Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4a6b6451-8445-3cbd-8767-c10ab07c9f40.roa
File:                     4a6b6451-8445-3cbd-8767-c10ab07c9f40.roa (raw, json)
Hash identifier:          ehkAx3AZ+TG3Kt9Vcg4ZpIou9eUwqaArcXYZoOBwZIo=
Subject key identifier:   6F:CA:43:4E:57:67:84:76:E7:F8:27:3A:59:28:A5:4A:1E:0D:D8:5E
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584EC0A72C3F78A509E6985504C0
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4a6b6451-8445-3cbd-8767-c10ab07c9f40.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     38047
IP address blocks:        2602:f83b:54::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:2c:3f:78:a5:09:e6:98:55:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=3a7dbb96-4d66-44c3-9e6a-12295e504f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:eb:3e:d1:80:18:dd:3d:0b:00:9d:a7:47:7b:
                    59:89:b6:00:7e:8a:60:dd:97:70:42:52:f6:54:bd:
                    db:80:69:4b:77:4d:8f:d6:8b:8d:ea:5d:6d:3a:ff:
                    2f:27:61:5b:dd:46:40:45:20:f3:b4:22:aa:d9:3d:
                    67:7c:15:80:f0:37:e4:2d:ac:51:19:8d:18:8d:3d:
                    bc:f1:16:31:33:4f:63:59:87:d2:26:23:01:51:d2:
                    d1:95:79:7d:9a:ef:1e:80:07:57:34:a9:b5:90:87:
                    32:d8:ce:59:f1:cc:ff:b3:85:fb:78:3f:ed:13:68:
                    de:69:0c:69:2b:ae:3a:c6:21:74:a4:64:91:75:17:
                    63:53:d0:a4:20:20:39:69:ac:af:78:83:8f:4e:7d:
                    f0:78:6f:be:b4:7a:ee:99:c1:dd:15:5c:b2:2a:60:
                    a3:c7:ca:4c:71:84:76:4c:8f:3d:12:ed:ff:df:75:
                    64:7d:5f:c7:94:54:b9:93:1a:8e:dc:87:b5:8e:16:
                    fb:5b:1a:8c:a0:10:a8:5d:39:cf:a7:ed:83:29:be:
                    22:84:b0:37:71:df:7a:a4:25:27:af:91:07:d6:31:
                    cf:1f:32:01:d2:16:77:ea:1d:dd:c1:29:6f:a7:97:
                    22:0a:4b:e1:2d:25:cb:2d:9c:23:89:73:09:ce:44:
                    65:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CA:43:4E:57:67:84:76:E7:F8:27:3A:59:28:A5:4A:1E:0D:D8:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4a6b6451-8445-3cbd-8767-c10ab07c9f40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:54::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:28:be:ed:de:3a:06:70:48:24:40:af:35:6b:ae:df:ad:4f:
         58:98:c5:87:18:17:a1:90:9e:28:0d:e0:75:48:ba:fd:fd:85:
         8a:23:c1:c0:d2:37:17:85:90:cb:ef:82:48:5d:a5:09:90:02:
         68:61:90:cc:46:be:f3:f5:18:68:08:33:4f:a6:cc:d7:c9:c5:
         c1:6e:90:0e:8d:f3:f1:72:08:97:14:63:a0:8d:20:06:5e:35:
         83:d6:cf:f4:7b:71:52:e2:07:a8:bc:28:67:88:02:a4:bf:89:
         82:f3:84:3c:2b:b3:02:77:3e:8a:56:f4:78:77:aa:d2:9c:7b:
         e1:15:13:79:4e:ed:a7:ef:9b:02:57:71:1a:f3:b2:7e:90:f5:
         e3:ed:12:03:e9:b1:e5:c7:d4:21:e5:8b:ae:78:56:4b:4e:d0:
         79:55:fe:33:36:97:d9:85:2c:be:5d:de:af:f1:cb:ed:11:0d:
         17:21:c2:47:3c:5a:27:9d:0a:00:7a:63:51:ed:1f:a3:fd:d3:
         1f:2a:26:ba:83:5b:c7:63:a6:3c:10:d3:3c:c6:d0:e5:4c:1e:
         e9:f2:4d:01:c0:be:73:4c:38:49:f0:b5:cf:8a:c0:e6:33:20:
         15:f6:d3:59:52:da:51:23:86:d3:b5:da:5f:56:65:d8:b0:5b:
         1d:3a:3f:2c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7Apyw/eKUJ5phVBMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk
MjYxMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk
M2E3ZGJiOTYtNGQ2Ni00NGMzLTllNmEtMTIyOTVlNTA0ZjFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhes+0YAY3T0LAJ2nR3tZibYAfopg3ZdwQlL2
VL3bgGlLd02P1ouN6l1tOv8vJ2Fb3UZARSDztCKq2T1nfBWA8DfkLaxRGY0YjT28
8RYxM09jWYfSJiMBUdLRlXl9mu8egAdXNKm1kIcy2M5Z8cz/s4X7eD/tE2jeaQxp
K646xiF0pGSRdRdjU9CkICA5aayveIOPTn3weG++tHrumcHdFVyyKmCjx8pMcYR2
TI89Eu3/33VkfV/HlFS5kxqO3Ie1jhb7WxqMoBCoXTnPp+2DKb4ihLA3cd96pCUn
r5EH1jHPHzIB0hZ36h3dwSlvp5ciCkvhLSXLLZwjiXMJzkRl+QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG/KQ05XZ4R25/gnOlkopUoeDdheMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4
YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvNGE2YjY0NTEtODQ0NS0z
Y2JkLTg3NjctYzEwYWIwN2M5ZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1
YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk
ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm
MjVmZGQyNjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL4OwBU
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAsovu3eOgZwSCRArzVrrt+tT1iYxYcYF6GQnigN4HVIuv39hYoj
wcDSNxeFkMvvgkhdpQmQAmhhkMxGvvP1GGgIM0+mzNfJxcFukA6N8/FyCJcUY6CN
IAZeNYPWz/R7cVLiB6i8KGeIAqS/iYLzhDwrswJ3PopW9Hh3qtKce+EVE3lO7afv
mwJXcRrzsn6Q9ePtEgPpseXH1CHli654VktO0HlV/jM2l9mFLL5d3q/xy+0RDRch
wkc8WiedCgB6Y1HtH6P90x8qJrqDW8djpjwQ0zzG0OVMHunyTQHAvnNMOEnwtc+K
wOYzIBX201lS2lEjhtO12l9WZdiwWx06Pyw=
-----END CERTIFICATE-----
Generated at Sat Aug 22 18:02:32 2026 by rpki-client