Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645/b15541cb-068a-38de-b79d-b2852320a209.roa
File:                     b15541cb-068a-38de-b79d-b2852320a209.roa (raw, json)
Hash identifier:          +i2dfV+cuw/MUK2dGU5o2k2AyIJ5oTbfKcvjqP6NkAs=
Subject key identifier:   E1:4A:42:2E:67:27:FB:E6:76:A0:34:7C:D5:2B:DD:A7:8D:07:DD:0D
Certificate issuer:       /CN=16d71376-e8fa-4e6c-bbf4-978708d88645
Certificate serial:       010D0C9F4328584F104C56F43899F1AB3BB73A80
Authority key identifier: 4F:1F:74:1C:B5:05:7E:10:C8:53:1F:E1:B4:D5:44:29:C1:44:B0:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645/b15541cb-068a-38de-b79d-b2852320a209.roa
Signing time:             Fri 04 Sep 2026 13:42:12 +0000
ROA not before:           Fri 04 Sep 2026 13:42:12 +0000
ROA not after:            Sat 28 Nov 2026 08:29:22 +0000
asID:                     401311
IP address blocks:        2602:f4e6:f6::/48 maxlen: 48
                          2602:f4e6:f7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645/16d71376-e8fa-4e6c-bbf4-978708d88645.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645/16d71376-e8fa-4e6c-bbf4-978708d88645.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:4c:56:f4:38:99:f1:ab:3b:b7:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d71376-e8fa-4e6c-bbf4-978708d88645
        Validity
            Not Before: Sep  4 13:42:12 2026 GMT
            Not After : Nov 28 08:29:22 2026 GMT
        Subject: CN=0c03187e-3f3d-4a37-ac28-16828384deda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:02:57:ac:75:ea:be:39:83:27:26:84:70:3f:
                    cc:36:8c:7c:e0:e0:73:bb:de:86:b3:11:0d:1f:83:
                    20:6b:2b:ba:bf:bb:f9:5a:63:4d:ee:08:d3:3f:81:
                    b0:41:4d:8c:40:0f:28:d3:a4:31:1b:c0:4c:74:77:
                    46:6c:c5:ec:80:98:9a:88:00:d7:24:6b:50:50:4d:
                    7d:2e:f8:84:09:e3:55:02:d2:5d:80:5c:3a:f1:06:
                    cd:73:12:31:4a:a1:13:29:da:a2:44:36:f9:8f:5e:
                    b3:86:0e:c9:5c:00:62:03:9a:0d:21:8b:ac:77:5e:
                    71:46:30:13:01:49:33:d2:0f:d6:94:3b:50:62:e5:
                    13:79:08:08:76:35:c7:be:18:26:3c:c4:d4:a4:f1:
                    18:7c:0e:c5:5d:1c:3c:56:b9:4b:07:85:41:89:f2:
                    75:e4:da:60:b1:b8:aa:59:b6:c5:c8:9a:1e:c5:cf:
                    c4:80:cb:bb:1b:35:57:16:4d:c6:39:ca:57:6f:9a:
                    df:e3:cc:3c:c6:24:34:54:d3:1c:60:a0:70:ac:4a:
                    75:8b:3c:b4:42:a2:2a:d5:e1:1f:50:5f:94:1b:e7:
                    43:d7:4b:78:ad:27:72:3c:48:c1:7e:5c:5b:0e:12:
                    43:c6:96:a2:7f:3c:1a:2b:b1:09:a1:d3:e1:2e:cc:
                    de:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4A:42:2E:67:27:FB:E6:76:A0:34:7C:D5:2B:DD:A7:8D:07:DD:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645/b15541cb-068a-38de-b79d-b2852320a209.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645/16d71376-e8fa-4e6c-bbf4-978708d88645.crl

            X509v3 Authority Key Identifier:
                keyid:4F:1F:74:1C:B5:05:7E:10:C8:53:1F:E1:B4:D5:44:29:C1:44:B0:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/16d71376-e8fa-4e6c-bbf4-978708d88645.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f4e6:f6::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:c9:c5:ec:3b:06:f7:63:43:19:c1:3c:4c:9c:63:11:d8:cb:
         14:ff:b2:e0:de:9a:dc:a2:61:a0:6e:18:ef:6e:48:82:0f:1d:
         15:ab:64:a3:93:8b:0b:85:f0:2f:95:52:50:ca:d8:09:57:84:
         a1:df:97:a9:5f:70:f5:34:12:91:bf:d1:84:4b:37:9e:53:81:
         53:76:ec:08:75:5c:49:8e:69:0d:95:2b:66:92:51:91:d3:b9:
         ef:ce:ba:df:88:cc:18:18:24:ae:f6:ea:3f:59:7c:96:88:95:
         66:10:e1:51:5b:22:cd:82:0d:b3:02:b8:a6:67:fc:05:2c:a2:
         ad:dd:8d:e9:bb:ab:d4:d2:87:57:c6:51:3f:a0:bc:e8:72:c3:
         dc:b1:b0:05:59:76:9f:d8:3f:d8:a0:c2:69:23:b6:2e:2c:d2:
         76:69:e1:ff:c7:87:6b:14:28:8c:2d:ab:8a:a9:24:a6:a8:11:
         81:7f:c9:9b:cf:4e:60:15:ea:6e:bb:ff:90:b6:ee:f0:95:2a:
         a8:21:1a:a0:02:32:90:66:f8:3f:b3:27:73:03:f6:a1:02:c0:
         58:e8:c4:68:67:60:ff:44:64:39:e6:16:25:97:6b:d4:39:de:
         4c:d3:c4:c8:16:f0:ab:90:f0:ef:15:80:85:30:27:4d:37:12:
         73:0e:e6:a1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8QTFb0OJnxqzu3OoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTZkNzEzNzYtZThmYS00ZTZjLWJiZjQtOTc4NzA4ZDg4
NjQ1MB4XDTI2MDkwNDEzNDIxMloXDTI2MTEyODA4MjkyMlowLzEtMCsGA1UEAxMk
MGMwMzE4N2UtM2YzZC00YTM3LWFjMjgtMTY4MjgzODRkZWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwJXrHXqvjmDJyaEcD/MNox84OBzu96GsxEN
H4Mgayu6v7v5WmNN7gjTP4GwQU2MQA8o06QxG8BMdHdGbMXsgJiaiADXJGtQUE19
LviECeNVAtJdgFw68QbNcxIxSqETKdqiRDb5j16zhg7JXABiA5oNIYusd15xRjAT
AUkz0g/WlDtQYuUTeQgIdjXHvhgmPMTUpPEYfA7FXRw8VrlLB4VBifJ15Npgsbiq
WbbFyJoexc/EgMu7GzVXFk3GOcpXb5rf48w8xiQ0VNMcYKBwrEp1izy0QqIq1eEf
UF+UG+dD10t4rSdyPEjBflxbDhJDxpaifzwaK7EJodPhLsze4QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOFKQi5nJ/vmdqA0fNUr3aeNB90NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xNmQ3
MTM3Ni1lOGZhLTRlNmMtYmJmNC05Nzg3MDhkODg2NDUvYjE1NTQxY2ItMDY4YS0z
OGRlLWI3OWQtYjI4NTIzMjBhMjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMTZkNzEzNzYtZThmYS00ZTZjLWJi
ZjQtOTc4NzA4ZDg4NjQ1LzE2ZDcxMzc2LWU4ZmEtNGU2Yy1iYmY0LTk3ODcwOGQ4
ODY0NS5jcmwwHwYDVR0jBBgwFoAUTx90HLUFfhDIUx/htNVEKcFEsKYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8xNmQ3MTM3Ni1lOGZhLTRlNmMtYmJmNC05Nzg3
MDhkODg2NDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgL05gD2
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHnJxew7BvdjQxnBPEycYxHYyxT/suDemtyiYaBuGO9uSIIPHRWr
ZKOTiwuF8C+VUlDK2AlXhKHfl6lfcPU0EpG/0YRLN55TgVN27Ah1XEmOaQ2VK2aS
UZHTue/Out+IzBgYJK726j9ZfJaIlWYQ4VFbIs2CDbMCuKZn/AUsoq3djem7q9TS
h1fGUT+gvOhyw9yxsAVZdp/YP9igwmkjti4s0nZp4f/Hh2sUKIwtq4qpJKaoEYF/
yZvPTmAV6m67/5C27vCVKqghGqACMpBm+D+zJ3MD9qECwFjoxGhnYP9EZDnmFiWX
a9Q53kzTxMgW8KuQ8O8VgIUwJ003EnMO5qE=
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:20:54 2026 by rpki-client