Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/ffd9f8d6-0f97-3fc2-87fc-63cc08d4488f.roa
File:                     ffd9f8d6-0f97-3fc2-87fc-63cc08d4488f.roa (raw, json)
Hash identifier:          S8fPMuuZKEF5T1VjbwD7IjTB/OK0w13p4CQU7w0nLHI=
Subject key identifier:   67:B3:80:D9:19:82:6E:1F:75:93:1E:C8:CF:2E:55:F7:83:8F:6B:64
Certificate issuer:       /CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6
Certificate serial:       010D0C9F4328584F0D6CDC1390D6BF4EDD140D94
Authority key identifier: 4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/ffd9f8d6-0f97-3fc2-87fc-63cc08d4488f.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     174
IP address blocks:        2602:fc39:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:dc:13:90:d6:bf:4e:dd:14:0d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=0b09af7d-0453-4052-ba88-7b6d0788d00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d8:27:4d:98:bf:93:05:15:63:ae:32:5f:5a:
                    21:bc:4a:0d:e6:70:2f:b5:81:9f:9e:64:92:d4:db:
                    df:a2:c7:76:cf:90:36:77:c6:04:8e:c9:32:9e:1a:
                    2c:eb:9c:d7:fd:a4:25:60:5e:15:af:13:29:ac:45:
                    1b:10:21:e5:bd:d3:c5:ae:7a:e0:7d:ee:f7:5b:c7:
                    81:a9:ec:6a:3a:d7:cd:fa:b1:88:67:48:a6:d9:02:
                    51:2e:aa:c1:56:2d:1b:69:06:29:d9:44:09:cc:7b:
                    2b:a6:3c:4c:d6:e7:7f:fa:a6:2f:65:38:1b:2b:06:
                    9f:2d:a7:6e:fd:0c:b5:7d:ba:9e:5e:93:d4:df:5e:
                    28:64:28:e4:c9:fa:71:16:0e:55:be:ef:8f:26:d0:
                    6f:24:ce:58:94:9c:2f:86:7c:6d:02:b8:fb:17:7d:
                    6d:2a:52:4a:fc:04:36:1d:f1:b8:f2:3f:1b:d7:30:
                    2e:21:a1:5e:ef:e1:e3:f9:6e:58:4e:aa:32:eb:09:
                    a5:28:92:d2:0b:c7:1f:2c:56:81:b3:5d:e9:86:7e:
                    e9:cd:9f:62:4b:4f:17:98:ff:d6:22:34:1d:e3:48:
                    79:ff:4f:cc:a6:55:5f:00:de:41:4f:77:88:f7:c7:
                    ed:8b:ae:fc:52:42:be:2d:91:01:62:89:86:d0:eb:
                    8e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B3:80:D9:19:82:6E:1F:75:93:1E:C8:CF:2E:55:F7:83:8F:6B:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/ffd9f8d6-0f97-3fc2-87fc-63cc08d4488f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl

            X509v3 Authority Key Identifier:
                keyid:4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc39:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:68:29:e6:55:75:7f:fc:d7:35:ff:b9:97:19:02:56:bc:3a:
         58:db:94:04:4b:1b:7b:6c:55:de:72:10:33:3e:c8:06:a6:3d:
         b7:0a:8e:72:e0:35:dd:ab:30:9f:15:c7:3c:03:73:d2:c1:19:
         6e:39:84:e7:dd:c0:a3:31:7c:b3:77:c7:e6:35:fa:09:9e:00:
         aa:44:b9:90:44:2b:6e:4a:ce:ab:36:5b:9f:8a:56:0f:14:32:
         a5:7f:54:4b:47:71:d3:33:2a:bc:47:f3:69:00:54:e3:49:69:
         a4:fe:a2:c0:d3:5a:c1:a4:aa:20:eb:77:22:8f:b4:f3:d0:47:
         00:2b:70:63:65:0c:8d:57:ee:db:f5:06:f8:6a:f6:97:25:b4:
         0f:4b:62:4f:94:1b:d0:21:11:58:17:fa:c1:43:90:d9:c9:43:
         8e:fe:ec:b8:a1:94:a6:28:50:14:e1:7e:57:6e:3d:e0:8c:d2:
         81:ea:f0:f1:2a:4c:42:f4:7d:1f:f4:3c:d7:3c:09:37:70:4e:
         2c:8e:8d:71:7b:d3:0c:07:86:bd:f7:3e:4d:a9:d3:f4:b8:ee:
         58:2a:12:ea:31:34:33:95:fa:3c:53:2c:11:f9:bd:88:ec:39:
         73:04:71:04:8a:a7:39:94:7d:56:1b:86:8a:cd:b7:a9:6f:7b:
         52:52:ef:84
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8NbNwTkNa/Tt0UDZQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjRkNzFkYTktNmZmMS00OWFiLWExZTUtNmM0OGY4ZjBj
MWQ2MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk
MGIwOWFmN2QtMDQ1My00MDUyLWJhODgtN2I2ZDA3ODhkMDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9gnTZi/kwUVY64yX1ohvEoN5nAvtYGfnmSS
1Nvfosd2z5A2d8YEjskynhos65zX/aQlYF4VrxMprEUbECHlvdPFrnrgfe73W8eB
qexqOtfN+rGIZ0im2QJRLqrBVi0baQYp2UQJzHsrpjxM1ud/+qYvZTgbKwafLadu
/Qy1fbqeXpPU314oZCjkyfpxFg5Vvu+PJtBvJM5YlJwvhnxtArj7F31tKlJK/AQ2
HfG48j8b1zAuIaFe7+Hj+W5YTqoy6wmlKJLSC8cfLFaBs13phn7pzZ9iS08XmP/W
IjQd40h5/0/MplVfAN5BT3eI98fti678UkK+LZEBYomG0OuOqQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGezgNkZgm4fdZMeyM8uVfeDj2tkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3
MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4ZjhmMGMxZDYvZmZkOWY4ZDYtMGY5Ny0z
ZmMyLTg3ZmMtNjNjYzA4ZDQ0ODhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjRkNzFkYTktNmZmMS00OWFiLWEx
ZTUtNmM0OGY4ZjBjMWQ2L2I0ZDcxZGE5LTZmZjEtNDlhYi1hMWU1LTZjNDhmOGYw
YzFkNi5jcmwwHwYDVR0jBBgwFoAUT4QpIPFqZbJeSMpRP7Uli1CK9fswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4
ZjhmMGMxZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8OQAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIdoKeZVdX/81zX/uZcZAla8OljblARLG3tsVd5yEDM+yAamPbcK
jnLgNd2rMJ8VxzwDc9LBGW45hOfdwKMxfLN3x+Y1+gmeAKpEuZBEK25Kzqs2W5+K
Vg8UMqV/VEtHcdMzKrxH82kAVONJaaT+osDTWsGkqiDrdyKPtPPQRwArcGNlDI1X
7tv1Bvhq9pcltA9LYk+UG9AhEVgX+sFDkNnJQ47+7LihlKYoUBThflduPeCM0oHq
8PEqTEL0fR/0PNc8CTdwTiyOjXF70wwHhr33Pk2p0/S47lgqEuoxNDOV+jxTLBH5
vYjsOXMEcQSKpzmUfVYbhorNt6lve1JS74Q=
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:57:57 2026 by rpki-client