Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4e136740-8a5c-3866-bc51-aa216174bac7.roa
File:                     4e136740-8a5c-3866-bc51-aa216174bac7.roa (raw, json)
Hash identifier:          0me4NJEhg2bLQUoNR1xPlF/stk9/lyBpRYBGNDvk+Qc=
Subject key identifier:   48:FB:E7:6F:D5:E1:98:6B:C9:49:D9:BE:B7:89:19:82:39:1C:04:4C
Certificate issuer:       /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
Certificate serial:       010D0C9F4328584EA79A4A89C30E7000CB04A680
Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4e136740-8a5c-3866-bc51-aa216174bac7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     57974
IP address blocks:        2602:2d4:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:4a:89:c3:0e:70:00:cb:04:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=67362703-16ab-4532-8e39-eb4df6ef4ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:55:87:c0:7b:10:af:e6:46:d1:e4:66:2b:0e:
                    a8:a7:33:d5:6d:dc:a8:67:87:78:ed:e5:4d:e6:83:
                    80:4a:67:fb:07:17:0f:1a:42:00:99:26:fc:e4:e0:
                    08:c8:8a:09:6c:15:6a:62:82:40:af:51:9a:18:ec:
                    41:86:5f:b4:1b:ef:18:78:a9:12:67:68:c0:60:c8:
                    93:dd:79:67:06:89:8b:28:37:82:99:0d:e6:93:f9:
                    fd:6e:1f:bf:b8:ba:fc:85:80:5f:4c:69:29:72:4b:
                    db:a5:ca:df:62:ed:20:fc:70:f2:04:3c:58:61:ff:
                    be:6d:85:e3:83:f3:fc:69:c6:e2:65:bf:78:3c:a0:
                    f9:cf:b2:4e:06:74:93:ac:51:d7:84:20:b4:08:fd:
                    d5:d4:62:cb:7c:75:5b:c8:20:da:ef:30:eb:f4:30:
                    0d:2d:92:34:86:80:dd:f0:c8:01:a3:3a:9f:2b:3a:
                    ee:3c:ae:2c:5e:9b:13:8a:4d:a2:d5:33:87:27:d1:
                    16:8f:52:bb:8c:f7:65:0c:76:a7:8e:6a:6e:76:f7:
                    15:28:39:2c:3c:95:07:cc:83:2c:68:47:78:c5:d8:
                    1b:5d:2b:30:f9:f8:20:9b:9c:6b:3d:9f:63:b6:14:
                    50:4c:33:16:99:bd:b7:77:49:fc:d5:77:a5:b3:fd:
                    9b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FB:E7:6F:D5:E1:98:6B:C9:49:D9:BE:B7:89:19:82:39:1C:04:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4e136740-8a5c-3866-bc51-aa216174bac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d4:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:e0:71:96:b5:b8:04:5a:e8:06:ed:cc:ff:19:98:a1:e5:92:
         8e:16:b1:97:6e:59:05:2e:9f:e8:21:fb:24:10:d6:fc:a3:5d:
         d3:a4:e4:00:22:8c:59:81:ea:bb:77:e5:91:66:e1:b1:a6:2b:
         c3:c0:6d:fe:46:16:56:8d:34:9e:8a:85:e3:45:fa:74:f1:7e:
         7c:c8:5b:38:6b:1c:c8:43:2b:a0:a9:53:2d:85:10:72:12:dd:
         b2:fd:c7:c2:a4:09:8d:e0:bd:d5:bb:15:d1:8e:66:3f:bf:0d:
         1b:2d:c4:66:6f:f1:a5:b3:39:07:7b:91:fb:a2:64:35:d4:cd:
         5d:5d:82:0f:db:0f:b4:d6:16:43:ff:1b:10:85:14:33:3d:5d:
         1f:10:bd:bb:29:3e:3e:40:a4:94:49:80:54:b0:cc:3e:ab:b2:
         50:6a:35:2a:b8:ff:57:df:76:4a:65:65:41:a7:2d:3e:ef:5f:
         5a:ba:02:23:83:0a:ff:51:69:33:8a:fa:4d:92:7b:d7:ec:9a:
         87:95:72:fc:ac:9c:44:d7:55:92:0e:f3:19:fa:e6:cc:e3:16:
         0d:24:a2:e3:97:13:03:bf:e0:5e:ce:50:de:a8:23:1d:a6:11:
         5d:ec:bb:82:25:53:d7:3d:9c:14:94:1f:a9:0c:39:33:68:f6:
         6a:22:21:b0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nmkqJww5wAMsEpoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY5ZjY3NzUtZDQ0NS00YmU3LTkzOTgtMWNiYmVhY2I5
NzA3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NjczNjI3MDMtMTZhYi00NTMyLThlMzktZWI0ZGY2ZWY0Y2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFWHwHsQr+ZG0eRmKw6opzPVbdyoZ4d47eVN
5oOASmf7BxcPGkIAmSb85OAIyIoJbBVqYoJAr1GaGOxBhl+0G+8YeKkSZ2jAYMiT
3XlnBomLKDeCmQ3mk/n9bh+/uLr8hYBfTGkpckvbpcrfYu0g/HDyBDxYYf++bYXj
g/P8acbiZb94PKD5z7JOBnSTrFHXhCC0CP3V1GLLfHVbyCDa7zDr9DANLZI0hoDd
8MgBozqfKzruPK4sXpsTik2i1TOHJ9EWj1K7jPdlDHanjmpudvcVKDksPJUHzIMs
aEd4xdgbXSsw+fggm5xrPZ9jthRQTDMWmb23d0n81Xels/2blwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEj752/V4ZhryUnZvreJGYI5HARMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84Zjlm
Njc3NS1kNDQ1LTRiZTctOTM5OC0xY2JiZWFjYjk3MDcvNGUxMzY3NDAtOGE1Yy0z
ODY2LWJjNTEtYWEyMTYxNzRiYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGY5ZjY3NzUtZDQ0NS00YmU3LTkz
OTgtMWNiYmVhY2I5NzA3LzhmOWY2Nzc1LWQ0NDUtNGJlNy05Mzk4LTFjYmJlYWNi
OTcwNy5jcmwwHwYDVR0jBBgwFoAU4PWKadjMFHV1bA4wXEdutJ0Z9BIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84ZjlmNjc3NS1kNDQ1LTRiZTctOTM5OC0xY2Ji
ZWFjYjk3MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIC1AEA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEzgcZa1uARa6AbtzP8ZmKHlko4WsZduWQUun+gh+yQQ1vyjXdOk
5AAijFmB6rt35ZFm4bGmK8PAbf5GFlaNNJ6KheNF+nTxfnzIWzhrHMhDK6CpUy2F
EHIS3bL9x8KkCY3gvdW7FdGOZj+/DRstxGZv8aWzOQd7kfuiZDXUzV1dgg/bD7TW
FkP/GxCFFDM9XR8QvbspPj5ApJRJgFSwzD6rslBqNSq4/1ffdkplZUGnLT7vX1q6
AiODCv9RaTOK+k2Se9fsmoeVcvysnETXVZIO8xn65szjFg0kouOXEwO/4F7OUN6o
Ix2mEV3su4IlU9c9nBSUH6kMOTNo9moiIbA=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:31:33 2026 by rpki-client