Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/c8c6824b-e09a-3761-acb0-ab3727ecd853.roa
File:                     c8c6824b-e09a-3761-acb0-ab3727ecd853.roa (raw, json)
Hash identifier:          /oAe2irH4TjhRUKG5cTkihm2lJaqJR9touv7bnnFnLY=
Subject key identifier:   88:BB:81:BE:1D:5B:35:D1:85:8F:AB:58:C9:64:55:E9:3F:50:2B:C0
Certificate issuer:       /CN=46ea6d07-9209-4ad1-b0bf-fcd8f5018c70
Certificate serial:       010D0C9F4328584F63F822F2F5694FE702256530
Authority key identifier: 8F:48:41:BE:AD:4F:8B:F9:40:81:A0:90:C3:70:23:AC:91:68:36:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/c8c6824b-e09a-3761-acb0-ab3727ecd853.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     1030
IP address blocks:        2602:f9c4::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:22:f2:f5:69:4f:e7:02:25:65:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ea6d07-9209-4ad1-b0bf-fcd8f5018c70
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=3dffeb03-f5af-42fa-b71f-bc2fec1a7de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:15:f3:3f:e5:c5:a8:23:81:0b:4a:ab:57:30:
                    22:01:2f:bd:35:cf:cc:75:65:36:76:27:9e:34:b7:
                    f2:55:04:a5:37:65:b0:70:eb:d4:df:e2:85:cd:85:
                    f5:51:af:f7:a0:af:a4:e2:e3:71:92:3d:41:57:e9:
                    d0:c0:db:f0:28:e1:47:a9:11:b1:38:f3:0f:23:1e:
                    fd:6f:2a:e4:45:c4:3a:bf:59:f6:e0:55:84:e8:c0:
                    b8:78:c8:eb:fc:ea:8a:75:b5:3e:77:05:df:ec:36:
                    2b:63:06:87:17:85:1b:ee:72:ce:91:5c:55:fc:73:
                    61:4f:b3:74:9b:ed:e9:63:d6:b6:a1:b4:fb:ad:73:
                    60:0e:95:31:6e:b0:a2:8c:3f:4f:9b:94:9c:7b:51:
                    58:89:2f:64:86:85:71:9d:d5:91:51:5c:16:aa:2c:
                    48:03:6c:37:0e:50:35:32:13:4f:b9:3a:32:e6:e0:
                    a3:6d:21:5e:08:5c:56:8d:80:8a:5b:79:8d:d3:70:
                    dc:77:44:62:17:02:82:1c:49:4c:0c:f4:3b:c9:e5:
                    e5:13:0a:ef:0f:7b:7c:5e:c7:55:70:32:1b:53:79:
                    02:a5:e1:44:4e:e9:c7:7c:0b:c7:bf:f7:7c:ae:3e:
                    48:68:b5:e3:42:03:a0:5d:40:74:1e:ab:02:71:d7:
                    4f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BB:81:BE:1D:5B:35:D1:85:8F:AB:58:C9:64:55:E9:3F:50:2B:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/c8c6824b-e09a-3761-acb0-ab3727ecd853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.crl

            X509v3 Authority Key Identifier:
                keyid:8F:48:41:BE:AD:4F:8B:F9:40:81:A0:90:C3:70:23:AC:91:68:36:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/46ea6d07-9209-4ad1-b0bf-fcd8f5018c70.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9c4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:bf:30:68:4d:df:d4:2e:bd:db:71:6b:02:46:45:b3:10:55:
         93:07:68:72:99:a7:5f:38:57:eb:1d:73:a7:e7:d4:ee:41:6d:
         29:93:88:8a:0b:05:8b:dc:99:17:36:80:fc:80:76:f0:6c:d7:
         23:2b:53:14:fe:e7:35:6b:89:20:d0:02:0c:5b:15:e4:f4:45:
         0b:76:ec:10:02:f1:fa:95:e1:4b:5b:a8:c8:f5:4f:bc:61:b9:
         70:b8:ae:52:23:af:2b:c4:31:60:89:0a:0e:90:93:21:ce:aa:
         21:f7:e8:1e:a2:36:36:b4:48:7b:1a:26:78:0a:95:52:2e:82:
         47:6a:a6:43:c2:53:40:79:b5:2e:6b:aa:b9:70:e2:df:a4:a8:
         d4:1f:6a:ba:21:b8:4c:59:99:0f:db:a8:a1:21:0e:75:1e:07:
         5a:e4:2e:76:30:c6:ce:37:b5:42:f5:54:e5:d8:08:d2:a8:bf:
         ba:b4:17:da:26:25:38:c1:21:8d:0e:56:60:96:9b:ea:e5:04:
         76:0d:07:8c:bd:36:7d:ca:bb:cc:07:2f:d8:f4:79:38:5e:3b:
         49:93:9e:c1:76:5f:aa:93:92:b1:46:40:f3:37:7d:ad:99:75:
         f2:e5:3b:55:e1:63:6e:84:6d:00:0c:31:0d:71:eb:5a:9a:c6:
         3a:72:e9:75
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9j+CLy9WlP5wIlZTAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDZlYTZkMDctOTIwOS00YWQxLWIwYmYtZmNkOGY1MDE4
YzcwMB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk
M2RmZmViMDMtZjVhZi00MmZhLWI3MWYtYmMyZmVjMWE3ZGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRXzP+XFqCOBC0qrVzAiAS+9Nc/MdWU2diee
NLfyVQSlN2WwcOvU3+KFzYX1Ua/3oK+k4uNxkj1BV+nQwNvwKOFHqRGxOPMPIx79
byrkRcQ6v1n24FWE6MC4eMjr/OqKdbU+dwXf7DYrYwaHF4Ub7nLOkVxV/HNhT7N0
m+3pY9a2obT7rXNgDpUxbrCijD9Pm5Sce1FYiS9khoVxndWRUVwWqixIA2w3DlA1
MhNPuToy5uCjbSFeCFxWjYCKW3mN03Dcd0RiFwKCHElMDPQ7yeXlEwrvD3t8XsdV
cDIbU3kCpeFETunHfAvHv/d8rj5IaLXjQgOgXUB0HqsCcddPGQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIi7gb4dWzXRhY+rWMlkVek/UCvAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80NmVh
NmQwNy05MjA5LTRhZDEtYjBiZi1mY2Q4ZjUwMThjNzAvYzhjNjgyNGItZTA5YS0z
NzYxLWFjYjAtYWIzNzI3ZWNkODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDZlYTZkMDctOTIwOS00YWQxLWIw
YmYtZmNkOGY1MDE4YzcwLzQ2ZWE2ZDA3LTkyMDktNGFkMS1iMGJmLWZjZDhmNTAx
OGM3MC5jcmwwHwYDVR0jBBgwFoAUj0hBvq1Pi/lAgaCQw3AjrJFoNmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80NmVhNmQwNy05MjA5LTRhZDEtYjBiZi1mY2Q4
ZjUwMThjNzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5xAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAF78waE3f1C6923FrAkZFsxBVkwdocpmnXzhX6x1zp+fU7kFtKZOI
igsFi9yZFzaA/IB28GzXIytTFP7nNWuJINACDFsV5PRFC3bsEALx+pXhS1uoyPVP
vGG5cLiuUiOvK8QxYIkKDpCTIc6qIffoHqI2NrRIexomeAqVUi6CR2qmQ8JTQHm1
LmuquXDi36So1B9quiG4TFmZD9uooSEOdR4HWuQudjDGzje1QvVU5dgI0qi/urQX
2iYlOMEhjQ5WYJab6uUEdg0HjL02fcq7zAcv2PR5OF47SZOewXZfqpOSsUZA8zd9
rZl18uU7VeFjboRtAAwxDXHrWprGOnLpdQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 08:13:28 2026 by rpki-client