Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/ccc378c7-d5fa-337b-95bb-1571178b92df.roa
File:                     ccc378c7-d5fa-337b-95bb-1571178b92df.roa (raw, json)
Hash identifier:          zwYDshwD/vDRQQi5eglJS5m8zHBjetZLYTmrhW8hp6w=
Subject key identifier:   A1:11:CA:2D:9A:56:09:0C:F0:2D:2E:13:2E:59:E2:3F:8D:C2:F1:14
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F4328584EA788942007E7785BFBB59200
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/ccc378c7-d5fa-337b-95bb-1571178b92df.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     400097
IP address blocks:        2606:3d40:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:94:20:07:e7:78:5b:fb:b5:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f380847b-d1cf-4980-804a-046e5a43130c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:72:cc:89:09:00:18:d9:7e:40:a1:a3:0b:de:
                    bb:00:d1:ea:7c:1a:a3:e4:0a:66:dd:7c:a9:47:97:
                    15:cf:95:f8:80:45:9f:f2:70:43:05:72:50:d2:a5:
                    65:bf:0d:7b:5b:68:4e:62:e3:67:10:11:65:6f:76:
                    a1:78:cf:3c:d6:c3:32:4d:c9:81:6a:48:07:e4:e3:
                    88:cd:c6:b1:7b:be:c2:2c:a6:69:80:ed:fa:20:23:
                    9a:44:90:0c:1e:46:d7:3f:e3:5d:c6:16:71:94:21:
                    fb:58:68:6b:99:07:28:55:2c:d1:e3:4d:d1:d7:d4:
                    14:6c:d2:b5:6f:ba:3e:39:1f:11:b6:5e:d7:9c:e6:
                    b0:13:f6:ea:2d:ef:ea:b5:ed:cf:ce:90:32:f2:54:
                    37:11:6c:59:26:9f:89:36:fa:c1:2c:2a:74:4b:a9:
                    ff:44:b3:23:a2:82:e3:9f:73:63:a7:da:a6:60:6b:
                    80:c1:5c:a8:c2:33:69:48:da:f9:8f:55:98:68:45:
                    2d:58:22:63:ff:50:b7:e0:61:75:dd:a6:6f:62:6b:
                    5b:54:bf:af:03:df:4b:dd:80:49:40:65:78:5b:15:
                    c7:e7:cf:a4:6e:62:98:14:de:0a:a4:ee:1f:a2:b5:
                    27:ef:fb:94:37:ce:89:cc:a2:6d:51:ec:1a:87:52:
                    39:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:11:CA:2D:9A:56:09:0C:F0:2D:2E:13:2E:59:E2:3F:8D:C2:F1:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/ccc378c7-d5fa-337b-95bb-1571178b92df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:13::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:29:3b:f0:33:2b:ee:83:51:af:97:dd:d7:b2:d4:de:6f:5d:
         51:55:57:6f:02:90:8a:44:f1:10:79:18:17:23:ff:e1:73:62:
         1e:d8:6e:c0:6a:d7:fe:cc:5b:d5:e7:5d:e7:4b:de:56:25:35:
         db:98:d2:a8:33:f6:8f:95:c9:f6:db:5c:86:4a:14:ac:a2:43:
         c9:dc:cc:2f:6b:00:09:41:0a:e8:2d:5a:a9:8a:4c:5c:b7:39:
         53:05:5b:da:61:06:1d:41:d4:5a:28:92:71:2a:5e:3f:7e:e9:
         50:2d:00:3e:3e:9b:62:65:c9:0b:6f:53:06:3f:07:5d:b2:57:
         35:fe:77:08:a1:81:45:1b:55:f9:cc:8a:78:12:32:ee:67:c6:
         80:e0:89:7e:9c:bf:49:33:76:cb:4f:83:a6:ca:78:31:34:8a:
         02:54:c4:ec:c4:55:3d:58:80:1e:a2:f1:53:21:45:4d:c0:7a:
         16:b9:6b:02:6b:15:47:a4:1e:4c:f3:f8:be:2e:f4:4d:f2:6e:
         e5:c6:b8:c0:d1:9f:9a:f0:25:8a:ee:c7:91:30:a7:f5:ed:0f:
         b5:01:79:1f:86:21:3a:dc:a7:c2:bf:3a:6f:e6:03:c1:59:7f:
         b2:c9:f8:93:f3:17:be:02:d8:dc:6f:cf:82:aa:47:72:44:c5:
         76:57:dc:9f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6niJQgB+d4W/u1kgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy
NDVkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZjM4MDg0N2ItZDFjZi00OTgwLTgwNGEtMDQ2ZTVhNDMxMzBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXLMiQkAGNl+QKGjC967ANHqfBqj5Apm3Xyp
R5cVz5X4gEWf8nBDBXJQ0qVlvw17W2hOYuNnEBFlb3aheM881sMyTcmBakgH5OOI
zcaxe77CLKZpgO36ICOaRJAMHkbXP+NdxhZxlCH7WGhrmQcoVSzR403R19QUbNK1
b7o+OR8Rtl7XnOawE/bqLe/qte3PzpAy8lQ3EWxZJp+JNvrBLCp0S6n/RLMjooLj
n3Njp9qmYGuAwVyowjNpSNr5j1WYaEUtWCJj/1C34GF13aZvYmtbVL+vA99L3YBJ
QGV4WxXH58+kbmKYFN4KpO4forUn7/uUN86JzKJtUewah1I5WwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKERyi2aVgkM8C0uEy5Z4j+NwvEUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi
NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvY2NjMzc4YzctZDVmYS0z
MzdiLTk1YmItMTU3MTE3OGI5MmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl
YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi
MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx
MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QAAT
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIApO/AzK+6DUa+X3dey1N5vXVFVV28CkIpE8RB5GBcj/+FzYh7Y
bsBq1/7MW9XnXedL3lYlNduY0qgz9o+VyfbbXIZKFKyiQ8nczC9rAAlBCugtWqmK
TFy3OVMFW9phBh1B1FooknEqXj9+6VAtAD4+m2JlyQtvUwY/B12yVzX+dwihgUUb
VfnMingSMu5nxoDgiX6cv0kzdstPg6bKeDE0igJUxOzEVT1YgB6i8VMhRU3Aeha5
awJrFUekHkzz+L4u9E3ybuXGuMDRn5rwJYrux5Ewp/XtD7UBeR+GITrcp8K/Om/m
A8FZf7LJ+JPzF74C2Nxvz4KqR3JExXZX3J8=
-----END CERTIFICATE-----
Generated at Thu Jul 30 06:51:34 2026 by rpki-client