Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/b31f7aa3-6f2b-3332-b058-fdb2209a3f4e.roa
File:                     b31f7aa3-6f2b-3332-b058-fdb2209a3f4e.roa (raw, json)
Hash identifier:          Sy/aCE8Rr6rUM7KDD+VTJ+uzZLU27of8nAYke8D2HuM=
Subject key identifier:   AA:8D:5D:4F:8B:83:CD:25:6C:0E:85:18:55:C6:59:C7:89:CA:9A:CE
Certificate issuer:       /CN=4a595a80-2106-455a-be91-2aa623280126
Certificate serial:       010D0C9F4328584E2D9EFC859583C40A742AD40E
Authority key identifier: 52:D6:D5:E6:B2:12:20:00:DA:E4:AE:8F:FC:65:21:6B:B5:DB:4F:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/b31f7aa3-6f2b-3332-b058-fdb2209a3f4e.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        2604:11a0:1000::/40 maxlen: 48
                          2604:11a0:1100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/4a595a80-2106-455a-be91-2aa623280126.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/4a595a80-2106-455a-be91-2aa623280126.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9e:fc:85:95:83:c4:0a:74:2a:d4:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a595a80-2106-455a-be91-2aa623280126
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=d74bcf61-fd34-4628-b77c-fe5c71a284e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1b:59:d5:0c:c4:83:68:37:42:47:3f:27:5e:
                    e2:82:9a:30:d2:73:4b:1f:6c:8b:9a:b0:ab:ad:2c:
                    90:ad:b5:83:59:a8:24:11:54:2e:ba:49:6f:51:d8:
                    92:88:d9:f1:74:0a:7b:79:36:73:e2:52:26:79:8b:
                    51:94:d3:d2:a0:6a:dd:e1:7f:5d:20:82:13:48:d2:
                    73:b6:98:17:89:ab:69:c8:ef:85:fb:f9:d7:b6:ad:
                    82:b1:e7:d6:3f:35:cb:79:4e:e6:bb:79:c2:5c:f7:
                    86:b1:f4:05:34:be:b0:eb:df:1a:57:de:8e:26:51:
                    f8:49:61:f8:06:ca:fe:68:58:9f:b4:8e:71:b5:cf:
                    2b:87:52:b7:2e:c0:7a:e3:43:fb:f3:7f:cc:48:55:
                    0f:ce:39:a8:92:13:19:27:bb:22:01:cd:c7:02:a7:
                    2d:30:2d:74:11:34:ca:52:cd:58:94:c8:79:7c:0f:
                    8a:74:59:8c:04:2e:13:39:65:24:f8:fb:8b:55:81:
                    98:93:be:13:63:d9:97:b9:35:ba:21:89:b4:c0:18:
                    22:4e:b6:13:60:3e:45:00:f5:35:82:7d:be:46:ab:
                    44:30:77:b5:60:7a:ea:fb:70:41:91:32:f0:ee:f6:
                    51:c5:26:76:b3:6a:e6:29:a4:be:ea:0b:98:5e:c0:
                    f0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8D:5D:4F:8B:83:CD:25:6C:0E:85:18:55:C6:59:C7:89:CA:9A:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/b31f7aa3-6f2b-3332-b058-fdb2209a3f4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126/4a595a80-2106-455a-be91-2aa623280126.crl

            X509v3 Authority Key Identifier:
                keyid:52:D6:D5:E6:B2:12:20:00:DA:E4:AE:8F:FC:65:21:6B:B5:DB:4F:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a595a80-2106-455a-be91-2aa623280126.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:11a0:1000::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:f7:95:8c:20:62:22:bf:fa:b9:77:35:4a:7b:35:92:be:c5:
         13:54:39:88:b0:fd:5a:07:c7:f1:54:58:37:5f:3f:61:c3:1d:
         16:60:8a:46:68:37:53:c9:2f:f3:52:c5:d4:8e:76:41:a4:53:
         1e:38:50:2d:8e:98:a9:45:3f:51:3f:66:18:c9:34:bc:db:b1:
         5e:ea:7b:b7:98:77:7c:ae:f9:55:41:42:dd:6b:36:e1:a5:23:
         84:56:ff:02:84:df:8d:24:33:97:a4:87:c8:eb:a1:83:af:37:
         e1:52:93:2a:bf:98:a1:1b:c3:80:4e:ae:fb:2b:5c:1e:f2:18:
         77:f6:e7:ff:b1:9c:98:be:b2:8d:e6:9d:20:8f:1e:da:c7:68:
         25:6a:73:fa:b2:d2:5d:63:15:aa:e3:72:c6:0e:96:81:61:60:
         db:d8:91:37:15:a7:f2:f3:66:fb:1b:8a:c8:af:55:c9:c6:a4:
         05:1b:1b:da:43:b4:d1:b1:84:72:83:15:2d:38:4f:f1:23:02:
         d8:70:ef:59:21:69:12:2f:d8:ff:d5:41:85:e9:19:78:fc:b7:
         5b:2b:7d:6d:77:04:ad:df:f1:ba:ed:fe:f4:53:01:bb:b0:7d:
         12:4a:f5:ea:ea:70:92:0a:75:0e:b2:84:87:3e:95:c3:82:96:
         b8:3c:6b:d9
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4tnvyFlYPECnQq1A4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGE1OTVhODAtMjEwNi00NTVhLWJlOTEtMmFhNjIzMjgw
MTI2MB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk
ZDc0YmNmNjEtZmQzNC00NjI4LWI3N2MtZmU1YzcxYTI4NGU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxtZ1QzEg2g3Qkc/J17igpow0nNLH2yLmrCr
rSyQrbWDWagkEVQuuklvUdiSiNnxdAp7eTZz4lImeYtRlNPSoGrd4X9dIIITSNJz
tpgXiatpyO+F+/nXtq2CsefWPzXLeU7mu3nCXPeGsfQFNL6w698aV96OJlH4SWH4
Bsr+aFiftI5xtc8rh1K3LsB640P783/MSFUPzjmokhMZJ7siAc3HAqctMC10ETTK
Us1YlMh5fA+KdFmMBC4TOWUk+PuLVYGYk74TY9mXuTW6IYm0wBgiTrYTYD5FAPU1
gn2+RqtEMHe1YHrq+3BBkTLw7vZRxSZ2s2rmKaS+6guYXsDwPQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKqNXU+Lg80lbA6FGFXGWceJyprOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80YTU5
NWE4MC0yMTA2LTQ1NWEtYmU5MS0yYWE2MjMyODAxMjYvYjMxZjdhYTMtNmYyYi0z
MzMyLWIwNTgtZmRiMjIwOWEzZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGE1OTVhODAtMjEwNi00NTVhLWJl
OTEtMmFhNjIzMjgwMTI2LzRhNTk1YTgwLTIxMDYtNDU1YS1iZTkxLTJhYTYyMzI4
MDEyNi5jcmwwHwYDVR0jBBgwFoAUUtbV5rISIADa5K6P/GUha7XbT7MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC80YTU5NWE4MC0yMTA2LTQ1NWEtYmU5MS0yYWE2
MjMyODAxMjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgQRoBAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAEveVjCBiIr/6uXc1Sns1kr7FE1Q5iLD9WgfH8VRYN18/YcMdFmCK
Rmg3U8kv81LF1I52QaRTHjhQLY6YqUU/UT9mGMk0vNuxXup7t5h3fK75VUFC3Ws2
4aUjhFb/AoTfjSQzl6SHyOuhg6834VKTKr+YoRvDgE6u+ytcHvIYd/bn/7GcmL6y
jeadII8e2sdoJWpz+rLSXWMVquNyxg6WgWFg29iRNxWn8vNm+xuKyK9VycakBRsb
2kO00bGEcoMVLThP8SMC2HDvWSFpEi/Y/9VBhekZePy3Wyt9bXcErd/xuu3+9FMB
u7B9Ekr16upwkgp1DrKEhz6Vw4KWuDxr2Q==
-----END CERTIFICATE-----
Generated at Wed Jun 24 20:18:26 2026 by rpki-client