Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/0ab91e94-64e8-38f1-9485-8c741188fc51.roa
File:                     0ab91e94-64e8-38f1-9485-8c741188fc51.roa (raw, json)
Hash identifier:          jtL3mOTFB6o4cCiunFU6Xu00xC06ZGTbXaAUpADi+Vs=
Subject key identifier:   EB:D5:FA:27:E8:CA:05:AE:BE:97:51:CF:E8:D8:BD:B5:41:F8:AE:5C
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584EC371B55EF02808DE123FB240
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/0ab91e94-64e8-38f1-9485-8c741188fc51.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     136557
IP address blocks:        2606:fc40:4002::/48 maxlen: 48
                          2606:fc40:4003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:b5:5e:f0:28:08:de:12:3f:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=f72d761c-4fbd-431b-b0a4-9980d048bc49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:05:8e:eb:b6:4f:dc:07:16:86:b8:43:32:39:
                    16:1b:f6:b8:cd:73:0f:36:72:29:cf:23:31:09:a6:
                    88:9c:2f:34:6b:1a:09:b6:6a:e5:38:df:62:c6:6f:
                    fd:96:11:19:28:06:ea:f2:94:10:16:56:9b:a0:91:
                    27:c4:4e:4c:b1:3d:70:01:c3:7d:0a:0b:c4:02:31:
                    f5:04:84:37:5e:af:61:0e:94:63:1d:12:76:93:60:
                    fd:73:42:1f:eb:24:32:10:64:c7:16:cd:49:54:9b:
                    6a:53:52:5b:eb:37:66:4e:d5:92:79:34:24:0a:fc:
                    74:7c:21:57:88:24:7b:34:59:03:73:e0:6a:00:80:
                    69:ac:ee:94:be:1c:5b:b6:fb:af:87:d1:f3:89:4b:
                    ec:aa:47:55:32:95:f6:5b:90:a0:a7:f8:93:0c:1d:
                    71:c0:82:84:da:4b:a1:2b:56:aa:b4:ae:0b:ad:54:
                    2b:98:6b:7c:06:03:37:95:61:a2:5b:4c:8f:79:66:
                    af:84:f3:17:9e:25:36:db:18:5c:57:4b:4b:ad:34:
                    25:4e:7b:50:8e:84:c4:be:2f:31:35:2a:71:46:17:
                    7e:15:87:45:5e:1d:e5:8d:5e:69:db:fc:93:c0:f5:
                    db:d2:16:3c:53:ed:93:96:6d:22:c9:a6:e8:10:1b:
                    cd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D5:FA:27:E8:CA:05:AE:BE:97:51:CF:E8:D8:BD:B5:41:F8:AE:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/0ab91e94-64e8-38f1-9485-8c741188fc51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fc40:4002::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:c3:72:45:53:be:3d:7b:1c:dc:da:71:81:ff:b8:e3:62:49:
         27:74:31:aa:f9:40:cf:2b:65:a9:10:25:29:53:26:ac:e1:30:
         6b:fe:e7:6b:e3:16:2e:4f:c0:cb:7e:20:11:32:e9:d7:e3:5b:
         e0:aa:5a:b4:b8:f7:73:1c:56:09:f6:06:a0:f7:1c:31:75:32:
         7b:71:51:26:2f:fa:07:9d:f3:06:07:29:d4:a4:1c:e7:c1:08:
         26:c5:59:31:f8:4f:41:fc:bb:42:29:04:65:44:a7:f8:5e:ab:
         e0:47:37:40:5d:c8:7b:37:bb:32:24:53:09:c8:f8:7d:e0:03:
         1e:20:43:1f:ed:5a:be:2c:3c:bb:49:b6:13:59:26:c5:36:59:
         3d:ec:c8:fb:ea:ef:fc:aa:53:f2:c4:81:2c:2e:ef:53:2a:81:
         59:2d:23:c5:47:75:f6:fb:6d:06:f1:d2:9f:e2:1a:d5:da:2e:
         3f:8f:59:0e:56:3a:c0:98:3d:b7:4a:dd:e9:e9:68:dc:63:89:
         9b:5c:06:a7:ba:e4:98:37:e1:ba:f5:b8:06:9c:23:25:65:2d:
         bf:1f:4f:0c:13:0b:0a:bd:b4:e9:ba:95:45:f7:77:de:53:6b:
         0d:24:21:ba:c0:ff:98:f3:e5:87:b8:6a:bb:c4:29:16:0f:db:
         2c:69:60:11
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7DcbVe8CgI3hI/skAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz
MmIzMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk
ZjcyZDc2MWMtNGZiZC00MzFiLWIwYTQtOTk4MGQwNDhiYzQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQWO67ZP3AcWhrhDMjkWG/a4zXMPNnIpzyMx
CaaInC80axoJtmrlON9ixm/9lhEZKAbq8pQQFlaboJEnxE5MsT1wAcN9CgvEAjH1
BIQ3Xq9hDpRjHRJ2k2D9c0If6yQyEGTHFs1JVJtqU1Jb6zdmTtWSeTQkCvx0fCFX
iCR7NFkDc+BqAIBprO6Uvhxbtvuvh9HziUvsqkdVMpX2W5Cgp/iTDB1xwIKE2kuh
K1aqtK4LrVQrmGt8BgM3lWGiW0yPeWavhPMXniU22xhcV0tLrTQlTntQjoTEvi8x
NSpxRhd+FYdFXh3ljV5p2/yTwPXb0hY8U+2Tlm0iyaboEBvN1QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOvV+ifoygWuvpdRz+jYvbVB+K5cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5
YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvMGFiOTFlOTQtNjRlOC0z
OGYxLTk0ODUtOGM3NDExODhmYzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0
ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx
MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh
ZjhjMTMyYjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgb8QEAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ7DckVTvj17HNzacYH/uONiSSd0Mar5QM8rZakQJSlTJqzhMGv+
52vjFi5PwMt+IBEy6dfjW+CqWrS493McVgn2BqD3HDF1MntxUSYv+ged8wYHKdSk
HOfBCCbFWTH4T0H8u0IpBGVEp/heq+BHN0BdyHs3uzIkUwnI+H3gAx4gQx/tWr4s
PLtJthNZJsU2WT3syPvq7/yqU/LEgSwu71MqgVktI8VHdfb7bQbx0p/iGtXaLj+P
WQ5WOsCYPbdK3enpaNxjiZtcBqe65Jg34br1uAacIyVlLb8fTwwTCwq9tOm6lUX3
d95Taw0kIbrA/5jz5Ye4arvEKRYP2yxpYBE=
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:08:50 2026 by rpki-client