Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/11f6cfe8-d101-3807-adc0-cccc07d18b9f.roa
File:                     11f6cfe8-d101-3807-adc0-cccc07d18b9f.roa (raw, json)
Hash identifier:          1Sj3N4+z8mOK1Bw4AH9erlw5rXYMc6e2yfZUXaJz8V0=
Subject key identifier:   6D:BB:06:8F:E5:38:E0:74:7A:03:48:F5:35:77:15:75:CF:66:C9:EA
Certificate issuer:       /CN=8f6f01b8-13ad-4c79-aa72-65cf0dedd899
Certificate serial:       010D0C9F4328584F8F3DC0B0FA5D5F1FB45F1200
Authority key identifier: D1:83:CB:75:C4:8F:DD:CA:6A:BE:96:34:2E:C7:6C:51:0E:37:FE:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/11f6cfe8-d101-3807-adc0-cccc07d18b9f.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     401712
IP address blocks:        2607:e840:220::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:c0:b0:fa:5d:5f:1f:b4:5f:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6f01b8-13ad-4c79-aa72-65cf0dedd899
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=be85024d-77be-461e-abc4-e87480c829e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:22:7c:b1:3f:73:a3:2c:f6:6a:44:84:43:99:
                    21:6b:b2:67:2b:ce:8a:0b:e6:42:a8:3e:44:cb:b1:
                    fe:02:1f:e8:8e:9e:fe:c7:2a:dc:1b:da:34:bb:12:
                    8e:73:d1:37:70:c1:35:d0:34:29:21:4a:72:c8:f6:
                    c0:d8:8d:be:3d:d8:93:03:ce:46:ab:66:22:09:87:
                    42:5e:16:eb:81:d9:52:f1:ce:fa:6f:9e:2a:e9:17:
                    ed:19:d6:a1:6b:d9:33:0b:db:3b:74:77:0c:82:04:
                    5a:6a:85:cd:61:97:5d:bd:a2:f6:c6:49:78:02:95:
                    d3:84:27:f1:00:05:a9:b5:01:04:28:c2:7f:a0:d9:
                    a7:c9:91:18:bd:9d:99:0e:10:ba:3e:6c:b8:8e:10:
                    52:74:b9:09:86:6e:f0:e2:61:80:a5:65:07:f2:b0:
                    d2:a6:c8:ee:72:79:28:16:ad:cf:fa:80:86:da:62:
                    22:8d:8f:04:da:17:04:4e:d0:d8:73:66:7b:b7:a6:
                    9d:e5:47:e8:2d:f5:76:c1:22:d0:98:1e:3d:43:c6:
                    10:12:ff:5e:03:e3:6f:54:58:9c:c8:a8:a1:86:ce:
                    1f:92:03:17:40:54:71:7a:ae:6f:8e:6b:46:42:27:
                    b1:ab:bc:f9:b6:d1:8e:92:03:36:67:c4:a3:fe:f3:
                    fd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BB:06:8F:E5:38:E0:74:7A:03:48:F5:35:77:15:75:CF:66:C9:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/11f6cfe8-d101-3807-adc0-cccc07d18b9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.crl

            X509v3 Authority Key Identifier:
                keyid:D1:83:CB:75:C4:8F:DD:CA:6A:BE:96:34:2E:C7:6C:51:0E:37:FE:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f6f01b8-13ad-4c79-aa72-65cf0dedd899.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e840:220::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c4:34:71:26:92:19:7c:57:9d:a9:b2:0a:3d:91:e6:a1:af:
         d0:a5:fa:86:ae:c0:7d:12:64:42:f5:22:b0:fc:19:06:85:fe:
         26:41:35:3a:dc:e8:d8:ce:b8:a1:10:68:ad:98:cd:e5:e7:61:
         cc:71:d0:25:4e:81:71:23:f2:a4:b4:05:1f:94:c6:5b:52:06:
         ba:ba:5f:e0:34:d0:18:5f:ee:f9:c6:1b:4f:62:1f:92:bb:fe:
         b9:ce:a4:f3:19:ad:23:4c:24:bf:a7:84:3b:d1:91:b1:d5:f6:
         27:3e:c0:4b:33:01:ec:39:ac:d5:88:85:16:80:db:13:d9:4a:
         12:bf:ee:78:cf:0c:9a:62:f6:c4:de:57:12:fd:5e:05:8b:94:
         54:49:ba:ed:cc:04:d7:87:29:95:c0:c0:a8:3f:d9:06:94:56:
         76:6b:c8:37:8a:4b:cd:b6:db:6e:34:29:05:c5:5c:c3:c2:46:
         9d:b6:99:25:e4:5d:00:3e:22:da:7e:54:36:bd:69:b1:3a:07:
         e4:17:80:4f:96:b7:dc:f2:c5:17:94:22:57:76:da:20:1d:0f:
         2d:d2:2d:45:20:0c:51:b7:2b:90:ec:6d:7f:c9:3b:22:df:44:
         8b:56:de:e6:18:70:93:c4:04:ff:be:ae:cd:35:fc:df:b0:11:
         76:80:d5:c9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+PPcCw+l1fH7RfEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY2ZjAxYjgtMTNhZC00Yzc5LWFhNzItNjVjZjBkZWRk
ODk5MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk
YmU4NTAyNGQtNzdiZS00NjFlLWFiYzQtZTg3NDgwYzgyOWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCJ8sT9zoyz2akSEQ5kha7JnK86KC+ZCqD5E
y7H+Ah/ojp7+xyrcG9o0uxKOc9E3cME10DQpIUpyyPbA2I2+PdiTA85Gq2YiCYdC
XhbrgdlS8c76b54q6RftGdaha9kzC9s7dHcMggRaaoXNYZddvaL2xkl4ApXThCfx
AAWptQEEKMJ/oNmnyZEYvZ2ZDhC6Pmy4jhBSdLkJhm7w4mGApWUH8rDSpsjucnko
Fq3P+oCG2mIijY8E2hcETtDYc2Z7t6ad5UfoLfV2wSLQmB49Q8YQEv9eA+NvVFic
yKihhs4fkgMXQFRxeq5vjmtGQiexq7z5ttGOkgM2Z8Sj/vP9TQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG27Bo/lOOB0egNI9TV3FXXPZsnqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84ZjZm
MDFiOC0xM2FkLTRjNzktYWE3Mi02NWNmMGRlZGQ4OTkvMTFmNmNmZTgtZDEwMS0z
ODA3LWFkYzAtY2NjYzA3ZDE4YjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGY2ZjAxYjgtMTNhZC00Yzc5LWFh
NzItNjVjZjBkZWRkODk5LzhmNmYwMWI4LTEzYWQtNGM3OS1hYTcyLTY1Y2YwZGVk
ZDg5OS5jcmwwHwYDVR0jBBgwFoAU0YPLdcSP3cpqvpY0LsdsUQ43/gMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy84ZjZmMDFiOC0xM2FkLTRjNzktYWE3Mi02NWNm
MGRlZGQ4OTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgfoQAIg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACbENHEmkhl8V52psgo9keahr9Cl+oauwH0SZEL1IrD8GQaF/iZB
NTrc6NjOuKEQaK2YzeXnYcxx0CVOgXEj8qS0BR+UxltSBrq6X+A00Bhf7vnGG09i
H5K7/rnOpPMZrSNMJL+nhDvRkbHV9ic+wEszAew5rNWIhRaA2xPZShK/7njPDJpi
9sTeVxL9XgWLlFRJuu3MBNeHKZXAwKg/2QaUVnZryDeKS8222240KQXFXMPCRp22
mSXkXQA+Itp+VDa9abE6B+QXgE+Wt9zyxReUIld22iAdDy3SLUUgDFG3K5DsbX/J
OyLfRItW3uYYcJPEBP++rs01/N+wEXaA1ck=
-----END CERTIFICATE-----
Generated at Mon Nov 2 22:15:48 2026 by rpki-client