Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c9039fd-7e7a-37d1-b6e6-7713e0ae1e03.roa
File:                     3c9039fd-7e7a-37d1-b6e6-7713e0ae1e03.roa (raw, json)
Hash identifier:          5Ydq9zVbloFGmLXv5DxDfpf7P4pFKxmapOi46Etf66c=
Subject key identifier:   B8:85:9C:7E:6F:96:5D:FA:CB:41:5C:79:CD:8B:D2:B2:7A:44:9F:08
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584F7E7D932DD53DA79750340740
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c9039fd-7e7a-37d1-b6e6-7713e0ae1e03.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     396982
IP address blocks:        2600:1904:401f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:93:2d:d5:3d:a7:97:50:34:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=dfb0158e-f48a-4a8d-8c25-abb3d1dbf1b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e5:f9:94:6f:4c:1e:e0:b1:dd:94:dd:26:4f:
                    42:d3:1e:a3:23:91:ad:81:f3:24:e7:b3:f2:ea:95:
                    1a:38:0d:13:3a:94:ba:00:15:2d:10:a6:ec:66:6c:
                    83:82:8f:f1:b0:ac:58:14:91:40:f8:3a:dc:ff:ce:
                    5d:04:cb:54:06:8e:c3:8f:56:8e:80:d7:ca:2c:7c:
                    9e:f0:7f:93:17:a6:79:a9:46:e4:47:6b:b2:66:77:
                    47:b6:e5:82:1b:73:0d:51:2e:9f:e1:41:c1:4f:59:
                    4b:3f:7c:68:22:38:8b:f1:d2:4f:8b:d0:d8:a6:07:
                    27:28:a9:2f:c4:f9:b2:23:5f:2f:f2:cb:9f:f1:9f:
                    8e:96:53:89:d1:1b:2f:09:af:b2:93:4a:d1:b7:fb:
                    8e:81:b2:d5:c3:a8:c2:42:34:cb:0d:f2:07:1b:b5:
                    17:72:d3:f1:44:7c:21:4f:30:04:0b:76:1c:04:f7:
                    71:08:fe:17:c9:6a:a1:93:ff:5b:e7:8b:62:48:53:
                    b2:7a:dc:be:96:8b:2c:10:00:ff:65:cc:ed:8a:69:
                    7b:eb:ee:81:d0:13:db:26:aa:3e:98:aa:a1:91:8e:
                    4e:b4:df:01:84:8a:9e:91:41:f8:aa:74:85:f1:60:
                    fc:ea:06:6f:91:12:14:12:de:99:44:32:d5:5e:e1:
                    e7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:85:9C:7E:6F:96:5D:FA:CB:41:5C:79:CD:8B:D2:B2:7A:44:9F:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3c9039fd-7e7a-37d1-b6e6-7713e0ae1e03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1904:401f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:8e:36:5a:b0:ec:e5:ea:e3:49:95:65:71:d2:be:31:d2:75:
         a3:ce:3c:87:c5:d2:c6:0e:ac:b0:61:59:06:8c:cc:30:1b:98:
         24:52:f4:42:b8:81:df:0f:07:de:d9:76:4d:5e:93:cb:db:53:
         20:27:1c:c6:c9:cf:76:4d:8c:a8:ea:75:63:cd:02:1f:79:c1:
         8c:f1:4a:93:33:cb:8f:cd:ae:c7:64:ab:81:6f:4c:a5:69:cb:
         c8:6e:04:54:6c:b0:47:ad:8e:1e:4f:24:5b:0e:b9:48:25:db:
         c4:90:66:cc:1a:65:9c:8f:af:9b:32:59:50:95:91:94:eb:d8:
         d5:3b:53:48:bd:2d:11:fe:e2:c8:76:e3:9b:d2:cf:10:a7:cd:
         d3:46:b2:c6:27:77:ba:a2:dd:04:46:29:2a:9a:07:3e:10:63:
         c1:05:c8:f7:da:31:00:b2:22:f3:fc:8d:f9:48:1b:ec:bc:27:
         f3:de:41:3f:37:ca:ce:47:92:54:64:4c:40:39:94:a5:73:9f:
         f3:2e:fb:fc:d0:61:9c:0b:9c:70:b0:08:3b:73:40:45:22:d7:
         01:50:8e:52:a4:54:e9:cd:55:b9:2d:15:5b:3a:17:2b:38:57:
         3c:68:cf:11:a7:6f:3d:ce:2b:e2:d7:1d:7f:2b:35:6e:7e:cf:
         a3:05:b0:f1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+fZMt1T2nl1A0B0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk
ZGZiMDE1OGUtZjQ4YS00YThkLThjMjUtYWJiM2QxZGJmMWI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+X5lG9MHuCx3ZTdJk9C0x6jI5GtgfMk57Py
6pUaOA0TOpS6ABUtEKbsZmyDgo/xsKxYFJFA+Drc/85dBMtUBo7Dj1aOgNfKLHye
8H+TF6Z5qUbkR2uyZndHtuWCG3MNUS6f4UHBT1lLP3xoIjiL8dJPi9DYpgcnKKkv
xPmyI18v8suf8Z+OllOJ0RsvCa+yk0rRt/uOgbLVw6jCQjTLDfIHG7UXctPxRHwh
TzAEC3YcBPdxCP4XyWqhk/9b54tiSFOyety+lossEAD/Zcztiml76+6B0BPbJqo+
mKqhkY5OtN8BhIqekUH4qnSF8WD86gZvkRIUEt6ZRDLVXuHniQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLiFnH5vll36y0Fcec2L0rJ6RJ8IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2M5MDM5ZmQtN2U3YS0z
N2QxLWI2ZTYtNzcxM2UwYWUxZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAZBEAf
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABeONlqw7OXq40mVZXHSvjHSdaPOPIfF0sYOrLBhWQaMzDAbmCRS
9EK4gd8PB97Zdk1ek8vbUyAnHMbJz3ZNjKjqdWPNAh95wYzxSpMzy4/Nrsdkq4Fv
TKVpy8huBFRssEetjh5PJFsOuUgl28SQZswaZZyPr5syWVCVkZTr2NU7U0i9LRH+
4sh245vSzxCnzdNGssYnd7qi3QRGKSqaBz4QY8EFyPfaMQCyIvP8jflIG+y8J/Pe
QT83ys5HklRkTEA5lKVzn/Mu+/zQYZwLnHCwCDtzQEUi1wFQjlKkVOnNVbktFVs6
Fys4VzxozxGnbz3OK+LXHX8rNW5+z6MFsPE=
-----END CERTIFICATE-----
Generated at Sun Oct 18 10:59:30 2026 by rpki-client