Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/4d791053-3127-3f02-a4e7-20d3e1e44946.roa
File:                     4d791053-3127-3f02-a4e7-20d3e1e44946.roa (raw, json)
Hash identifier:          hfA9FNyprCghEcOgk1PSPdd/2O4bXsdmNOQctgH9rSU=
Subject key identifier:   BF:04:E3:16:FA:08:FF:4D:92:87:C9:81:F4:58:F4:2D:45:58:4A:8D
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F4328584EB6E1A0F5EF71D47F94A5CDA0
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/4d791053-3127-3f02-a4e7-20d3e1e44946.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     399045
IP address blocks:        2606:d640:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:a0:f5:ef:71:d4:7f:94:a5:cd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=f8210d65-c8e8-4b3b-9b31-1ebc5fca6804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e7:23:92:c6:51:a6:f8:d9:8a:f1:1d:23:93:
                    88:a7:e0:f8:1d:44:aa:1d:7f:64:e3:56:9c:77:c4:
                    91:fe:9a:b9:8e:38:d6:b1:4a:8a:a7:55:7f:26:d2:
                    7f:9b:2a:c9:7b:eb:c5:c2:e9:cc:48:6a:de:ab:60:
                    7e:70:bc:4c:26:3a:cc:f0:b9:40:69:e2:da:db:e6:
                    41:fb:c5:45:c6:61:09:26:57:a9:61:11:2a:62:a3:
                    50:9e:e2:68:fa:e9:90:98:d9:b0:b6:4e:bb:91:03:
                    ea:e6:f3:99:3f:ad:d2:fa:f0:00:b5:e2:b1:b8:ba:
                    92:be:5a:13:05:6c:ae:ed:19:33:85:85:1d:fd:69:
                    66:ba:c4:6e:f1:c5:4a:06:c2:ff:d8:40:75:0e:53:
                    22:00:8f:dd:cc:a0:19:05:41:e4:81:4a:bc:c5:2a:
                    78:b1:ab:34:76:d3:8d:0c:27:e9:3b:1d:81:94:fb:
                    bd:51:fa:7b:1d:b0:31:2b:6c:11:8c:35:e2:cf:0d:
                    ad:b7:f6:09:a0:6a:fb:8a:25:f9:ba:ef:89:32:a6:
                    bf:dc:4b:74:45:92:2e:f9:6f:a9:3e:65:fc:04:63:
                    6b:17:68:2b:bb:cf:ca:f3:95:ee:b0:a2:5c:9a:8e:
                    22:ae:01:bd:de:22:e4:1d:ee:ee:a7:dc:82:0a:7b:
                    5a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:04:E3:16:FA:08:FF:4D:92:87:C9:81:F4:58:F4:2D:45:58:4A:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/4d791053-3127-3f02-a4e7-20d3e1e44946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d640:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:10:84:43:9b:b2:33:bb:23:65:4f:1a:46:ca:a3:0f:14:33:
         d5:b8:50:65:ca:91:77:c5:1d:d9:2e:3b:f5:17:5e:e9:5d:4e:
         4d:d1:3a:5e:e8:88:89:9c:01:6a:e6:9a:38:c8:71:31:1c:87:
         01:d4:53:a6:76:9e:54:a1:f2:fd:f8:88:81:ff:d6:19:e5:ef:
         11:48:d3:0b:cf:1e:82:96:d6:df:d7:1f:20:71:07:85:ce:44:
         20:ca:c1:d6:a8:0f:79:6a:8b:59:7d:fc:6a:42:a1:13:42:0f:
         ec:11:9f:75:f3:84:11:1a:b4:85:b1:b3:55:a5:7a:b4:d0:d3:
         ee:72:67:73:c1:fb:be:d3:54:60:e4:5c:62:82:d2:2f:41:2b:
         ba:e6:e2:4f:28:9e:a6:4a:5a:56:f6:33:02:fd:e8:a4:d3:78:
         80:57:47:69:db:51:1b:9f:d7:d3:12:6b:88:f7:16:6f:8b:d7:
         8e:76:71:e1:3b:5f:5b:75:29:09:1e:74:1a:67:9c:12:81:6e:
         a7:f0:0e:b3:e8:db:73:f2:3c:55:db:f1:ff:78:96:86:14:02:
         a7:74:c0:22:42:5b:58:2a:83:5b:c3:af:9d:dc:fc:64:95:f4:
         e6:72:76:ac:bc:43:87:cb:37:1a:6d:71:db:c8:c2:50:c5:cb:
         d2:57:2b:ec
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE624aD173HUf5SlzaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGU0OWI0YzYtNGQ1OC00MmUwLWFiZTItOTM3NTRmZGNk
YTM1MB4XDTI2MDgwMzEzMDAxMloXDTI2MTEwMTE0MDAxMlowLzEtMCsGA1UEAxMk
ZjgyMTBkNjUtYzhlOC00YjNiLTliMzEtMWViYzVmY2E2ODA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOcjksZRpvjZivEdI5OIp+D4HUSqHX9k41ac
d8SR/pq5jjjWsUqKp1V/JtJ/myrJe+vFwunMSGreq2B+cLxMJjrM8LlAaeLa2+ZB
+8VFxmEJJlepYREqYqNQnuJo+umQmNmwtk67kQPq5vOZP63S+vAAteKxuLqSvloT
BWyu7RkzhYUd/WlmusRu8cVKBsL/2EB1DlMiAI/dzKAZBUHkgUq8xSp4sas0dtON
DCfpOx2BlPu9Ufp7HbAxK2wRjDXizw2tt/YJoGr7iiX5uu+JMqa/3Et0RZIu+W+p
PmX8BGNrF2gru8/K85XusKJcmo4irgG93iLkHe7up9yCCntaUwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFL8E4xb6CP9NkofJgfRY9C1FWEqNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5
YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZkY2RhMzUvNGQ3OTEwNTMtMzEyNy0z
ZjAyLWE0ZTctMjBkM2UxZTQ0OTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU0OWI0YzYtNGQ1OC00MmUwLWFi
ZTItOTM3NTRmZGNkYTM1LzhlNDliNGM2LTRkNTgtNDJlMC1hYmUyLTkzNzU0ZmRj
ZGEzNS5jcmwwHwYDVR0jBBgwFoAUCkkYlphvz9SNs+aiIifBJlnS62swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1
NGZkY2RhMzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgbWQAEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAQRCEQ5uyM7sjZU8aRsqjDxQz1bhQZcqRd8Ud2S479Rde6V1OTdE6
XuiIiZwBauaaOMhxMRyHAdRTpnaeVKHy/fiIgf/WGeXvEUjTC88egpbW39cfIHEH
hc5EIMrB1qgPeWqLWX38akKhE0IP7BGfdfOEERq0hbGzVaV6tNDT7nJnc8H7vtNU
YORcYoLSL0EruubiTyiepkpaVvYzAv3opNN4gFdHadtRG5/X0xJriPcWb4vXjnZx
4TtfW3UpCR50GmecEoFup/AOs+jbc/I8Vdvx/3iWhhQCp3TAIkJbWCqDW8Ovndz8
ZJX05nJ2rLxDh8s3Gm1x28jCUMXL0lcr7A==
-----END CERTIFICATE-----
Generated at Mon Sep 14 14:35:19 2026 by rpki-client