Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/ef4033d2-fdce-3649-b1d4-cd5ecc71f792.roa
File:                     ef4033d2-fdce-3649-b1d4-cd5ecc71f792.roa (raw, json)
Hash identifier:          8DFdXDAtbVBxWt0nd8evjqMit3OWmaduMTgywoSbWBo=
Subject key identifier:   A9:E5:6D:E4:16:7B:5E:FA:1C:E9:9D:DC:72:E9:A8:91:C1:96:7A:F3
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F4328584E376478CB115AD4F9F863FCD8
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/ef4033d2-fdce-3649-b1d4-cd5ecc71f792.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     399045
IP address blocks:        2606:d640:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:78:cb:11:5a:d4:f9:f8:63:fc:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=1cd45de3-9842-4855-bb74-10d7d1077610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0a:1b:c2:47:8b:dd:ed:cf:26:a5:6f:9c:09:
                    82:bd:15:af:56:96:f8:11:1f:6c:f2:f6:a0:d1:44:
                    fa:2a:41:5a:19:66:b0:dd:43:fd:1f:77:f2:a2:13:
                    7e:a6:d2:30:cf:a0:84:7b:d7:33:85:4b:a6:70:92:
                    7d:00:af:08:0d:0c:36:e3:74:91:b6:30:cb:37:87:
                    f6:4e:c4:36:3b:6b:17:31:62:d1:10:77:57:26:7b:
                    8f:47:24:66:f5:f6:dc:73:f3:fc:5a:05:96:0d:08:
                    a1:b1:46:26:1d:c1:ac:98:b3:80:17:22:81:ba:24:
                    32:de:bc:c3:25:94:36:c3:5e:12:c1:0f:3f:8e:2d:
                    97:74:c5:60:fe:90:c9:30:e2:ae:ec:a6:41:57:25:
                    92:76:c8:cd:52:03:be:4e:f0:39:6e:25:14:85:04:
                    3d:43:c5:00:06:e8:27:c6:c4:94:24:80:b4:8b:50:
                    6c:4d:0d:df:da:26:14:be:be:93:e0:2e:78:3e:58:
                    bd:fb:3f:b8:ce:8b:a7:58:0a:39:1d:9d:19:a9:31:
                    ef:f0:32:2c:aa:26:9d:c1:8f:45:7f:4f:ea:db:05:
                    5f:a6:d4:c7:ae:6f:73:af:6b:7e:a4:86:4d:a0:3b:
                    a2:fe:78:97:82:d8:bc:2e:ef:45:a1:60:c2:e4:7d:
                    c5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E5:6D:E4:16:7B:5E:FA:1C:E9:9D:DC:72:E9:A8:91:C1:96:7A:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/ef4033d2-fdce-3649-b1d4-cd5ecc71f792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d640:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:b5:4f:44:65:de:59:32:37:67:05:f1:a7:5a:4a:96:8f:97:
         ee:ea:aa:2c:be:6e:54:20:d1:0c:e3:af:16:e2:51:37:10:98:
         a5:7b:20:70:39:77:2f:94:b6:17:1a:00:a8:3c:85:42:f5:a2:
         c1:8f:37:10:af:df:c0:4a:da:61:64:d8:a7:84:80:15:c0:6b:
         c9:89:5c:c1:00:ad:07:7f:30:ff:2d:aa:7c:2f:eb:98:c4:29:
         14:62:ac:28:59:f9:9f:fc:c7:4e:3d:c4:9c:b3:62:52:c5:3f:
         e3:9d:a1:70:e6:93:5b:7b:2f:4b:f9:69:fa:ad:ce:b6:b5:8a:
         0e:9f:a4:f8:f4:68:a6:cb:e7:63:9b:b9:ca:56:91:ed:a0:06:
         92:ea:5c:5d:61:ce:7d:db:b6:aa:51:5d:f7:c7:a4:82:9a:3e:
         aa:9e:2c:a6:99:35:82:d3:ab:7c:b6:6e:3f:f6:80:e7:bf:a3:
         df:82:92:bc:c9:ed:92:14:5c:55:b4:cb:47:d9:2d:1b:fb:92:
         03:80:6b:32:ca:64:2e:b8:f8:1c:e9:42:8d:ba:7b:f5:f0:39:
         26:bd:0f:00:63:17:d3:ff:b5:d0:c9:9c:8b:85:d5:be:f0:14:
         77:a5:3d:ba:34:e9:72:e9:84:71:7c:ea:bf:3a:bf:cc:f5:2a:
         2b:b8:54:03
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE43ZHjLEVrU+fhj/NgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGU0OWI0YzYtNGQ1OC00MmUwLWFiZTItOTM3NTRmZGNk
YTM1MB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk
MWNkNDVkZTMtOTg0Mi00ODU1LWJiNzQtMTBkN2QxMDc3NjEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAobwkeL3e3PJqVvnAmCvRWvVpb4ER9s8vag
0UT6KkFaGWaw3UP9H3fyohN+ptIwz6CEe9czhUumcJJ9AK8IDQw243SRtjDLN4f2
TsQ2O2sXMWLREHdXJnuPRyRm9fbcc/P8WgWWDQihsUYmHcGsmLOAFyKBuiQy3rzD
JZQ2w14SwQ8/ji2XdMVg/pDJMOKu7KZBVyWSdsjNUgO+TvA5biUUhQQ9Q8UABugn
xsSUJIC0i1BsTQ3f2iYUvr6T4C54Pli9+z+4zounWAo5HZ0ZqTHv8DIsqiadwY9F
f0/q2wVfptTHrm9zr2t+pIZNoDui/niXgti8Lu9FoWDC5H3FxwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKnlbeQWe176HOmd3HLpqJHBlnrzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5
YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZkY2RhMzUvZWY0MDMzZDItZmRjZS0z
NjQ5LWIxZDQtY2Q1ZWNjNzFmNzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU0OWI0YzYtNGQ1OC00MmUwLWFi
ZTItOTM3NTRmZGNkYTM1LzhlNDliNGM2LTRkNTgtNDJlMC1hYmUyLTkzNzU0ZmRj
ZGEzNS5jcmwwHwYDVR0jBBgwFoAUCkkYlphvz9SNs+aiIifBJlnS62swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1
NGZkY2RhMzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgbWQAIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAFLVPRGXeWTI3ZwXxp1pKlo+X7uqqLL5uVCDRDOOvFuJRNxCYpXsg
cDl3L5S2FxoAqDyFQvWiwY83EK/fwEraYWTYp4SAFcBryYlcwQCtB38w/y2qfC/r
mMQpFGKsKFn5n/zHTj3EnLNiUsU/452hcOaTW3svS/lp+q3OtrWKDp+k+PRopsvn
Y5u5ylaR7aAGkupcXWHOfdu2qlFd98ekgpo+qp4sppk1gtOrfLZuP/aA57+j34KS
vMntkhRcVbTLR9ktG/uSA4BrMspkLrj4HOlCjbp79fA5Jr0PAGMX0/+10Mmci4XV
vvAUd6U9ujTpcumEcXzqvzq/zPUqK7hUAw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:35:22 2026 by rpki-client