Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f6439dc-31bc-3ca8-922c-0791c755b7e2.roa
File:                     4f6439dc-31bc-3ca8-922c-0791c755b7e2.roa (raw, json)
Hash identifier:          +CreF9tNB36KjC0F8EdIxzn9FraY824BAed3ZKan6j0=
Subject key identifier:   FC:80:19:78:F6:09:06:D3:3D:DF:D8:CE:BB:95:DC:B5:98:7F:CA:51
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F82ADA75FE5750BB78B9B9BDC
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f6439dc-31bc-3ca8-922c-0791c755b7e2.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     12222
IP address blocks:        2001:4878:2242::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:a7:5f:e5:75:0b:b7:8b:9b:9b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=07e3a87c-01a1-4dd0-a225-97c213b994eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ad:e7:bd:94:29:2c:20:da:34:67:25:f5:22:
                    2b:37:8c:d3:17:3f:05:6f:6b:01:29:60:64:7e:0e:
                    79:69:f1:86:07:29:25:3c:9d:14:e3:7c:8d:09:9d:
                    d9:b0:8b:31:a7:6d:e9:88:e0:e1:f0:f5:ac:36:d1:
                    47:ee:d2:c1:ed:23:a2:26:6a:07:11:1a:ca:0c:b9:
                    15:d4:9e:51:62:7b:16:1d:ce:93:38:7c:d9:31:ee:
                    5b:82:05:eb:5e:0b:53:d6:64:5b:96:d5:c7:bc:0c:
                    4f:72:9a:13:73:f5:4d:fa:92:10:ef:cc:85:87:94:
                    06:97:00:f6:c5:f3:e3:a1:75:69:15:d0:33:7d:b7:
                    e1:21:68:2c:4c:1b:9d:5f:0a:3f:d3:c3:2d:c5:98:
                    03:29:85:6f:e5:ce:3f:7f:d7:60:a3:8e:07:00:c0:
                    06:44:96:a0:89:f3:40:13:32:a1:06:b4:de:b3:bd:
                    3c:5a:8f:16:22:54:93:48:ef:e0:4d:da:86:d2:7d:
                    c0:6f:54:cc:1b:71:94:7d:6d:7b:b2:d2:f5:a4:8f:
                    f4:a8:b6:46:17:05:bb:ba:bb:31:8f:e8:fb:aa:f9:
                    20:af:46:72:ef:cc:d3:2d:e8:93:93:b4:4c:b1:0e:
                    fc:e7:e7:af:f0:e1:d1:28:03:fd:4f:fa:aa:bd:62:
                    a5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:80:19:78:F6:09:06:D3:3D:DF:D8:CE:BB:95:DC:B5:98:7F:CA:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f6439dc-31bc-3ca8-922c-0791c755b7e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:2242::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:70:2c:7d:53:6f:59:38:a4:6c:16:f9:5b:f3:3f:87:a6:01:
         f3:9e:da:67:8b:b3:06:35:3f:36:96:f5:cc:3a:63:93:0a:20:
         6b:85:07:8e:83:ac:62:28:0a:ed:38:28:4f:49:dc:3a:78:8d:
         78:3d:db:22:e9:84:00:1a:5b:b6:36:ae:42:59:de:da:66:bb:
         10:32:fc:d9:0d:6e:31:08:57:af:f9:f8:06:ee:89:38:12:b7:
         a9:d2:96:11:79:19:70:59:3d:09:4f:04:31:b6:39:30:da:32:
         6a:9b:c1:cf:7d:33:93:42:3e:69:be:f4:1b:e7:1d:73:a6:da:
         5c:26:13:02:4b:24:cb:d7:3d:af:b0:c9:f7:64:b3:74:9b:53:
         05:f0:f8:7c:1f:c9:1f:58:0c:9e:5f:10:ee:92:92:29:2e:a7:
         fc:cc:ef:a7:e0:65:96:54:44:0a:a8:6b:f4:f8:29:06:d1:07:
         19:bd:e9:55:57:e8:45:5d:eb:85:4b:c8:67:ac:75:8d:e7:b4:
         07:2c:0e:ce:de:97:ae:1f:82:69:ea:65:2d:8b:9c:d6:f2:ff:
         ed:fd:72:57:b5:97:2c:9a:7b:4d:f5:e3:ff:4f:07:97:70:2b:
         f4:8a:f4:63:fa:2f:c2:92:4c:5a:28:f5:3b:cd:80:a3:db:86:
         61:5e:a6:76
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+Cradf5XULt4ubm9wwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk
MDdlM2E4N2MtMDFhMS00ZGQwLWEyMjUtOTdjMjEzYjk5NGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh63nvZQpLCDaNGcl9SIrN4zTFz8Fb2sBKWBk
fg55afGGByklPJ0U43yNCZ3ZsIsxp23piODh8PWsNtFH7tLB7SOiJmoHERrKDLkV
1J5RYnsWHc6TOHzZMe5bggXrXgtT1mRbltXHvAxPcpoTc/VN+pIQ78yFh5QGlwD2
xfPjoXVpFdAzfbfhIWgsTBudXwo/08MtxZgDKYVv5c4/f9dgo44HAMAGRJagifNA
EzKhBrTes708Wo8WIlSTSO/gTdqG0n3Ab1TMG3GUfW17stL1pI/0qLZGFwW7ursx
j+j7qvkgr0Zy78zTLeiTk7RMsQ785+ev8OHRKAP9T/qqvWKlKQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPyAGXj2CQbTPd/YzruV3LWYf8pRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGY2NDM5ZGMtMzFiYy0z
Y2E4LTkyMmMtMDc5MWM3NTViN2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeCJC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD5wLH1Tb1k4pGwW+VvzP4emAfOe2meLswY1PzaW9cw6Y5MKIGuF
B46DrGIoCu04KE9J3Dp4jXg92yLphAAaW7Y2rkJZ3tpmuxAy/NkNbjEIV6/5+Abu
iTgSt6nSlhF5GXBZPQlPBDG2OTDaMmqbwc99M5NCPmm+9BvnHXOm2lwmEwJLJMvX
Pa+wyfdks3SbUwXw+HwfyR9YDJ5fEO6Skikup/zM76fgZZZURAqoa/T4KQbRBxm9
6VVX6EVd64VLyGesdY3ntAcsDs7el64fgmnqZS2LnNby/+39cle1lyyae0314/9P
B5dwK/SK9GP6L8KSTFoo9TvNgKPbhmFepnY=
-----END CERTIFICATE-----
Generated at Mon Oct 26 17:53:55 2026 by rpki-client