Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bf431732-9b31-372e-9197-04e13d9230ef.roa
File:                     bf431732-9b31-372e-9197-04e13d9230ef.roa (raw, json)
Hash identifier:          Y9+D7DaGO9u1yrDP5WcRfpvnB4GjRoCGEA+m3BQEESY=
Subject key identifier:   FA:FF:C0:F9:85:8D:30:ED:B0:EE:27:6B:1C:86:54:E5:A7:C1:4F:C7
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584F02422CEDFF72190F06F2E140
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bf431732-9b31-372e-9197-04e13d9230ef.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     11404
IP address blocks:        2607:fa40:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:2c:ed:ff:72:19:0f:06:f2:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=d3c8b217-a332-48e9-95c0-2a58df9e1783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:33:f4:0c:62:46:f7:6a:d6:c0:c1:87:6f:
                    f6:16:41:17:06:ab:eb:20:d9:61:58:ad:66:cd:6e:
                    81:e3:b9:25:0e:47:2b:71:01:3f:fe:44:b2:c5:39:
                    ee:29:17:8b:c3:49:f5:18:b1:b6:02:f3:84:7e:89:
                    c3:65:50:c9:5e:8e:de:10:3c:8b:59:37:ca:da:48:
                    60:5b:4b:81:64:fd:4a:b6:52:e7:c4:47:ef:f9:89:
                    1c:a7:83:55:a7:4a:16:c9:9c:d6:a5:8f:6f:64:fd:
                    34:bf:0a:63:f7:ab:fd:3f:8f:62:a4:4a:9f:74:92:
                    7a:e7:02:d0:9e:41:d2:c6:45:64:eb:f8:b6:67:95:
                    82:48:d9:de:bc:d6:4d:30:b4:5b:6b:4d:97:1c:9c:
                    06:0e:72:c2:8c:49:10:cc:31:9a:10:fa:e8:bf:fe:
                    7d:9b:4f:f8:d7:f5:c3:f4:f1:11:5f:1c:fc:4d:d2:
                    bb:38:02:3d:38:cb:40:bd:1c:ca:d0:ff:40:9d:f3:
                    d0:31:92:12:f3:02:6d:7a:1c:30:7c:2f:b4:39:4d:
                    53:8d:a5:21:91:e9:f2:c4:6b:4e:ab:de:4e:85:d9:
                    37:cf:de:44:6c:eb:db:dd:bd:65:9f:1d:86:15:85:
                    85:c4:e4:78:4e:7c:69:9e:62:c3:21:9e:73:66:ad:
                    71:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FF:C0:F9:85:8D:30:ED:B0:EE:27:6B:1C:86:54:E5:A7:C1:4F:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bf431732-9b31-372e-9197-04e13d9230ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fa40:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:ad:03:b6:d9:ba:02:93:67:9d:34:ca:ac:fd:46:d9:20:97:
         5f:fc:d9:31:be:a0:d9:3a:34:1c:3a:21:a7:b3:99:6f:ed:66:
         d3:17:d5:43:e5:fa:d2:1a:fc:81:ab:3c:68:c3:83:a2:36:c2:
         d6:d3:a9:4d:a2:df:47:64:2a:79:43:86:9e:b6:58:0d:09:46:
         51:75:02:93:74:b9:d5:29:fa:1c:ef:ac:da:ee:10:f3:30:cc:
         4f:52:ed:f7:57:6d:dd:b6:f7:72:37:2a:22:d2:c3:08:00:9f:
         4a:d8:5c:94:50:19:6c:f9:62:07:89:1a:b1:ce:fa:e0:4e:6b:
         e7:81:d9:1c:5c:8b:a5:32:22:45:9c:fc:1e:4d:91:33:f2:65:
         5f:24:7f:ad:96:36:8d:60:6e:d9:40:cf:f3:4f:22:d5:18:e0:
         75:60:a4:fe:fe:48:96:00:7d:fd:35:f1:aa:dc:cf:e4:89:77:
         4a:b8:03:ac:36:a3:43:f0:3d:01:5b:73:53:7c:94:2b:bd:d8:
         d1:2d:e6:ca:b0:f9:12:03:d4:0f:bb:75:38:a6:7d:27:93:8e:
         b4:9a:0f:d9:f1:e3:cf:f7:52:49:d2:20:85:e3:81:8e:4f:19:
         7c:59:72:85:ed:5b:3f:88:92:10:17:95:dd:83:92:58:d8:53:
         01:3a:ed:28
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8CQizt/3IZDwby4UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk
ZDNjOGIyMTctYTMzMi00OGU5LTk1YzAtMmE1OGRmOWUxNzgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulsz9AxiRvdq1sDBh2/2FkEXBqvrINlhWK1m
zW6B47klDkcrcQE//kSyxTnuKReLw0n1GLG2AvOEfonDZVDJXo7eEDyLWTfK2khg
W0uBZP1KtlLnxEfv+Ykcp4NVp0oWyZzWpY9vZP00vwpj96v9P49ipEqfdJJ65wLQ
nkHSxkVk6/i2Z5WCSNnevNZNMLRba02XHJwGDnLCjEkQzDGaEProv/59m0/41/XD
9PERXxz8TdK7OAI9OMtAvRzK0P9AnfPQMZIS8wJtehwwfC+0OU1TjaUhkenyxGtO
q95Ohdk3z95EbOvb3b1lnx2GFYWFxOR4TnxpnmLDIZ5zZq1x6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPr/wPmFjTDtsO4naxyGVOWnwU/HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYmY0MzE3MzItOWIzMS0z
NzJlLTkxOTctMDRlMTNkOTIzMGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf6QAAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHOtA7bZugKTZ500yqz9Rtkgl1/82TG+oNk6NBw6IaezmW/tZtMX
1UPl+tIa/IGrPGjDg6I2wtbTqU2i30dkKnlDhp62WA0JRlF1ApN0udUp+hzvrNru
EPMwzE9S7fdXbd2293I3KiLSwwgAn0rYXJRQGWz5YgeJGrHO+uBOa+eB2Rxci6Uy
IkWc/B5NkTPyZV8kf62WNo1gbtlAz/NPItUY4HVgpP7+SJYAff018arcz+SJd0q4
A6w2o0PwPQFbc1N8lCu92NEt5sqw+RID1A+7dTimfSeTjrSaD9nx48/3UknSIIXj
gY5PGXxZcoXtWz+IkhAXld2DkljYUwE67Sg=
-----END CERTIFICATE-----
Generated at Mon Aug 31 11:23:39 2026 by rpki-client