Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/f01c2c0d-4968-3de8-9091-c7fe8240fdf9.roa
File:                     f01c2c0d-4968-3de8-9091-c7fe8240fdf9.roa (raw, json)
Hash identifier:          EA7iurm0EtRe7X/18u0xVQtv1dzOf+NOwZqtY3afnys=
Subject key identifier:   CE:8E:98:39:E9:7D:98:3C:96:ED:00:A7:A7:F0:B2:6B:A6:FD:DD:F6
Certificate issuer:       /CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0
Certificate serial:       010D0C9F4328584EEEB7544A5329820B78623C80
Authority key identifier: 57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/f01c2c0d-4968-3de8-9091-c7fe8240fdf9.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     11904
IP address blocks:        2604:ae80:1000::/36 maxlen: 36
                          2604:ae80:1000::/40 maxlen: 40
                          2604:ae80:6001::/48 maxlen: 48
                          2604:ae80:6002::/48 maxlen: 48
                          2604:ae80:a100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:54:4a:53:29:82:0b:78:62:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=87dfc0de-997f-495f-b2ff-fae49106a73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:57:62:7a:d0:99:2f:77:e5:bd:88:2c:8b:7d:
                    db:9c:57:b0:af:7f:cc:44:1f:d6:2c:99:74:a0:15:
                    f3:03:ef:0a:8a:b6:1d:6d:e7:3d:57:ee:93:31:e3:
                    d0:66:b7:58:fc:17:1f:96:d0:39:96:03:4f:64:d3:
                    3c:27:f5:fa:76:82:d6:b7:6d:52:57:90:2f:82:63:
                    bc:0a:52:e7:b9:b8:c7:26:ee:65:08:88:49:76:7a:
                    cf:74:b4:1d:59:64:96:3e:17:1b:de:dc:b6:4e:25:
                    9c:38:74:2c:2f:ab:4d:be:bf:50:51:a3:57:0b:94:
                    87:13:3d:32:ad:2a:c0:68:8f:e2:a6:f6:09:9c:56:
                    f8:7f:77:99:5e:2c:9a:f2:05:7a:b8:de:42:98:ff:
                    d9:da:60:0a:69:96:5b:7a:64:96:c1:03:49:d5:a3:
                    4f:f6:5a:8f:73:cd:75:6c:db:17:ad:64:97:a9:86:
                    49:dc:69:2e:61:bf:a0:7f:f6:12:8b:c1:36:78:7d:
                    4a:e8:a6:d1:42:c7:71:a1:d3:11:b9:f5:d8:b9:53:
                    c4:32:77:83:92:d0:32:29:63:6e:ce:43:b6:1b:97:
                    63:e0:b4:55:d0:1a:68:f0:99:9d:09:df:8b:a5:77:
                    99:ca:a3:d3:a9:71:95:33:49:de:ef:6f:a3:14:c8:
                    b5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8E:98:39:E9:7D:98:3C:96:ED:00:A7:A7:F0:B2:6B:A6:FD:DD:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/f01c2c0d-4968-3de8-9091-c7fe8240fdf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl

            X509v3 Authority Key Identifier:
                keyid:57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ae80:1000::/36
                  2604:ae80:6001::-2604:ae80:6002:ffff:ffff:ffff:ffff:ffff
                  2604:ae80:a100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:1d:47:79:a0:93:30:17:2c:8f:a4:b0:a8:c9:31:16:d8:1c:
         22:53:df:25:a2:d3:ff:21:cc:dc:35:a8:41:1a:60:e5:48:1d:
         32:7b:16:5b:8e:68:59:ad:d0:81:4a:54:7d:b8:5b:00:70:15:
         5f:88:7a:d9:2a:1c:55:53:69:a2:94:e1:a9:1a:9b:6e:ef:e6:
         12:db:8b:1c:7b:be:b3:7a:b7:ae:41:8f:a7:c6:bc:2b:d9:f9:
         77:a9:df:8c:95:f3:8a:a7:1c:3c:60:b4:13:e7:c8:9f:d0:c1:
         f3:84:bd:f9:4a:01:9a:e5:61:c0:5b:51:ce:67:48:79:2b:94:
         9b:21:af:a6:c5:f6:08:93:e7:40:b2:89:36:dd:49:f1:2c:e9:
         31:a7:6a:c8:2f:c1:61:fc:eb:ba:01:90:66:89:ee:2e:22:ff:
         6f:30:a2:c8:0d:44:a4:ed:55:58:48:9a:d7:96:c2:5f:58:fd:
         f0:45:05:cb:c3:8b:cc:9e:29:42:ca:9f:54:79:b5:fe:8c:98:
         b6:d5:37:ed:a7:c6:de:d4:2f:bc:96:02:a1:02:aa:3b:b1:22:
         c8:ff:65:49:01:3a:51:d5:dc:9e:4a:7c:e9:cb:db:e6:c0:ba:
         aa:b3:34:f3:e1:74:bd:22:d5:2b:0e:e1:1b:a8:e6:bf:53:d3:
         c5:91:d5:f8
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWE7ut1RKUymCC3hiPIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjEzM2U0N2QtN2M5Ni00YTFmLTlhNWUtYzIwNzJmNWU3
ZmQwMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk
ODdkZmMwZGUtOTk3Zi00OTVmLWIyZmYtZmFlNDkxMDZhNzNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFdietCZL3flvYgsi33bnFewr3/MRB/WLJl0
oBXzA+8KirYdbec9V+6TMePQZrdY/BcfltA5lgNPZNM8J/X6doLWt21SV5AvgmO8
ClLnubjHJu5lCIhJdnrPdLQdWWSWPhcb3ty2TiWcOHQsL6tNvr9QUaNXC5SHEz0y
rSrAaI/ipvYJnFb4f3eZXiya8gV6uN5CmP/Z2mAKaZZbemSWwQNJ1aNP9lqPc811
bNsXrWSXqYZJ3GkuYb+gf/YSi8E2eH1K6KbRQsdxodMRufXYuVPEMneDktAyKWNu
zkO2G5dj4LRV0Bpo8JmdCd+LpXeZyqPTqXGVM0ne72+jFMi1WQIDAQABo4IDczCC
A28wHQYDVR0OBBYEFM6OmDnpfZg8lu0Ap6fwsmum/d32MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82MTMz
ZTQ3ZC03Yzk2LTRhMWYtOWE1ZS1jMjA3MmY1ZTdmZDAvZjAxYzJjMGQtNDk2OC0z
ZGU4LTkwOTEtYzdmZTgyNDBmZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjEzM2U0N2QtN2M5Ni00YTFmLTlh
NWUtYzIwNzJmNWU3ZmQwLzYxMzNlNDdkLTdjOTYtNGExZi05YTVlLWMyMDcyZjVl
N2ZkMC5jcmwwHwYDVR0jBBgwFoAUV4kUoMAR4yp+Kc6cB1dl/lysiR8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82MTMzZTQ3ZC03Yzk2LTRhMWYtOWE1ZS1jMjA3
MmY1ZTdmZDAuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwYEJgSugBAw
EgMHACYEroBgAQMHACYEroBgAgMGACYEroChMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABMdR3mgkzAXLI+k
sKjJMRbYHCJT3yWi0/8hzNw1qEEaYOVIHTJ7FluOaFmt0IFKVH24WwBwFV+Ietkq
HFVTaaKU4akam27v5hLbixx7vrN6t65Bj6fGvCvZ+Xep34yV84qnHDxgtBPnyJ/Q
wfOEvflKAZrlYcBbUc5nSHkrlJshr6bF9giT50CyiTbdSfEs6TGnasgvwWH867oB
kGaJ7i4i/28wosgNRKTtVVhImteWwl9Y/fBFBcvDi8yeKULKn1R5tf6MmLbVN+2n
xt7UL7yWAqECqjuxIsj/ZUkBOlHV3J5KfOnL2+bAuqqzNPPhdL0i1SsO4Ruo5r9T
08WR1fg=
-----END CERTIFICATE-----
Generated at Mon Aug 24 04:35:10 2026 by rpki-client