Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/3c0f3863-e6b0-3003-9543-cbcefd435650.roa
File:                     3c0f3863-e6b0-3003-9543-cbcefd435650.roa (raw, json)
Hash identifier:          UTbBre3+VD8EWzS3xnbkZhHmUVRc/uBdOtxFllHz9iM=
Subject key identifier:   B9:07:3F:0A:CD:39:D5:EE:35:4E:7D:71:45:91:8A:00:0C:FC:9C:A1
Certificate issuer:       /CN=88e1646b-e1b3-42e7-8591-3a57fd436369
Certificate serial:       010D0C9F4328584E48248A3400796C144B129F40
Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/3c0f3863-e6b0-3003-9543-cbcefd435650.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     2698
IP address blocks:        2610:130:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:8a:34:00:79:6c:14:4b:12:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=fb2633b9-ff07-4c30-be98-e1e5a6087e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1f:78:fd:5a:85:41:89:63:9f:c4:30:98:13:
                    c0:59:3d:fb:7d:33:31:43:36:be:bf:56:22:5f:f9:
                    36:f5:e7:e6:13:42:3b:94:ae:2e:cb:0a:76:b1:ef:
                    83:39:4d:97:b4:b0:f6:78:7a:6f:ba:ad:b0:fc:bb:
                    eb:22:64:54:fa:5c:c5:65:bd:7f:19:b3:ab:d7:5e:
                    94:a9:ca:27:b1:f3:98:b3:47:3e:10:cb:96:e8:c8:
                    f2:65:b8:81:55:9b:d8:07:5e:8e:8f:8f:b9:b5:9b:
                    9b:7b:ad:0f:f5:33:4e:8a:ae:d4:59:36:c4:76:ef:
                    7d:8d:32:87:d6:7b:07:b7:51:83:40:c4:6e:ed:2d:
                    64:fd:df:76:fd:e4:f9:ef:f4:c7:11:39:dd:5d:5e:
                    94:63:0f:df:60:b4:ef:64:5d:52:29:b3:c3:0a:e9:
                    92:ac:52:0d:96:bb:ec:f6:88:40:ae:85:f6:70:ac:
                    26:94:69:32:57:7c:f4:46:d4:d8:62:aa:1d:8f:91:
                    15:07:85:43:62:0e:df:6a:dc:60:28:64:d8:f8:c3:
                    a7:93:32:dd:5b:ac:26:2f:63:c8:63:93:d5:69:30:
                    f1:42:c9:b8:03:88:f9:3f:aa:0a:44:88:71:0f:7f:
                    99:77:40:79:16:59:a5:49:58:b3:c5:75:e3:73:19:
                    43:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:07:3F:0A:CD:39:D5:EE:35:4E:7D:71:45:91:8A:00:0C:FC:9C:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/3c0f3863-e6b0-3003-9543-cbcefd435650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl

            X509v3 Authority Key Identifier:
                keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:130:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:c7:56:cf:25:48:65:e2:92:df:cd:30:a4:c8:dc:b2:67:ee:
         ee:b0:79:ed:b2:50:31:2d:46:9d:db:c5:8d:3b:71:45:cf:4b:
         86:a0:7e:9a:7c:6a:19:d7:46:d3:ba:f9:99:94:22:c6:5c:33:
         c2:58:d1:27:2c:fa:53:35:bc:5f:5d:31:e3:37:2d:f1:bb:8c:
         15:26:85:28:94:3a:ce:ba:19:27:5d:7a:0d:37:c2:67:50:50:
         49:08:1e:71:c1:7a:00:20:d3:74:5b:d8:2a:3f:43:58:eb:61:
         52:46:40:57:a0:4d:4e:ad:fb:ca:d2:ee:40:d8:53:3c:08:28:
         c8:a1:34:10:d0:d9:8a:eb:7f:f4:4a:b5:60:97:80:62:2d:9f:
         f4:49:11:0a:82:d8:09:b9:13:a2:b3:7e:90:c1:29:69:7a:a7:
         54:1c:e0:3f:39:ff:73:32:fc:31:42:76:e8:3d:6c:c0:c6:53:
         6f:8f:08:3a:1b:55:d1:f9:68:96:93:97:2b:2d:d9:be:2b:a8:
         8e:8f:27:66:25:cc:59:f0:4f:c5:7d:02:ab:c2:0a:68:d2:b0:
         02:5b:4e:1c:34:8c:9a:80:07:66:15:01:df:c5:4b:32:ed:47:
         55:ce:46:8c:44:51:4b:0e:ab:e4:ec:7f:6c:fd:2f:77:4e:b0:
         6b:4d:e7:20
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5IJIo0AHlsFEsSn0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODhlMTY0NmItZTFiMy00MmU3LTg1OTEtM2E1N2ZkNDM2
MzY5MB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk
ZmIyNjMzYjktZmYwNy00YzMwLWJlOTgtZTFlNWE2MDg3ZTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh94/VqFQYljn8QwmBPAWT37fTMxQza+v1Yi
X/k29efmE0I7lK4uywp2se+DOU2XtLD2eHpvuq2w/LvrImRU+lzFZb1/GbOr116U
qconsfOYs0c+EMuW6MjyZbiBVZvYB16Oj4+5tZube60P9TNOiq7UWTbEdu99jTKH
1nsHt1GDQMRu7S1k/d92/eT57/THETndXV6UYw/fYLTvZF1SKbPDCumSrFINlrvs
9ohAroX2cKwmlGkyV3z0RtTYYqodj5EVB4VDYg7fatxgKGTY+MOnkzLdW6wmL2PI
Y5PVaTDxQsm4A4j5P6oKRIhxD3+Zd0B5FlmlSVizxXXjcxlD7wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLkHPwrNOdXuNU59cUWRigAM/JyhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUx
NjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3ZmQ0MzYzNjkvM2MwZjM4NjMtZTZiMC0z
MDAzLTk1NDMtY2JjZWZkNDM1NjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODhlMTY0NmItZTFiMy00MmU3LTg1
OTEtM2E1N2ZkNDM2MzY5Lzg4ZTE2NDZiLWUxYjMtNDJlNy04NTkxLTNhNTdmZDQz
NjM2OS5jcmwwHwYDVR0jBBgwFoAUukMjcrv3l+XytBPr7L8gMlwthZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUxNjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3
ZmQ0MzYzNjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJhABMAEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASMdWzyVIZeKS380wpMjcsmfu7rB57bJQMS1GndvFjTtxRc9LhqB+
mnxqGddG07r5mZQixlwzwljRJyz6UzW8X10x4zct8buMFSaFKJQ6zroZJ116DTfC
Z1BQSQgeccF6ACDTdFvYKj9DWOthUkZAV6BNTq37ytLuQNhTPAgoyKE0ENDZiut/
9Eq1YJeAYi2f9EkRCoLYCbkTorN+kMEpaXqnVBzgPzn/czL8MUJ26D1swMZTb48I
OhtV0flolpOXKy3Zviuojo8nZiXMWfBPxX0Cq8IKaNKwAltOHDSMmoAHZhUB38VL
Mu1HVc5GjERRSw6r5Ox/bP0vd06wa03nIA==
-----END CERTIFICATE-----
Generated at Mon Jul 6 22:14:06 2026 by rpki-client