Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08/4ccfab0d-d202-306d-b39e-190330fdd285.roa
File:                     4ccfab0d-d202-306d-b39e-190330fdd285.roa (raw, json)
Hash identifier:          pXt1OQzeth5vMOOdeE5tLkj3p5gJ9UFc2ouQX8TdS4o=
Subject key identifier:   C2:D3:E2:CB:9C:5E:FD:FA:92:0A:DC:E6:95:FE:73:19:DA:CC:6E:D0
Certificate issuer:       /CN=3752157d-7469-4299-be2c-f236b195fc08
Certificate serial:       010D0C9F4328584EA390C60DD81089184F02A200
Authority key identifier: 60:D1:EE:9C:FF:32:AE:98:E4:17:39:4E:F0:D9:12:0F:70:9E:46:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08/4ccfab0d-d202-306d-b39e-190330fdd285.roa
Signing time:             Mon 27 Jul 2026 14:56:58 +0000
ROA not before:           Mon 27 Jul 2026 14:56:58 +0000
ROA not after:            Sun 25 Oct 2026 14:56:58 +0000
asID:                     40592
IP address blocks:        2001:505:148::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08/3752157d-7469-4299-be2c-f236b195fc08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08/3752157d-7469-4299-be2c-f236b195fc08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a3:90:c6:0d:d8:10:89:18:4f:02:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3752157d-7469-4299-be2c-f236b195fc08
        Validity
            Not Before: Jul 27 14:56:58 2026 GMT
            Not After : Oct 25 14:56:58 2026 GMT
        Subject: CN=e19cad01-7367-4daf-945b-e68d737c84e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f7:e2:b6:ad:ae:22:5a:9c:d8:ce:65:d9:93:
                    a9:6d:81:6c:7f:5c:72:d1:ea:e1:e3:e5:10:dc:5d:
                    62:bc:3b:2c:5c:f8:2e:dd:38:e9:13:23:04:1d:65:
                    11:ea:b3:6f:65:8a:ed:6c:bd:f6:64:61:6d:f9:fa:
                    8e:7c:63:48:9d:cd:c8:d2:96:a3:f8:ae:a6:41:53:
                    34:a7:14:9d:1d:89:c8:42:aa:26:2d:5b:eb:32:fd:
                    37:36:29:b1:8f:51:f4:64:8e:89:33:ae:1c:2f:30:
                    b9:23:94:59:d5:ef:4d:b8:78:5f:c9:bf:a3:71:17:
                    ee:ef:f9:e7:5e:d5:ea:1f:88:32:99:9d:71:5a:25:
                    07:ce:59:7e:bf:94:92:3a:a2:38:9f:be:13:f5:f6:
                    41:91:6c:0d:a1:1f:b3:4d:a5:11:c0:3e:59:96:3a:
                    34:8f:9b:fc:d0:e9:c0:42:5b:bf:6b:73:ad:4e:df:
                    f2:45:bb:b5:48:59:4a:83:0f:6c:c3:b9:6e:5c:f3:
                    e1:f5:1e:d0:10:ca:71:b4:48:97:11:ca:3a:1f:50:
                    e3:5b:72:7a:97:cb:c6:65:5c:0d:74:1a:41:ae:0e:
                    6e:b9:68:d8:f2:2c:91:fe:fa:6e:70:50:7d:c1:b6:
                    37:f2:92:19:4c:33:95:17:ce:a9:b2:91:1a:35:71:
                    3d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D3:E2:CB:9C:5E:FD:FA:92:0A:DC:E6:95:FE:73:19:DA:CC:6E:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08/4ccfab0d-d202-306d-b39e-190330fdd285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08/3752157d-7469-4299-be2c-f236b195fc08.crl

            X509v3 Authority Key Identifier:
                keyid:60:D1:EE:9C:FF:32:AE:98:E4:17:39:4E:F0:D9:12:0F:70:9E:46:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3752157d-7469-4299-be2c-f236b195fc08.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:505:148::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:1e:82:d0:b0:8d:9a:b6:89:ac:be:00:10:08:8f:36:3f:19:
         31:f8:03:52:e0:62:3f:7f:12:66:6a:37:f8:df:86:45:24:1b:
         1d:ef:9c:77:06:c7:de:b4:4c:a6:86:3d:ee:0e:9f:58:ef:8e:
         b7:52:e6:5f:f8:22:f1:68:0a:ad:dd:5e:ad:ae:54:1a:82:4b:
         6a:bb:ab:db:d3:32:f2:e2:b0:1e:88:79:eb:3b:ac:5d:9d:96:
         ae:12:34:88:f0:91:af:67:88:e4:14:bc:8c:c4:ad:2e:d2:de:
         8c:db:b1:fd:95:6f:cb:80:96:3c:a6:31:0c:b1:95:75:b3:93:
         c8:9a:a9:16:d9:16:60:ec:b2:23:93:a2:04:8c:2d:21:d5:c3:
         ff:ff:a2:0c:cc:c0:a5:86:22:50:af:c5:19:d1:64:5e:d8:4c:
         c1:a9:43:c4:36:50:b6:f3:54:bf:ac:ad:20:2e:5a:d8:0c:7f:
         5d:70:1c:6b:f7:65:0a:91:8a:53:43:50:08:15:13:db:3c:f4:
         73:cd:d5:bf:8f:db:1f:81:b1:bc:8a:12:ad:f7:06:65:5e:a0:
         e7:c7:30:00:ed:94:19:fa:a3:ee:87:36:43:b7:93:06:de:5f:
         43:fa:97:63:33:88:01:e0:8b:81:26:6e:4c:49:5a:65:b6:1c:
         66:df:8c:9e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6jkMYN2BCJGE8CogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzc1MjE1N2QtNzQ2OS00Mjk5LWJlMmMtZjIzNmIxOTVm
YzA4MB4XDTI2MDcyNzE0NTY1OFoXDTI2MTAyNTE0NTY1OFowLzEtMCsGA1UEAxMk
ZTE5Y2FkMDEtNzM2Ny00ZGFmLTk0NWItZTY4ZDczN2M4NGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Pfitq2uIlqc2M5l2ZOpbYFsf1xy0erh4+UQ
3F1ivDssXPgu3TjpEyMEHWUR6rNvZYrtbL32ZGFt+fqOfGNInc3I0paj+K6mQVM0
pxSdHYnIQqomLVvrMv03Nimxj1H0ZI6JM64cLzC5I5RZ1e9NuHhfyb+jcRfu7/nn
XtXqH4gymZ1xWiUHzll+v5SSOqI4n74T9fZBkWwNoR+zTaURwD5Zljo0j5v80OnA
Qlu/a3OtTt/yRbu1SFlKgw9sw7luXPPh9R7QEMpxtEiXEco6H1DjW3J6l8vGZVwN
dBpBrg5uuWjY8iyR/vpucFB9wbY38pIZTDOVF86pspEaNXE99QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMLT4sucXv36kgrc5pX+cxnazG7QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNzUy
MTU3ZC03NDY5LTQyOTktYmUyYy1mMjM2YjE5NWZjMDgvNGNjZmFiMGQtZDIwMi0z
MDZkLWIzOWUtMTkwMzMwZmRkMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzc1MjE1N2QtNzQ2OS00Mjk5LWJl
MmMtZjIzNmIxOTVmYzA4LzM3NTIxNTdkLTc0NjktNDI5OS1iZTJjLWYyMzZiMTk1
ZmMwOC5jcmwwHwYDVR0jBBgwFoAUYNHunP8yrpjkFzlO8NkSD3CeRp0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNzUyMTU3ZC03NDY5LTQyOTktYmUyYy1mMjM2
YjE5NWZjMDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBQFI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIgegtCwjZq2iay+ABAIjzY/GTH4A1LgYj9/EmZqN/jfhkUkGx3v
nHcGx960TKaGPe4On1jvjrdS5l/4IvFoCq3dXq2uVBqCS2q7q9vTMvLisB6Iees7
rF2dlq4SNIjwka9niOQUvIzErS7S3ozbsf2Vb8uAljymMQyxlXWzk8iaqRbZFmDs
siOTogSMLSHVw///ogzMwKWGIlCvxRnRZF7YTMGpQ8Q2ULbzVL+srSAuWtgMf11w
HGv3ZQqRilNDUAgVE9s89HPN1b+P2x+BsbyKEq33BmVeoOfHMADtlBn6o+6HNkO3
kwbeX0P6l2MziAHgi4EmbkxJWmW2HGbfjJ4=
-----END CERTIFICATE-----
Generated at Wed Aug 26 20:27:58 2026 by rpki-client