Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/d6139039-6fc7-37b5-b79d-4f80d949e210.roa
File:                     d6139039-6fc7-37b5-b79d-4f80d949e210.roa (raw, json)
Hash identifier:          7CCqriug5BU1DFuGDiE6iDLqQmkx0gSRn33GMlb1oQo=
Subject key identifier:   4E:2D:8E:F0:AD:A3:3E:81:8A:EC:AE:EA:B4:8A:41:D1:F7:77:79:EA
Certificate issuer:       /CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
Certificate serial:       010D0C9F4328584EA7925B9349584F5C099C6800
Authority key identifier: 10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/d6139039-6fc7-37b5-b79d-4f80d949e210.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     2381
IP address blocks:        2001:4e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:5b:93:49:58:4f:5c:09:9c:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fda0e10-f6bf-4c23-bffb-d4a9a7352355
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=59077e8b-f6f7-4d02-b679-02037722c4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f0:97:0b:bb:bf:17:2b:c6:71:d6:7c:6d:6d:
                    b5:90:d8:f0:5e:d7:50:61:96:00:4e:de:bc:dc:53:
                    4c:e7:41:54:db:e6:41:44:1f:6e:a6:52:c4:c8:43:
                    0e:56:86:b1:b0:4d:e2:d9:b6:ee:15:df:db:e9:f5:
                    b9:8c:43:e8:19:35:ef:73:64:00:11:8f:89:62:f2:
                    13:54:a1:22:95:7e:eb:72:e2:23:a4:2e:22:69:e6:
                    4a:9c:7d:7a:95:b3:35:f3:50:a6:9f:9e:4c:fd:e1:
                    d3:03:27:99:91:0a:1b:53:38:dd:d0:dc:43:d1:25:
                    32:97:9f:4b:29:d2:fe:ba:7c:60:17:56:27:0e:e5:
                    34:c3:dc:99:36:be:d9:59:07:fc:83:b7:7f:38:44:
                    e2:30:b5:e7:2e:57:5c:26:46:25:75:07:72:7c:73:
                    1c:2b:4b:93:77:6f:8a:f2:c9:54:da:91:ca:86:6f:
                    33:5e:d4:49:c5:6a:4f:e0:6d:81:d2:f9:45:44:d4:
                    f7:b9:1e:85:43:90:65:3d:6f:53:20:97:a7:46:10:
                    66:e6:dd:88:e8:66:a4:ce:e1:41:28:ba:56:dc:34:
                    a2:e1:4d:4e:54:e7:9e:25:bf:91:87:4c:cc:fe:39:
                    46:88:6f:e7:50:83:7f:ef:5b:92:94:e2:c3:ea:3f:
                    05:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2D:8E:F0:AD:A3:3E:81:8A:EC:AE:EA:B4:8A:41:D1:F7:77:79:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/d6139039-6fc7-37b5-b79d-4f80d949e210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.crl

            X509v3 Authority Key Identifier:
                keyid:10:52:7B:7E:B8:F7:A6:F4:07:6F:CF:CD:5A:3F:12:E3:1D:D2:2C:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8fda0e10-f6bf-4c23-bffb-d4a9a7352355.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4e0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:7b:ba:31:11:ed:4b:98:9f:25:c9:ad:7c:0b:2e:6a:95:ba:
         91:67:e1:4d:0d:be:22:87:c0:27:dd:14:fc:05:75:7d:a1:3b:
         0d:5e:a9:80:2f:21:47:fa:6f:d0:19:3f:25:e5:47:78:da:00:
         98:b5:2c:ca:19:5e:af:7f:7e:71:95:08:02:da:a4:e7:67:0f:
         83:c2:cf:db:d6:72:2b:9e:20:f1:6e:aa:9d:a6:42:20:19:f0:
         f3:8f:08:f5:05:b6:61:1a:5b:09:8a:34:3e:86:a3:7c:31:4f:
         bb:78:7c:f9:f9:37:b0:db:4f:9e:cf:d3:e6:19:b2:d4:9f:31:
         cf:26:5a:ec:09:be:5a:be:82:1e:41:cf:59:eb:e1:c9:68:ec:
         15:ba:06:29:28:7c:3a:c6:04:e5:75:45:99:8b:d4:77:60:7a:
         e7:03:f1:9d:d5:e5:c6:58:ae:55:2c:79:a1:64:c0:2f:37:55:
         cb:ea:3e:cd:42:0f:a7:9a:9a:6c:9b:73:23:8c:99:d8:81:3b:
         b8:7e:9f:79:6e:ca:8b:5e:4d:4e:ea:23:8f:05:29:07:84:8a:
         cb:72:17:48:0e:43:ba:73:3e:35:16:4d:42:f0:a4:9e:79:78:
         0a:d2:2a:01:e3:34:47:e6:79:30:2a:19:4f:97:4d:9c:58:51:
         c6:81:f2:cb
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkluTSVhPXAmcaAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGZkYTBlMTAtZjZiZi00YzIzLWJmZmItZDRhOWE3MzUy
MzU1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NTkwNzdlOGItZjZmNy00ZDAyLWI2NzktMDIwMzc3MjJjNGFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvCXC7u/FyvGcdZ8bW21kNjwXtdQYZYATt68
3FNM50FU2+ZBRB9uplLEyEMOVoaxsE3i2bbuFd/b6fW5jEPoGTXvc2QAEY+JYvIT
VKEilX7rcuIjpC4iaeZKnH16lbM181Cmn55M/eHTAyeZkQobUzjd0NxD0SUyl59L
KdL+unxgF1YnDuU0w9yZNr7ZWQf8g7d/OETiMLXnLldcJkYldQdyfHMcK0uTd2+K
8slU2pHKhm8zXtRJxWpP4G2B0vlFRNT3uR6FQ5BlPW9TIJenRhBm5t2I6GakzuFB
KLpW3DSi4U1OVOeeJb+Rh0zM/jlGiG/nUIN/71uSlOLD6j8FHwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFE4tjvCtoz6Biuyu6rSKQdH3d3nqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZmRh
MGUxMC1mNmJmLTRjMjMtYmZmYi1kNGE5YTczNTIzNTUvZDYxMzkwMzktNmZjNy0z
N2I1LWI3OWQtNGY4MGQ5NDllMjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGZkYTBlMTAtZjZiZi00YzIzLWJm
ZmItZDRhOWE3MzUyMzU1LzhmZGEwZTEwLWY2YmYtNGMyMy1iZmZiLWQ0YTlhNzM1
MjM1NS5jcmwwHwYDVR0jBBgwFoAUEFJ7frj3pvQHb8/NWj8S4x3SLMwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZmRhMGUxMC1mNmJmLTRjMjMtYmZmYi1kNGE5
YTczNTIzNTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEE4DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBXe7oxEe1LmJ8lya18Cy5qlbqRZ+FNDb4ih8An3RT8BXV9oTsNXqmA
LyFH+m/QGT8l5Ud42gCYtSzKGV6vf35xlQgC2qTnZw+Dws/b1nIrniDxbqqdpkIg
GfDzjwj1BbZhGlsJijQ+hqN8MU+7eHz5+Tew20+ez9PmGbLUnzHPJlrsCb5avoIe
Qc9Z6+HJaOwVugYpKHw6xgTldUWZi9R3YHrnA/Gd1eXGWK5VLHmhZMAvN1XL6j7N
Qg+nmppsm3MjjJnYgTu4fp95bsqLXk1O6iOPBSkHhIrLchdIDkO6cz41Fk1C8KSe
eXgK0ioB4zRH5nkwKhlPl02cWFHGgfLL
-----END CERTIFICATE-----
Generated at Wed Jul 29 15:01:51 2026 by rpki-client