Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/bf1bb498-b8a1-3b19-876e-423f0df6df1b.roa
File:                     bf1bb498-b8a1-3b19-876e-423f0df6df1b.roa (raw, json)
Hash identifier:          c557L3C93PgKS7GbBKpuimy0cS5gEOd0M2H3I6XZ4Bg=
Subject key identifier:   34:45:37:C4:87:19:4A:E0:BA:B7:0F:03:BF:80:A0:DE:CF:01:85:52
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F4328584EC7A1D06210A0C2AC2AD66080
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/bf1bb498-b8a1-3b19-876e-423f0df6df1b.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        2607:71c0:fff0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:d0:62:10:a0:c2:ac:2a:d6:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=7f749063-406f-400e-aefa-9e1ddeac813b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ce:72:1b:32:65:44:bc:cf:1f:d1:0a:7d:86:
                    d4:67:ba:98:96:6d:b7:18:e9:20:24:08:d9:e9:4d:
                    7e:0c:42:08:57:5e:28:b8:61:73:32:cb:5c:99:4a:
                    ba:61:15:7f:0c:96:55:af:ce:13:66:3d:71:29:15:
                    65:40:1c:7f:d5:db:e7:f8:d8:ae:ad:6e:a3:93:eb:
                    94:90:a4:95:57:1f:b8:e6:47:44:49:5c:a0:7a:08:
                    9c:da:1c:8a:42:41:dc:17:1c:89:d9:22:76:8d:1e:
                    a0:71:ce:2e:21:37:de:7a:4c:8a:78:7b:b7:b0:05:
                    04:fe:c3:20:e0:2b:2f:90:8d:6e:2f:a2:6a:3a:17:
                    ee:fc:e4:30:ed:80:97:57:62:2c:72:64:0a:e1:ed:
                    e9:bd:16:80:a0:0e:fd:fc:07:b1:f6:cf:c0:14:f4:
                    0c:61:05:fe:f6:7a:6d:82:41:17:db:8d:87:34:5b:
                    c2:46:1d:d4:80:d1:1f:80:bf:75:4a:2c:dd:f4:9d:
                    cd:20:a7:e0:32:de:89:c5:f7:fa:07:0e:90:0b:a9:
                    6d:6e:f6:a9:e0:15:78:b3:42:b5:5c:d5:b0:41:f1:
                    6e:10:b5:21:55:bc:32:4e:db:b4:1a:90:7f:98:8f:
                    09:ac:fa:e0:1f:ac:bc:17:5f:a9:a1:70:8b:2a:c5:
                    6b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:45:37:C4:87:19:4A:E0:BA:B7:0F:03:BF:80:A0:DE:CF:01:85:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/bf1bb498-b8a1-3b19-876e-423f0df6df1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:71c0:fff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:0d:c0:f3:d4:6f:37:8b:c3:db:fe:0c:e3:07:75:fa:2a:65:
         d1:4c:46:33:5c:33:e2:98:8e:fc:70:96:16:12:46:97:c4:5a:
         d3:c3:34:d2:60:91:a0:89:18:30:ad:40:1e:c6:be:69:8a:af:
         ad:90:2a:a4:2d:5a:bd:8d:45:bf:2c:2c:2a:15:7e:be:96:32:
         78:0f:10:c3:a8:bc:a1:10:a3:9f:5b:58:91:21:f4:d2:b6:fe:
         f3:34:3b:ff:be:d4:a6:d7:99:b6:21:39:d9:72:31:3a:24:c3:
         da:75:0d:30:9e:06:ea:65:d6:39:90:df:cf:e0:a2:4a:1a:22:
         01:2a:6a:35:b8:61:dc:08:cf:5c:9e:46:20:c0:f0:71:de:fd:
         21:a7:b3:66:9a:86:15:20:f3:d4:d4:11:6c:99:71:dd:59:2d:
         0b:6c:3c:64:10:3b:fd:45:d5:50:56:0c:fb:d4:f4:a6:bd:d8:
         4e:21:35:9d:3e:0e:5c:02:54:a2:7b:2c:94:91:91:47:be:3e:
         66:3a:6a:b0:60:c2:13:bc:df:41:c7:a5:ee:36:97:5b:8d:09:
         1c:4a:94:31:d2:3b:ff:f5:c7:22:32:55:8d:c6:95:af:a9:69:
         38:58:db:f8:06:bd:90:ae:5e:84:d8:66:bf:59:2a:7a:11:a9:
         7d:18:9c:72
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7HodBiEKDCrCrWYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUzYzFmNDYtZTJhZC00NTQ3LThiMWMtNTkzNWFkZGVk
ZGI1MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk
N2Y3NDkwNjMtNDA2Zi00MDBlLWFlZmEtOWUxZGRlYWM4MTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo85yGzJlRLzPH9EKfYbUZ7qYlm23GOkgJAjZ
6U1+DEIIV14ouGFzMstcmUq6YRV/DJZVr84TZj1xKRVlQBx/1dvn+NiurW6jk+uU
kKSVVx+45kdESVygegic2hyKQkHcFxyJ2SJ2jR6gcc4uITfeekyKeHu3sAUE/sMg
4CsvkI1uL6JqOhfu/OQw7YCXV2IscmQK4e3pvRaAoA79/Aex9s/AFPQMYQX+9npt
gkEX242HNFvCRh3UgNEfgL91Sizd9J3NIKfgMt6Jxff6Bw6QC6ltbvap4BV4s0K1
XNWwQfFuELUhVbwyTtu0GpB/mI8JrPrgH6y8F1+poXCLKsVrNwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDRFN8SHGUrgurcPA7+AoN7PAYVSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNj
MWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1YWRkZWRkYjUvYmYxYmI0OTgtYjhhMS0z
YjE5LTg3NmUtNDIzZjBkZjZkZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUzYzFmNDYtZTJhZC00NTQ3LThi
MWMtNTkzNWFkZGVkZGI1LzI1M2MxZjQ2LWUyYWQtNDU0Ny04YjFjLTU5MzVhZGRl
ZGRiNS5jcmwwHwYDVR0jBBgwFoAUgB1D2PcXFrBpqwhHsqkVE0AyaWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNjMWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1
YWRkZWRkYjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgdxwP/w
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACsNwPPUbzeLw9v+DOMHdfoqZdFMRjNcM+KYjvxwlhYSRpfEWtPD
NNJgkaCJGDCtQB7GvmmKr62QKqQtWr2NRb8sLCoVfr6WMngPEMOovKEQo59bWJEh
9NK2/vM0O/++1KbXmbYhOdlyMTokw9p1DTCeBupl1jmQ38/gokoaIgEqajW4YdwI
z1yeRiDA8HHe/SGns2aahhUg89TUEWyZcd1ZLQtsPGQQO/1F1VBWDPvU9Ka92E4h
NZ0+DlwCVKJ7LJSRkUe+PmY6arBgwhO830HHpe42l1uNCRxKlDHSO//1xyIyVY3G
la+paThY2/gGvZCuXoTYZr9ZKnoRqX0YnHI=
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:37:50 2026 by rpki-client