Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a225908-0718-3d8f-a90a-11a4b96d2b6e.roa
File:                     2a225908-0718-3d8f-a90a-11a4b96d2b6e.roa (raw, json)
Hash identifier:          2LrbjH0e5h6YZoKCQmaetTY9oOf/Ql8uHfH6Pe2TAcQ=
Subject key identifier:   67:6A:7F:1C:75:C0:5F:D1:E1:5E:91:95:CB:1E:9C:84:1A:5A:93:F7
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584ECBD1E4C7AD460817A8ADD900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a225908-0718-3d8f-a90a-11a4b96d2b6e.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     15169
IP address blocks:        2600:1902:1f0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:e4:c7:ad:46:08:17:a8:ad:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=f81f50e9-980a-4c36-ac77-1493429ad9ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fb:f9:90:ce:66:ce:5e:7b:00:fc:55:63:6b:
                    06:f5:01:51:8d:2f:b6:b2:64:30:de:3f:ac:cc:2f:
                    ca:b5:43:2f:8e:ea:46:26:df:12:b9:0a:e0:58:98:
                    c9:b7:18:21:6d:8c:c9:86:4f:ae:f6:a9:f5:48:ba:
                    2d:10:47:e6:93:0d:34:eb:15:81:32:62:f7:58:49:
                    22:57:de:d9:4c:9a:26:34:c7:82:ec:58:22:81:0f:
                    1e:ea:7d:61:68:fc:54:94:f3:ea:37:84:c8:e5:b4:
                    b2:73:49:37:cc:94:b7:0e:6a:05:b0:d1:58:00:84:
                    81:de:a9:8b:a3:9e:7b:6a:cc:86:c4:24:a4:23:05:
                    7e:20:f9:ca:2b:8a:ce:04:f8:0d:5b:23:22:ad:cc:
                    b8:61:81:1d:e9:dd:38:62:29:20:33:76:da:01:5f:
                    14:9a:c0:eb:3b:44:af:32:fc:a2:90:b7:f0:8d:b0:
                    74:c9:c2:8c:97:2b:61:51:92:22:dc:6e:08:22:64:
                    37:fc:2f:51:30:2a:28:82:b5:d9:d9:6e:a6:1e:f2:
                    3c:aa:a8:37:f7:1f:fd:56:27:60:48:61:a7:17:5c:
                    71:13:3b:15:fd:7f:a9:2f:d9:fb:3d:3b:1d:b6:ae:
                    f6:73:50:c2:c2:8b:87:20:8a:dc:69:03:ea:98:52:
                    32:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6A:7F:1C:75:C0:5F:D1:E1:5E:91:95:CB:1E:9C:84:1A:5A:93:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2a225908-0718-3d8f-a90a-11a4b96d2b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:1f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:ba:06:8f:0e:24:e2:d1:75:4d:0f:08:50:29:3c:b6:95:63:
         f5:81:2e:3f:0e:29:27:72:ea:e7:f3:e4:9c:09:85:a6:a6:41:
         f7:0e:d5:1b:c7:ac:1a:13:71:a7:59:80:3b:2e:60:e2:a1:bd:
         f7:8f:41:32:25:28:bf:2f:9f:a7:e5:ac:ff:a2:31:ac:f0:cb:
         57:df:6f:d7:3a:56:cf:13:a6:b0:3d:84:5b:08:14:6c:58:97:
         76:60:8a:6d:19:67:7e:74:72:25:48:fc:91:cf:3a:e3:bb:bf:
         d4:f2:d2:95:ad:36:69:f6:2a:41:66:ab:9e:04:ef:db:10:d0:
         d1:7e:db:17:c4:24:34:cb:15:9b:cb:11:dd:ed:ca:f6:fc:23:
         bc:72:9d:ef:65:16:21:b3:91:e9:ac:7f:d5:35:58:13:1f:07:
         62:8f:ed:c8:ef:2e:f9:43:96:3b:68:46:8f:9a:81:78:37:04:
         b0:a1:e3:ef:eb:d8:10:74:4d:d6:8f:80:7c:28:f7:ce:6c:93:
         52:d7:40:b9:2f:b5:14:51:28:49:ef:e7:6a:38:67:2a:5d:e5:
         71:64:d8:f4:ee:a5:bc:6e:6f:6b:81:ea:b1:c0:7d:9a:ae:14:
         67:5f:8d:e7:3c:c7:df:7e:a9:eb:48:14:1a:d9:1d:e3:62:7c:
         ea:b0:20:cb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7L0eTHrUYIF6it2QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk
ZjgxZjUwZTktOTgwYS00YzM2LWFjNzctMTQ5MzQyOWFkOWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/v5kM5mzl57APxVY2sG9QFRjS+2smQw3j+s
zC/KtUMvjupGJt8SuQrgWJjJtxghbYzJhk+u9qn1SLotEEfmkw006xWBMmL3WEki
V97ZTJomNMeC7FgigQ8e6n1haPxUlPPqN4TI5bSyc0k3zJS3DmoFsNFYAISB3qmL
o557asyGxCSkIwV+IPnKK4rOBPgNWyMircy4YYEd6d04YikgM3baAV8UmsDrO0Sv
MvyikLfwjbB0ycKMlythUZIi3G4IImQ3/C9RMCoogrXZ2W6mHvI8qqg39x/9Vidg
SGGnF1xxEzsV/X+pL9n7PTsdtq72c1DCwouHIIrcaQPqmFIyNwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGdqfxx1wF/R4V6RlcsenIQaWpP3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMmEyMjU5MDgtMDcxOC0z
ZDhmLWE5MGEtMTFhNGI5NmQyYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAgHw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKK6Bo8OJOLRdU0PCFApPLaVY/WBLj8OKSdy6ufz5JwJhaamQfcO
1RvHrBoTcadZgDsuYOKhvfePQTIlKL8vn6flrP+iMazwy1ffb9c6Vs8TprA9hFsI
FGxYl3Zgim0ZZ350ciVI/JHPOuO7v9Ty0pWtNmn2KkFmq54E79sQ0NF+2xfEJDTL
FZvLEd3tyvb8I7xyne9lFiGzkemsf9U1WBMfB2KP7cjvLvlDljtoRo+agXg3BLCh
4+/r2BB0TdaPgHwo985sk1LXQLkvtRRRKEnv52o4Zypd5XFk2PTupbxub2uB6rHA
fZquFGdfjec8x99+qetIFBrZHeNifOqwIMs=
-----END CERTIFICATE-----
Generated at Mon Sep 28 15:35:43 2026 by rpki-client