Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/28ce2ef5-df98-3ffd-88b3-2ff04079f3e0.roa
File:                     28ce2ef5-df98-3ffd-88b3-2ff04079f3e0.roa (raw, json)
Hash identifier:          3jYb9ai9fPyJlSX/KPBmN2yw+IZ+vBlkJlmIyJQ52RQ=
Subject key identifier:   59:CC:4B:C2:63:5C:EF:EC:A8:3B:FC:C7:DD:A3:03:7E:1E:DA:2C:C8
Certificate issuer:       /CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc
Certificate serial:       010D0C9F4328584EFCACB626CF3FBB918C899300
Authority key identifier: 00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/28ce2ef5-df98-3ffd-88b3-2ff04079f3e0.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     3486
IP address blocks:        2620:11:40::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:b6:26:cf:3f:bb:91:8c:89:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=993f55a1-a2fe-4d43-9251-13d1ec25a4b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:14:bf:0a:60:37:9d:62:1d:1d:a8:a4:df:
                    c2:de:96:98:33:25:d1:7c:3e:7f:ff:59:cf:81:62:
                    d5:9c:89:73:a8:26:ec:51:92:eb:9b:5b:f9:c3:b8:
                    6a:ba:15:d3:f8:11:6e:6a:9a:c3:86:6a:e0:36:63:
                    26:18:6f:53:e6:34:f7:38:71:b5:f7:76:d9:e2:6c:
                    61:9e:41:40:86:f4:ab:9f:a8:8a:21:97:4d:db:c6:
                    49:16:1f:68:80:e0:ab:cb:41:01:28:28:dc:99:8c:
                    7b:ca:ea:cc:68:47:fc:59:13:05:e1:94:52:e9:de:
                    c1:af:d4:7c:22:f1:37:a9:dc:f3:26:3b:04:f7:a9:
                    d4:16:22:78:17:82:02:84:5e:6b:f8:11:56:73:66:
                    2f:29:eb:57:ac:8c:14:ba:b8:78:52:02:81:37:1f:
                    90:bb:6e:a4:53:b7:87:a1:35:e5:c9:e5:41:1f:4b:
                    26:05:e5:7a:6c:5d:f4:51:57:6e:8b:54:18:cc:f5:
                    17:be:f1:d9:c5:f8:06:ee:8b:90:e7:52:cc:f7:2a:
                    d2:15:55:53:76:27:a0:ff:ff:9f:7a:b8:cd:a9:df:
                    5d:99:a7:73:80:5a:a4:5d:ba:2c:7e:47:b0:19:84:
                    60:4f:ef:12:fc:9f:0e:98:cb:65:3f:02:f4:a6:c3:
                    07:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CC:4B:C2:63:5C:EF:EC:A8:3B:FC:C7:DD:A3:03:7E:1E:DA:2C:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/28ce2ef5-df98-3ffd-88b3-2ff04079f3e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.crl

            X509v3 Authority Key Identifier:
                keyid:00:6E:77:B0:6A:B4:77:F9:4A:99:CD:CE:69:53:B1:34:FA:6F:B8:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8b3fd3da-96b3-4d69-87d8-eb7c0acb87fc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11:40::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:4f:f3:63:62:18:49:54:49:2d:d7:42:99:be:28:ac:da:ca:
         8d:fb:b6:69:5b:8f:06:a7:4d:1e:c7:c9:57:15:52:92:d3:98:
         31:b7:d1:1c:fe:01:88:5e:8b:28:53:81:17:96:f0:00:71:7a:
         17:3e:3c:65:27:0b:2e:c6:25:a2:9a:51:18:39:16:3b:88:fd:
         c5:8d:4d:c7:3c:3b:42:bf:83:03:37:13:4d:45:58:ed:f2:21:
         a1:23:79:ac:ab:f8:95:a9:19:f6:bc:c7:2b:06:db:d4:57:85:
         ee:0e:73:d9:2e:78:ff:50:73:7d:fc:32:f5:89:7a:fa:99:2b:
         18:93:df:f2:e9:bf:d0:29:9c:df:7d:7a:a2:bb:8e:c3:70:aa:
         8f:cd:07:b7:6b:3b:68:0d:92:0c:32:cb:31:52:eb:20:c5:3d:
         2d:92:c5:b4:6a:a0:c2:e4:d4:e6:c3:75:57:f2:53:66:ab:42:
         fc:e7:e2:31:d0:f4:41:6f:9e:a1:7a:94:bc:20:f8:19:ab:72:
         39:f6:d8:e9:70:24:4a:59:5e:07:8b:04:88:20:80:58:5c:e0:
         d6:14:ce:56:40:08:db:8b:8c:b3:ad:68:e9:a5:79:45:48:d0:
         40:5b:1f:c2:86:63:28:2f:90:fe:32:f5:69:d3:c7:3b:1a:c0:
         c9:6f:e9:90
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE78rLYmzz+7kYyJkwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGIzZmQzZGEtOTZiMy00ZDY5LTg3ZDgtZWI3YzBhY2I4
N2ZjMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk
OTkzZjU1YTEtYTJmZS00ZDQzLTkyNTEtMTNkMWVjMjVhNGI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5IUvwpgN51iHR2opN/C3paYMyXRfD5//1nP
gWLVnIlzqCbsUZLrm1v5w7hquhXT+BFuaprDhmrgNmMmGG9T5jT3OHG193bZ4mxh
nkFAhvSrn6iKIZdN28ZJFh9ogOCry0EBKCjcmYx7yurMaEf8WRMF4ZRS6d7Br9R8
IvE3qdzzJjsE96nUFiJ4F4IChF5r+BFWc2YvKetXrIwUurh4UgKBNx+Qu26kU7eH
oTXlyeVBH0smBeV6bF30UVdui1QYzPUXvvHZxfgG7ouQ51LM9yrSFVVTdieg//+f
erjNqd9dmadzgFqkXbosfkewGYRgT+8S/J8OmMtlPwL0psMHSQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFnMS8JjXO/sqDv8x92jA34e2izIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNm
ZDNkYS05NmIzLTRkNjktODdkOC1lYjdjMGFjYjg3ZmMvMjhjZTJlZjUtZGY5OC0z
ZmZkLTg4YjMtMmZmMDQwNzlmM2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOGIzZmQzZGEtOTZiMy00ZDY5LTg3
ZDgtZWI3YzBhY2I4N2ZjLzhiM2ZkM2RhLTk2YjMtNGQ2OS04N2Q4LWViN2MwYWNi
ODdmYy5jcmwwHwYDVR0jBBgwFoAUAG53sGq0d/lKmc3OaVOxNPpvuK4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS84YjNmZDNkYS05NmIzLTRkNjktODdkOC1lYjdj
MGFjYjg3ZmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAEQBA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG1P82NiGElUSS3XQpm+KKzayo37tmlbjwanTR7HyVcVUpLTmDG3
0Rz+AYheiyhTgReW8ABxehc+PGUnCy7GJaKaURg5FjuI/cWNTcc8O0K/gwM3E01F
WO3yIaEjeayr+JWpGfa8xysG29RXhe4Oc9kueP9Qc338MvWJevqZKxiT3/Lpv9Ap
nN99eqK7jsNwqo/NB7drO2gNkgwyyzFS6yDFPS2SxbRqoMLk1ObDdVfyU2arQvzn
4jHQ9EFvnqF6lLwg+Bmrcjn22OlwJEpZXgeLBIgggFhc4NYUzlZACNuLjLOtaOml
eUVI0EBbH8KGYygvkP4y9WnTxzsawMlv6ZA=
-----END CERTIFICATE-----
Generated at Mon Aug 31 11:23:35 2026 by rpki-client