVkOTM0MDAtMGE2Zi00OTM4LTk5
MjUtODU2YzZhY2UzOWRmL2Y1ZDkzNDAwLTBhNmYtNDkzOC05OTI1LTg1NmM2YWNl
MzlkZi5jcmwwHwYDVR0jBBgwFoAUrA+Cm0QWCz2wP5W2ggDuFayzH2swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNWQ5MzQwMC0wYTZmLTQ5MzgtOTkyNS04NTZj
NmFjZTM5ZGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL6AgSw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACrF+4p0+vdDP2qmgeAN/FR6a19t4kDk8iJ2C2nfsMsLBYbGj+gQ
W0sWa/pmksYztTa2Z6zV5MerWllIGX0qj7TFijvPY8Dk8f9Kt/0nejmUX0v6uM4j
KmX3avBhNf1EV0j8tTUxCX9ass1BWnVlggyR45vS5gvzuCUh9xm9M8PNDuk68NPV
74EtpqCo6uSXRmADZfgDJKpED+8BAGg3/hqbX/vhi63s2qypYO0Dt7Z6UY9T1lgZ
5H5yxb/mVCT6J/wSa1aONpN1JfgkjUmxOOLmUnAuaNC5TJfedUw7i2Q3BGF++E3q
25T2S6nZDnJ1tKIgmHVYEKu0qq/3R2r+x1c=
-----END CERTIFICATE-----
Generated at Fri Sep 4 21:12:45 2026 by rpki-client