Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/9c549b63-6d1b-340f-a75a-67f7ee513f95.roa
File:                     9c549b63-6d1b-340f-a75a-67f7ee513f95.roa (raw, json)
Hash identifier:          ct6m/yg0mgKaOJvYD5H/2GwALf8O5KYgEnNGuOjDFfg=
Subject key identifier:   17:6F:28:DD:3C:B3:22:CA:EA:CF:ED:81:3A:A7:01:74:5E:12:4A:46
Certificate issuer:       /CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
Certificate serial:       010D0C9F4328584EE0C2188416F4F668D2D364C0
Authority key identifier: 7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/9c549b63-6d1b-340f-a75a-67f7ee513f95.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     396982
IP address blocks:        2607:1c0:2320::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:18:84:16:f4:f6:68:d2:d3:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=6e8a4fea-19cc-49fa-bfd8-1dfce04b4082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:82:1b:c3:fa:b5:1c:19:df:a4:bb:e0:ba:de:
                    85:13:31:b0:21:05:c2:0b:23:9c:07:08:f5:97:ff:
                    1e:55:33:55:3c:c5:47:e7:84:ed:f7:9a:97:f8:73:
                    77:33:ee:f0:c8:c0:7a:b6:2d:00:0f:ff:c7:19:cc:
                    a9:80:c6:c4:75:b3:b2:24:ba:26:8d:04:37:8b:03:
                    ef:74:dd:3d:10:de:f7:05:93:d3:73:ba:8c:ed:c5:
                    bc:63:b7:5c:dd:62:38:50:d3:fb:91:e7:35:77:42:
                    99:e9:ce:09:3e:b8:81:98:28:74:89:5a:4a:f7:15:
                    97:bb:a6:b2:ca:b0:8a:1a:10:d6:06:a1:f9:85:4b:
                    61:d6:35:21:ef:c9:e9:e5:2e:04:ac:45:5b:5a:75:
                    32:cc:87:a9:4e:f3:ce:cd:df:b7:5e:2a:89:1f:57:
                    bf:2a:ca:92:a8:6a:2f:3d:72:ee:79:67:e1:7d:d8:
                    8c:6e:c7:ff:df:7d:bd:09:29:a8:8c:6a:ac:bf:81:
                    11:be:6d:e4:8f:45:51:38:68:4a:0f:85:2c:da:5b:
                    1f:41:22:ef:92:80:da:ef:45:84:58:5a:27:03:e1:
                    a6:0b:35:c4:e6:8d:0d:33:64:d2:50:d8:92:a4:8c:
                    f2:c0:5a:1f:39:ec:6f:9d:3d:6d:c1:3a:ab:b8:19:
                    f6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6F:28:DD:3C:B3:22:CA:EA:CF:ED:81:3A:A7:01:74:5E:12:4A:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/9c549b63-6d1b-340f-a75a-67f7ee513f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl

            X509v3 Authority Key Identifier:
                keyid:7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1c0:2320::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:2a:be:83:68:37:a3:8d:d8:34:83:9d:aa:f6:bc:f1:f6:6e:
         c4:40:e1:55:33:ec:9f:06:99:79:43:8c:dd:a6:4d:1b:f0:fe:
         49:cc:ab:a0:b2:1e:b5:e3:fa:48:f0:e6:28:3a:1f:4a:8c:4e:
         a5:5b:5d:01:f8:af:56:a6:f0:af:c0:9c:d5:39:f6:0b:65:4a:
         c7:26:40:9e:d8:2f:bc:ee:69:5e:fe:10:83:f3:92:a7:35:1d:
         23:7a:e2:18:1c:05:f0:ec:cc:9c:c2:64:13:1e:a1:6e:de:4c:
         2f:cd:5c:36:72:6c:27:79:f3:4f:e3:d2:db:16:98:86:c4:c8:
         02:42:84:d6:bd:08:7c:67:ba:3e:6e:b9:c9:cd:2f:67:4a:1c:
         0a:8a:c2:9e:bb:fd:a6:5f:3e:69:d7:d1:aa:99:a3:65:33:7a:
         a1:a9:ef:2e:5a:32:8d:db:d0:1d:67:f6:90:0f:47:6d:f7:48:
         d4:88:27:36:32:61:90:25:72:c4:33:02:96:7f:8b:a8:bd:10:
         61:c7:15:c9:1e:ca:d0:2b:ec:7c:1e:75:0f:df:24:bb:31:f2:
         8d:ab:c7:38:87:c5:22:46:72:12:87:e4:9c:0c:e9:ca:28:56:
         09:f0:9d:06:0d:4b:dd:f4:74:52:ef:e3:c6:79:15:e8:5c:bb:
         22:bc:d1:79
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7gwhiEFvT2aNLTZMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzNjMTdkYjctMjA0Yy00MWUyLTg1Y2EtNmE1YTQ0OGE4
Yjg4MB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk
NmU4YTRmZWEtMTljYy00OWZhLWJmZDgtMWRmY2UwNGI0MDgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIIbw/q1HBnfpLvgut6FEzGwIQXCCyOcBwj1
l/8eVTNVPMVH54Tt95qX+HN3M+7wyMB6ti0AD//HGcypgMbEdbOyJLomjQQ3iwPv
dN09EN73BZPTc7qM7cW8Y7dc3WI4UNP7kec1d0KZ6c4JPriBmCh0iVpK9xWXu6ay
yrCKGhDWBqH5hUth1jUh78np5S4ErEVbWnUyzIepTvPOzd+3XiqJH1e/KsqSqGov
PXLueWfhfdiMbsf/3329CSmojGqsv4ERvm3kj0VROGhKD4Us2lsfQSLvkoDa70WE
WFonA+GmCzXE5o0NM2TSUNiSpIzywFofOexvnT1twTqruBn2ZwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBdvKN08syLK6s/tgTqnAXReEkpGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2Mx
N2RiNy0yMDRjLTQxZTItODVjYS02YTVhNDQ4YThiODgvOWM1NDliNjMtNmQxYi0z
NDBmLWE3NWEtNjdmN2VlNTEzZjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNjMTdkYjctMjA0Yy00MWUyLTg1
Y2EtNmE1YTQ0OGE4Yjg4L2MzYzE3ZGI3LTIwNGMtNDFlMi04NWNhLTZhNWE0NDhh
OGI4OC5jcmwwHwYDVR0jBBgwFoAUfS26/0Pb6XKW6UWHlVxFclTUa4MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2MxN2RiNy0yMDRjLTQxZTItODVjYS02YTVh
NDQ4YThiODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgcBwCMg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACMqvoNoN6ON2DSDnar2vPH2bsRA4VUz7J8GmXlDjN2mTRvw/knM
q6CyHrXj+kjw5ig6H0qMTqVbXQH4r1am8K/AnNU59gtlSscmQJ7YL7zuaV7+EIPz
kqc1HSN64hgcBfDszJzCZBMeoW7eTC/NXDZybCd580/j0tsWmIbEyAJChNa9CHxn
uj5uucnNL2dKHAqKwp67/aZfPmnX0aqZo2UzeqGp7y5aMo3b0B1n9pAPR233SNSI
JzYyYZAlcsQzApZ/i6i9EGHHFckeytAr7HwedQ/fJLsx8o2rxziHxSJGchKH5JwM
6cooVgnwnQYNS930dFLv48Z5FehcuyK80Xk=
-----END CERTIFICATE-----
Generated at Fri Aug 21 22:48:39 2026 by rpki-client