Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30/4c5676ec-271f-350c-b2f3-e074761d13ff.roa
File:                     4c5676ec-271f-350c-b2f3-e074761d13ff.roa (raw, json)
Hash identifier:          9XPvQShZBK5pUjBJOJZx9w4+31WB2buxcZcsDhweQYs=
Subject key identifier:   F5:28:DA:D3:1B:1F:E4:11:73:E4:FF:48:D0:2A:25:3C:93:E1:37:59
Certificate issuer:       /CN=a67e3748-c8c7-4114-8dc5-c4c18b0f8d30
Certificate serial:       010D0C9F4328584EA788C37484793FB69EADF180
Authority key identifier: 7F:01:39:18:A5:81:6F:DD:CD:EB:8C:B5:9E:B1:EB:B7:BD:57:2C:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30/4c5676ec-271f-350c-b2f3-e074761d13ff.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     29769
IP address blocks:        2602:f8aa::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:c3:74:84:79:3f:b6:9e:ad:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a67e3748-c8c7-4114-8dc5-c4c18b0f8d30
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c20bbb84-03e7-4f09-ad13-de2495877661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4d:f5:6a:62:4a:11:54:33:e4:7f:fb:57:3e:
                    5e:cd:cf:ea:ca:2d:eb:c4:3e:68:54:72:cc:03:11:
                    c0:52:48:f8:a4:6b:6a:c2:72:dc:f5:49:89:2e:b7:
                    4a:73:b3:2e:0b:e9:5a:76:24:9d:39:ed:f5:f4:56:
                    ee:4e:2b:a0:7e:80:dc:af:42:0a:d5:04:e7:c2:dd:
                    4e:04:64:ae:52:43:9c:30:f4:99:8d:52:ff:dd:80:
                    02:b1:1d:dd:38:12:32:24:97:89:1d:5d:0f:8c:6b:
                    77:82:09:5f:9f:1b:90:e6:1d:e6:01:42:91:c5:09:
                    2d:bd:e3:6e:e8:2d:ee:10:94:ac:d4:0c:7e:80:c1:
                    63:42:55:6f:46:47:b1:c5:f7:d8:55:5e:a3:40:26:
                    09:ef:f6:32:72:ad:e1:a0:67:33:f1:6b:b8:fe:3f:
                    8e:aa:f2:6b:c8:bb:0f:df:8c:07:34:4a:70:f8:d8:
                    a6:f3:79:ae:0c:68:f5:fe:3a:b2:e8:66:da:be:66:
                    40:ac:c8:f1:02:51:e4:5e:9e:21:bf:8c:89:36:4a:
                    2a:f2:8e:84:a9:96:72:54:52:1a:5d:c8:33:f7:0a:
                    bb:35:71:85:52:0b:0b:c9:e6:ff:76:77:fc:82:66:
                    3d:45:72:1e:1c:ec:b2:cc:01:68:3b:92:67:2a:f2:
                    f3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:28:DA:D3:1B:1F:E4:11:73:E4:FF:48:D0:2A:25:3C:93:E1:37:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30/4c5676ec-271f-350c-b2f3-e074761d13ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30.crl

            X509v3 Authority Key Identifier:
                keyid:7F:01:39:18:A5:81:6F:DD:CD:EB:8C:B5:9E:B1:EB:B7:BD:57:2C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a67e3748-c8c7-4114-8dc5-c4c18b0f8d30.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8aa::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:9c:6e:3d:59:5d:dc:51:ab:76:c5:c1:2f:af:58:df:52:39:
         8e:89:50:ef:0e:2e:21:0f:7f:d4:da:bb:de:72:a8:45:07:1e:
         dd:d0:a0:03:02:ad:7e:a5:f1:7d:ee:c5:75:c0:8b:8f:ab:f0:
         d8:4c:f3:30:63:97:62:21:16:2d:df:c6:61:82:5a:2a:44:a5:
         5e:78:4e:de:4e:a3:b9:5e:df:d6:26:67:bc:d8:f3:e5:a8:a3:
         e8:27:13:b1:d3:33:f8:51:eb:d4:27:86:d8:41:93:66:dd:f7:
         74:39:3a:35:eb:d4:44:95:02:12:50:df:70:27:3d:fc:d0:46:
         77:f8:c6:56:f4:17:3c:59:39:db:b9:50:54:95:94:00:34:d4:
         08:a3:d2:42:1a:6d:5a:aa:3a:92:68:1b:ac:3b:02:c5:54:62:
         61:c1:52:e9:7e:76:52:e9:f0:61:81:57:d6:4c:65:1b:02:84:
         8a:1d:56:d8:e4:84:d8:6e:64:d9:70:08:81:8f:b3:2a:65:4a:
         39:fa:16:ff:6e:a5:70:6b:cd:42:c6:f4:7d:20:58:ec:07:a6:
         fe:68:4b:aa:4d:f4:52:17:a4:e5:5a:d2:c9:c5:bc:51:b2:e0:
         c0:eb:0c:2f:27:3f:10:c5:f1:a9:32:9b:d0:81:a4:99:93:cd:
         18:be:2f:b8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6niMN0hHk/tp6t8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTY3ZTM3NDgtYzhjNy00MTE0LThkYzUtYzRjMThiMGY4
ZDMwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YzIwYmJiODQtMDNlNy00ZjA5LWFkMTMtZGUyNDk1ODc3NjYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk31amJKEVQz5H/7Vz5ezc/qyi3rxD5oVHLM
AxHAUkj4pGtqwnLc9UmJLrdKc7MuC+ladiSdOe319FbuTiugfoDcr0IK1QTnwt1O
BGSuUkOcMPSZjVL/3YACsR3dOBIyJJeJHV0PjGt3gglfnxuQ5h3mAUKRxQktveNu
6C3uEJSs1Ax+gMFjQlVvRkexxffYVV6jQCYJ7/Yycq3hoGcz8Wu4/j+OqvJryLsP
34wHNEpw+Nim83muDGj1/jqy6GbavmZArMjxAlHkXp4hv4yJNkoq8o6EqZZyVFIa
Xcgz9wq7NXGFUgsLyeb/dnf8gmY9RXIeHOyyzAFoO5JnKvLzBwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPUo2tMbH+QRc+T/SNAqJTyT4TdZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNjdl
Mzc0OC1jOGM3LTQxMTQtOGRjNS1jNGMxOGIwZjhkMzAvNGM1Njc2ZWMtMjcxZi0z
NTBjLWIyZjMtZTA3NDc2MWQxM2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTY3ZTM3NDgtYzhjNy00MTE0LThk
YzUtYzRjMThiMGY4ZDMwL2E2N2UzNzQ4LWM4YzctNDExNC04ZGM1LWM0YzE4YjBm
OGQzMC5jcmwwHwYDVR0jBBgwFoAUfwE5GKWBb93N64y1nrHrt71XLLcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNjdlMzc0OC1jOGM3LTQxMTQtOGRjNS1jNGMx
OGIwZjhkMzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4qgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJpxuPVld3FGrdsXBL69Y31I5jolQ7w4uIQ9/1Nq73nKoRQce3dCg
AwKtfqXxfe7FdcCLj6vw2EzzMGOXYiEWLd/GYYJaKkSlXnhO3k6juV7f1iZnvNjz
5aij6CcTsdMz+FHr1CeG2EGTZt33dDk6NevURJUCElDfcCc9/NBGd/jGVvQXPFk5
27lQVJWUADTUCKPSQhptWqo6kmgbrDsCxVRiYcFS6X52UunwYYFX1kxlGwKEih1W
2OSE2G5k2XAIgY+zKmVKOfoW/26lcGvNQsb0fSBY7Aem/mhLqk30Uhek5VrSycW8
UbLgwOsMLyc/EMXxqTKb0IGkmZPNGL4vuA==
-----END CERTIFICATE-----
Generated at Sat Aug 22 19:32:23 2026 by rpki-client