Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/0579ea28-e99c-38e8-9924-bbf6558e94b0.roa
File:                     0579ea28-e99c-38e8-9924-bbf6558e94b0.roa (raw, json)
Hash identifier:          MEk7tae7OIWGUz0wCDR3hc5rRQk1zdwuijPFuW/bi1M=
Subject key identifier:   5F:EA:83:CD:D9:3E:33:2A:09:03:BE:F0:C5:81:42:C4:DC:08:9C:CA
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584E86F50A7BF72558867AF423C0
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/0579ea28-e99c-38e8-9924-bbf6558e94b0.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     16509
IP address blocks:        2602:28c:2655::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f5:0a:7b:f7:25:58:86:7a:f4:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=0ea40b35-0ac0-4706-a087-310d0b5a1430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cc:ad:1b:73:95:0d:92:38:08:a2:14:99:45:
                    7c:f2:6b:6a:38:6c:1c:ab:65:26:8a:3c:bf:6a:54:
                    f5:18:9b:db:2f:a1:c1:25:cf:a6:b0:d6:ce:7f:cd:
                    dd:86:70:99:6a:6c:b5:09:7e:38:82:ac:80:3f:f1:
                    62:a6:c0:82:6a:8d:0b:37:69:56:da:f9:15:1e:44:
                    d4:c1:37:f7:27:8a:d5:ac:27:58:77:fb:73:82:86:
                    31:ce:0f:49:d4:3d:58:af:1f:79:ea:8a:cf:84:d1:
                    51:65:48:40:7d:f5:e1:7e:dc:4d:15:12:8f:5d:26:
                    da:c7:ff:05:cf:79:4d:cd:83:86:a8:c6:ee:16:5a:
                    71:88:0e:21:6a:59:47:46:99:f5:e6:95:91:59:3d:
                    56:1f:d4:2e:e3:28:6d:06:1a:49:82:0f:ac:06:7c:
                    70:86:0e:33:98:a2:0e:0b:dd:d5:4c:01:74:a3:e8:
                    4b:27:5e:88:60:39:d7:5a:6a:f4:5e:87:98:f4:f5:
                    cf:62:fb:cd:5d:00:01:23:55:d0:67:81:e6:7a:b3:
                    3f:8f:38:f4:06:18:a2:8e:af:f3:eb:34:87:d0:87:
                    3f:8e:93:df:56:65:28:3c:f6:1e:91:29:50:ce:d8:
                    aa:36:74:f9:8d:0b:74:63:c0:29:d4:ee:53:6a:c1:
                    5a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EA:83:CD:D9:3E:33:2A:09:03:BE:F0:C5:81:42:C4:DC:08:9C:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/0579ea28-e99c-38e8-9924-bbf6558e94b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:28c:2655::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:36:9c:cc:60:4c:87:95:00:25:c1:34:1f:26:3c:e6:59:da:
         a5:85:0d:b7:61:d9:d4:dd:0c:8e:7f:7b:b5:80:40:fe:ea:21:
         de:4d:aa:1e:da:2a:96:c2:0f:3d:73:dd:43:9d:81:aa:65:38:
         82:8d:01:ce:63:a1:56:ef:7d:97:88:b9:c5:bd:2c:c2:15:06:
         12:6a:bc:15:78:7e:c4:81:a0:c1:69:aa:f1:0f:56:b0:f8:0a:
         df:b4:73:aa:e8:71:8e:69:f8:2b:61:48:1e:2b:75:f0:37:e7:
         a0:d0:0e:85:3d:1d:f6:aa:c2:03:76:ee:81:f4:a4:7d:4e:0d:
         96:a6:87:86:79:b6:ed:41:4c:c6:22:89:56:7c:59:7e:5c:6f:
         d4:36:85:a4:2a:2a:6a:08:59:17:ac:2b:aa:55:da:95:b3:1f:
         b4:ae:82:f3:2f:1c:7b:45:37:40:50:34:eb:56:31:9d:6d:33:
         64:2d:c9:55:5d:c4:89:54:25:e0:98:7b:ef:5a:c6:17:04:87:
         e9:c3:d7:8f:4f:64:9a:23:77:56:7e:06:10:27:d2:a8:f8:8f:
         b8:90:c1:ee:73:8b:6a:d1:93:50:28:59:38:fc:a6:6b:05:4e:
         4e:48:9e:8d:d4:8a:1a:b1:ce:1c:17:61:27:c4:e7:ee:8f:44:
         3d:99:23:47
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6G9Qp79yVYhnr0I8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl
NzUxMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk
MGVhNDBiMzUtMGFjMC00NzA2LWEwODctMzEwZDBiNWExNDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisytG3OVDZI4CKIUmUV88mtqOGwcq2Umijy/
alT1GJvbL6HBJc+msNbOf83dhnCZamy1CX44gqyAP/FipsCCao0LN2lW2vkVHkTU
wTf3J4rVrCdYd/tzgoYxzg9J1D1Yrx956orPhNFRZUhAffXhftxNFRKPXSbax/8F
z3lNzYOGqMbuFlpxiA4hallHRpn15pWRWT1WH9Qu4yhtBhpJgg+sBnxwhg4zmKIO
C93VTAF0o+hLJ16IYDnXWmr0XoeY9PXPYvvNXQABI1XQZ4HmerM/jzj0Bhiijq/z
6zSH0Ic/jpPfVmUoPPYekSlQztiqNnT5jQt0Y8Ap1O5TasFawwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF/qg83ZPjMqCQO+8MWBQsTcCJzKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2
NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvMDU3OWVhMjgtZTk5Yy0z
OGU4LTk5MjQtYmJmNjU1OGU5NGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh
MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz
ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj
NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICjCZV
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEU2nMxgTIeVACXBNB8mPOZZ2qWFDbdh2dTdDI5/e7WAQP7qId5N
qh7aKpbCDz1z3UOdgaplOIKNAc5joVbvfZeIucW9LMIVBhJqvBV4fsSBoMFpqvEP
VrD4Ct+0c6rocY5p+CthSB4rdfA356DQDoU9HfaqwgN27oH0pH1ODZamh4Z5tu1B
TMYiiVZ8WX5cb9Q2haQqKmoIWResK6pV2pWzH7SugvMvHHtFN0BQNOtWMZ1tM2Qt
yVVdxIlUJeCYe+9axhcEh+nD149PZJojd1Z+BhAn0qj4j7iQwe5zi2rRk1AoWTj8
pmsFTk5Ino3UihqxzhwXYSfE5+6PRD2ZI0c=
-----END CERTIFICATE-----
Generated at Tue Jul 21 15:58:34 2026 by rpki-client