Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/044978b0-ada9-4762-8168-1e5f18bcd8b8/f6a16fe5-31d0-37ff-bcd4-601639ad3d31.roa
File:                     f6a16fe5-31d0-37ff-bcd4-601639ad3d31.roa (raw, json)
Hash identifier:          Ov6XJrR7mRiwFcrlyUQgpTkuDOqIComRvR0iXz5IhoU=
Subject key identifier:   C4:38:8F:67:AE:7E:5C:B3:31:85:E5:8B:05:2D:7D:8D:5A:9D:A4:75
Certificate issuer:       /CN=044978b0-ada9-4762-8168-1e5f18bcd8b8
Certificate serial:       010D0C9F4328584FB82B77021DF9939EF47331C0
Authority key identifier: 5B:9C:96:16:C8:E7:49:12:E5:0F:92:F5:A2:87:48:6E:04:41:4E:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/044978b0-ada9-4762-8168-1e5f18bcd8b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/044978b0-ada9-4762-8168-1e5f18bcd8b8/f6a16fe5-31d0-37ff-bcd4-601639ad3d31.roa
Signing time:             Tue 03 Nov 2026 16:51:46 +0000
ROA not before:           Tue 03 Nov 2026 16:51:46 +0000
ROA not after:            Mon 01 Feb 2027 16:51:46 +0000
asID:                     14618
IP address blocks:        2600:2a41::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/044978b0-ada9-4762-8168-1e5f18bcd8b8/044978b0-ada9-4762-8168-1e5f18bcd8b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/044978b0-ada9-4762-8168-1e5f18bcd8b8/044978b0-ada9-4762-8168-1e5f18bcd8b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/044978b0-ada9-4762-8168-1e5f18bcd8b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b8:2b:77:02:1d:f9:93:9e:f4:73:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044978b0-ada9-4762-8168-1e5f18bcd8b8
        Validity
            Not Before: Nov  3 16:51:46 2026 GMT
            Not After : Feb  1 16:51:46 2027 GMT
        Subject: CN=ca147b02-42ae-4e6f-8a20-41b99889e465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:90:40:00:53:82:ed:b2:7f:b0:5a:46:ee:3a:
                    70:3e:93:d8:5b:64:96:a9:87:a9:f3:a5:55:72:6f:
                    67:e1:5d:cf:9d:d0:bd:2d:20:8e:64:a5:70:51:b4:
                    81:db:f6:ad:95:f8:3a:b1:87:d9:02:c3:bc:1e:68:
                    69:7b:63:d4:d3:50:68:cd:36:e6:c8:d6:8c:2a:24:
                    f8:c1:1b:a6:74:f2:40:0b:7f:f6:75:dd:08:68:51:
                    42:e7:9e:f4:a3:bc:8d:e4:0e:0c:d6:10:7d:d6:3d:
                    dc:87:e5:2e:25:8c:fa:cc:d6:35:ea:ab:82:5f:c6:
                    7c:ee:5d:9a:f9:97:50:3f:b2:1f:4e:9d:62:8b:1d:
                    2d:c3:94:3c:a7:60:9d:84:c4:e8:8f:52:d3:13:6c:
                    89:9f:b6:eb:73:ee:9e:30:7a:d8:ad:cd:a6:01:26:
                    36:fd:6a:83:0a:5b:a2:b0:32:d7:40:1e:f1:56:69:
                    5a:2e:a9:7c:c7:6a:00:97:79:eb:0c:af:e6:49:55:
                    95:b3:21:8b:dd:6e:f8:67:45:39:e0:da:f1:9f:bd:
                    ac:17:8c:a1:90:b0:e7:86:23:4d:b5:fe:86:45:21:
                    32:90:2f:cc:eb:0a:5e:35:e3:7e:4d:95:10:eb:8d:
                    96:e6:9c:f0:6b:35:20:f3:ea:a8:84:ce:41:75:4d:
                    97:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:38:8F:67:AE:7E:5C:B3:31:85:E5:8B:05:2D:7D:8D:5A:9D:A4:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/044978b0-ada9-4762-8168-1e5f18bcd8b8/f6a16fe5-31d0-37ff-bcd4-601639ad3d31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/044978b0-ada9-4762-8168-1e5f18bcd8b8/044978b0-ada9-4762-8168-1e5f18bcd8b8.crl

            X509v3 Authority Key Identifier:
                keyid:5B:9C:96:16:C8:E7:49:12:E5:0F:92:F5:A2:87:48:6E:04:41:4E:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/044978b0-ada9-4762-8168-1e5f18bcd8b8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:2a41::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:0d:77:77:13:84:a6:d1:77:80:80:89:1b:66:3d:51:52:b4:
         e0:be:6b:b6:da:82:a9:31:8c:e1:17:d8:3d:7b:a3:36:85:be:
         4e:d9:ba:d1:05:78:bf:12:7b:f1:ab:c7:84:85:df:21:0e:40:
         66:44:7e:37:7d:99:df:6a:42:e3:39:e2:b1:88:5b:d0:89:83:
         df:03:49:38:b7:67:0a:ed:a6:77:56:34:db:7e:01:f1:36:fc:
         1d:d5:00:ea:c9:b6:73:37:b2:39:68:a0:cc:60:3a:ee:e2:2b:
         70:ff:2b:c6:c2:e1:3c:4e:21:6b:f7:c0:d3:be:51:e8:d5:d5:
         dc:2e:0a:8b:b9:4e:7a:5a:76:ef:8a:b5:ad:39:8c:96:cf:92:
         2d:50:97:6d:f9:d8:31:f1:45:da:29:cd:8a:c9:f2:95:42:a8:
         ab:32:8b:e7:52:e1:91:44:cb:fb:7a:b5:82:7e:cb:96:1d:b9:
         fb:31:1b:35:bb:3f:c0:34:e2:24:5e:3a:48:c0:2e:41:22:58:
         d8:b1:c8:a3:3f:01:f3:55:c6:2a:7d:08:2c:18:7c:bd:bc:19:
         55:63:4f:25:6f:e9:b9:a8:ea:ed:a3:2e:17:dd:92:39:57:0e:
         1b:76:7b:ad:48:f8:e5:a4:0a:7c:67:fc:77:f1:94:3a:1f:d2:
         24:de:74:3f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE+4K3cCHfmTnvRzMcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDQ0OTc4YjAtYWRhOS00NzYyLTgxNjgtMWU1ZjE4YmNk
OGI4MB4XDTI2MTEwMzE2NTE0NloXDTI3MDIwMTE2NTE0NlowLzEtMCsGA1UEAxMk
Y2ExNDdiMDItNDJhZS00ZTZmLThhMjAtNDFiOTk4ODllNDY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZBAAFOC7bJ/sFpG7jpwPpPYW2SWqYep86VV
cm9n4V3PndC9LSCOZKVwUbSB2/atlfg6sYfZAsO8Hmhpe2PU01BozTbmyNaMKiT4
wRumdPJAC3/2dd0IaFFC5570o7yN5A4M1hB91j3ch+UuJYz6zNY16quCX8Z87l2a
+ZdQP7IfTp1iix0tw5Q8p2CdhMToj1LTE2yJn7brc+6eMHrYrc2mASY2/WqDClui
sDLXQB7xVmlaLql8x2oAl3nrDK/mSVWVsyGL3W74Z0U54Nrxn72sF4yhkLDnhiNN
tf6GRSEykC/M6wpeNeN+TZUQ642W5pzwazUg8+qohM5BdU2XKQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMQ4j2euflyzMYXliwUtfY1anaR1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wNDQ5
NzhiMC1hZGE5LTQ3NjItODE2OC0xZTVmMThiY2Q4YjgvZjZhMTZmZTUtMzFkMC0z
N2ZmLWJjZDQtNjAxNjM5YWQzZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l
ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMDQ0OTc4YjAtYWRhOS00NzYyLTgx
NjgtMWU1ZjE4YmNkOGI4LzA0NDk3OGIwLWFkYTktNDc2Mi04MTY4LTFlNWYxOGJj
ZDhiOC5jcmwwHwYDVR0jBBgwFoAUW5yWFsjnSRLlD5L1oodIbgRBTt0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx
OS04NmJkLWRlZjJjYTNhZDkxOS8wNDQ5NzhiMC1hZGE5LTQ3NjItODE2OC0xZTVm
MThiY2Q4YjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgAqQTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB5DXd3E4Sm0XeAgIkbZj1RUrTgvmu22oKpMYzhF9g9e6M2hb5O2brR
BXi/Envxq8eEhd8hDkBmRH43fZnfakLjOeKxiFvQiYPfA0k4t2cK7aZ3VjTbfgHx
Nvwd1QDqybZzN7I5aKDMYDru4itw/yvGwuE8TiFr98DTvlHo1dXcLgqLuU56Wnbv
irWtOYyWz5ItUJdt+dgx8UXaKc2KyfKVQqirMovnUuGRRMv7erWCfsuWHbn7MRs1
uz/ANOIkXjpIwC5BIljYscijPwHzVcYqfQgsGHy9vBlVY08lb+m5qOrtoy4X3ZI5
Vw4bdnutSPjlpAp8Z/x38ZQ6H9Ik3nQ/
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:16:48 2026 by rpki-client