Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/44a2c5c2-65f9-36f6-8fa3-a71457bc1287.roa
File:                     44a2c5c2-65f9-36f6-8fa3-a71457bc1287.roa (raw, json)
Hash identifier:          6+rfKmy7bWe/K875H6TmqQnD3OJyocajAia3OLVStaU=
Subject key identifier:   0A:52:03:35:62:65:7A:DA:99:B1:5C:E1:D8:B4:EA:2B:90:96:3B:6D
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F4328584EB8473E39339579208CA9A7E0
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/44a2c5c2-65f9-36f6-8fa3-a71457bc1287.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     12198
IP address blocks:        2602:f919:900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:3e:39:33:95:79:20:8c:a9:a7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=134d2e9b-1214-4eb1-a6c1-c4fc718a2c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b6:b5:50:43:54:af:4f:5b:15:65:f6:8b:f3:
                    ee:1c:38:a6:9d:68:79:04:31:6b:a2:eb:2c:2b:10:
                    6c:1e:35:02:63:44:c4:48:70:ca:08:06:3f:c3:18:
                    ce:92:93:13:c4:89:17:96:9d:ca:0a:2d:55:6a:b9:
                    33:ee:67:d1:d2:4b:fb:46:78:3d:bf:36:7d:29:d4:
                    43:9f:2d:e4:40:d3:27:5e:f2:cf:b3:dc:ad:bc:d7:
                    f8:d1:43:d7:18:48:32:d7:58:d0:dc:56:f0:03:18:
                    54:49:2d:ae:06:a6:c3:2f:e2:73:3f:4f:a8:20:c1:
                    a5:2f:f8:43:ed:5b:8b:f2:e5:db:85:93:e4:8a:14:
                    5f:0f:fe:ce:8b:c3:90:85:b8:3c:7c:a0:d3:b3:8f:
                    1f:d9:91:13:b5:6a:7d:db:55:32:26:f8:22:77:fd:
                    68:27:fe:ee:3d:1a:a4:f0:b7:6b:a0:d0:7c:b8:6a:
                    21:85:d9:0d:bd:44:b0:42:91:18:b4:05:4a:a5:e1:
                    30:af:f6:94:22:49:e6:c5:02:d9:79:0e:20:f0:3a:
                    89:07:cf:28:03:32:0b:32:f8:da:eb:e2:31:07:3c:
                    b8:48:59:39:ba:04:42:4c:54:dd:3c:8e:36:e1:d0:
                    e9:1f:e5:a6:f9:f0:2a:d7:36:bc:27:2a:57:94:2b:
                    2f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:52:03:35:62:65:7A:DA:99:B1:5C:E1:D8:B4:EA:2B:90:96:3B:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/44a2c5c2-65f9-36f6-8fa3-a71457bc1287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:e9:5c:15:1d:d6:da:1b:d2:1b:a6:db:c3:74:05:35:60:f1:
         a3:4b:36:56:16:ae:1b:d0:e3:f9:0d:5a:3a:86:fb:9c:de:57:
         a4:fd:87:b7:a3:2d:fe:f9:1b:08:c1:1d:f6:0b:ac:f1:6d:41:
         be:04:f9:3e:cd:34:c4:9b:f4:c5:ca:25:2c:21:e3:f6:6c:d1:
         2b:7a:4a:3f:72:4b:dc:52:87:1b:74:1a:67:4a:12:aa:5d:a4:
         33:e8:c6:77:ca:bf:39:2b:66:32:9c:07:c3:d0:ae:72:3f:41:
         d9:48:d9:3c:55:7f:7f:0c:0d:02:1f:13:10:18:d8:eb:67:54:
         4d:02:2f:9f:29:b8:47:d8:4b:d5:bc:4c:f1:a3:bd:80:c8:20:
         da:f1:ae:fc:48:9a:ef:31:93:e8:1e:75:20:ec:14:c4:8f:dc:
         b9:79:cb:3e:d6:7a:dd:37:20:32:d6:95:2e:11:92:9b:fa:68:
         3a:8f:d8:42:c6:b3:70:0f:2e:dd:1b:b2:7d:50:e2:46:df:86:
         5f:1c:49:8e:4b:1c:ae:37:04:89:4c:95:38:52:3c:9d:00:e1:
         e1:90:f5:cc:01:59:22:9b:59:74:53:cf:79:11:2a:85:d0:46:
         be:8c:8e:81:31:66:28:74:d7:c5:b9:dd:5f:0e:11:cf:f1:63:
         72:ad:ba:31
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE64Rz45M5V5IIypp+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDg0OGNjOWItZTQ2Zi00ODVlLWIzZjItNGYzOTNiNWQ5
MmQ2MB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk
MTM0ZDJlOWItMTIxNC00ZWIxLWE2YzEtYzRmYzcxOGEyYzk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAira1UENUr09bFWX2i/PuHDimnWh5BDFrouss
KxBsHjUCY0TESHDKCAY/wxjOkpMTxIkXlp3KCi1Varkz7mfR0kv7Rng9vzZ9KdRD
ny3kQNMnXvLPs9ytvNf40UPXGEgy11jQ3FbwAxhUSS2uBqbDL+JzP0+oIMGlL/hD
7VuL8uXbhZPkihRfD/7Oi8OQhbg8fKDTs48f2ZETtWp921UyJvgid/1oJ/7uPRqk
8LdroNB8uGohhdkNvUSwQpEYtAVKpeEwr/aUIknmxQLZeQ4g8DqJB88oAzILMvja
6+IxBzy4SFk5ugRCTFTdPI424dDpH+Wm+fAq1za8JypXlCsv/QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFApSAzViZXrambFc4di06iuQljttMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80ODQ4
Y2M5Yi1lNDZmLTQ4NWUtYjNmMi00ZjM5M2I1ZDkyZDYvNDRhMmM1YzItNjVmOS0z
NmY2LThmYTMtYTcxNDU3YmMxMjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDg0OGNjOWItZTQ2Zi00ODVlLWIz
ZjItNGYzOTNiNWQ5MmQ2LzQ4NDhjYzliLWU0NmYtNDg1ZS1iM2YyLTRmMzkzYjVk
OTJkNi5jcmwwHwYDVR0jBBgwFoAUtipAlYdVr48BpEATPSLyFSu2jeswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80ODQ4Y2M5Yi1lNDZmLTQ4NWUtYjNmMi00ZjM5
M2I1ZDkyZDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5GQkw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAI+lcFR3W2hvSG6bbw3QFNWDxo0s2VhauG9Dj+Q1aOob7nN5XpP2H
t6Mt/vkbCMEd9gus8W1BvgT5Ps00xJv0xcolLCHj9mzRK3pKP3JL3FKHG3QaZ0oS
ql2kM+jGd8q/OStmMpwHw9Cucj9B2UjZPFV/fwwNAh8TEBjY62dUTQIvnym4R9hL
1bxM8aO9gMgg2vGu/Eia7zGT6B51IOwUxI/cuXnLPtZ63TcgMtaVLhGSm/poOo/Y
QsazcA8u3RuyfVDiRt+GXxxJjkscrjcEiUyVOFI8nQDh4ZD1zAFZIptZdFPPeREq
hdBGvoyOgTFmKHTXxbndXw4Rz/Fjcq26MQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:04 2026 by rpki-client