Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/a306220d-1b92-3ea3-97db-9adba304990f.roa
File:                     a306220d-1b92-3ea3-97db-9adba304990f.roa (raw, json)
Hash identifier:          HxD2lqGZdxqg8c2N8aPusl/5p2Z13LZ5ZULJZMvYVVM=
Subject key identifier:   36:A2:0A:5D:6A:F1:32:72:A9:A4:49:72:05:35:48:30:BB:C2:BD:18
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584E86F4E7CF18D72339BD4FDC80
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/a306220d-1b92-3ea3-97db-9adba304990f.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     16509
IP address blocks:        2602:28c:2659::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:e7:cf:18:d7:23:39:bd:4f:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=b5f9bc7b-1b3f-499a-a446-2adbc9184315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0a:10:9c:24:d9:6e:d1:10:28:f7:0b:7f:db:
                    5b:1e:ff:7f:56:92:ef:56:7f:3f:2e:07:74:49:59:
                    fc:ac:cd:bd:b1:24:d8:2a:64:a3:26:e4:c9:e9:ea:
                    71:75:04:74:2f:f0:d2:00:88:89:9d:1d:0e:32:cf:
                    4d:46:2c:5b:1c:6c:68:e0:e6:5d:95:04:a1:db:ff:
                    c3:79:aa:1e:9b:43:a6:66:a9:2d:48:3d:df:aa:c8:
                    bc:1c:c0:69:0b:61:04:8c:f3:0b:13:af:08:6b:e5:
                    65:2e:4c:8d:e0:73:a4:42:2e:3b:3e:84:99:d9:f1:
                    fa:c9:5b:c8:3d:c1:ea:5a:bf:1e:00:bf:d4:40:ae:
                    5f:66:d1:64:41:f2:43:1f:5a:de:c4:74:3c:e9:1f:
                    0a:f9:d6:2b:be:5d:6c:58:21:47:90:d9:27:95:5a:
                    0a:e2:3e:63:f4:85:c3:40:59:04:77:73:79:2b:e5:
                    ac:0c:2c:c4:92:26:12:b2:85:f7:f6:12:59:a1:b1:
                    a7:55:03:ee:c9:58:80:f0:92:0b:dd:23:0c:98:26:
                    a8:6c:63:4d:57:26:95:28:09:d2:56:43:c6:62:61:
                    c1:b9:67:9c:16:74:97:3a:97:f0:6f:34:2f:19:92:
                    6d:0a:3d:f3:94:46:48:2e:94:1d:b3:73:8e:9d:a9:
                    28:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A2:0A:5D:6A:F1:32:72:A9:A4:49:72:05:35:48:30:BB:C2:BD:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/a306220d-1b92-3ea3-97db-9adba304990f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:28c:2659::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:7d:6e:9c:15:bf:6a:bb:9c:c4:f8:22:3c:9c:a3:b9:8f:f1:
         67:1d:86:c7:90:6d:8b:f4:b2:78:dc:c1:1e:9a:71:00:12:1d:
         74:8b:9c:4e:94:f7:78:3e:39:30:57:72:e7:43:d9:e1:e9:b5:
         37:8e:45:11:23:5b:9d:3f:1b:9c:5c:a5:d0:9d:eb:a8:a1:48:
         52:2b:aa:7d:e3:12:73:52:e2:18:74:b6:8a:67:48:1a:7b:f4:
         35:5b:d1:77:c3:f3:21:cc:fd:c3:4c:be:80:e0:2d:9e:60:35:
         94:98:da:8c:7d:f2:65:39:d3:bf:33:0b:cd:37:fe:18:5d:3c:
         ec:a2:bd:b0:10:16:5b:62:98:82:37:fa:f6:6a:b3:cb:92:4f:
         fd:c1:a6:18:66:23:4f:5e:be:87:23:b5:b8:2a:36:78:d0:82:
         d1:5e:63:48:03:8a:92:80:57:0c:84:95:c1:cf:c0:4f:bc:76:
         9d:f2:4e:bf:0a:89:8b:87:56:d7:60:cd:26:61:5b:a6:11:27:
         44:d7:03:bc:1e:35:35:6d:19:52:0a:c6:89:57:7d:3a:51:73:
         c9:7c:5d:83:3f:05:ff:88:64:83:93:05:4d:8c:ec:45:06:be:
         c5:d6:93:d1:2e:64:3c:63:94:f7:b9:4d:4a:15:51:af:77:77:
         ef:a1:25:ca
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6G9OfPGNcjOb1P3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl
NzUxMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk
YjVmOWJjN2ItMWIzZi00OTlhLWE0NDYtMmFkYmM5MTg0MzE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQoQnCTZbtEQKPcLf9tbHv9/VpLvVn8/Lgd0
SVn8rM29sSTYKmSjJuTJ6epxdQR0L/DSAIiJnR0OMs9NRixbHGxo4OZdlQSh2//D
eaoem0OmZqktSD3fqsi8HMBpC2EEjPMLE68Ia+VlLkyN4HOkQi47PoSZ2fH6yVvI
PcHqWr8eAL/UQK5fZtFkQfJDH1rexHQ86R8K+dYrvl1sWCFHkNknlVoK4j5j9IXD
QFkEd3N5K+WsDCzEkiYSsoX39hJZobGnVQPuyViA8JIL3SMMmCaobGNNVyaVKAnS
VkPGYmHBuWecFnSXOpfwbzQvGZJtCj3zlEZILpQds3OOnakoywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDaiCl1q8TJyqaRJcgU1SDC7wr0YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2
NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvYTMwNjIyMGQtMWI5Mi0z
ZWEzLTk3ZGItOWFkYmEzMDQ5OTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh
MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz
ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj
NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICjCZZ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABh9bpwVv2q7nMT4Ijyco7mP8WcdhseQbYv0snjcwR6acQASHXSL
nE6U93g+OTBXcudD2eHptTeORREjW50/G5xcpdCd66ihSFIrqn3jEnNS4hh0topn
SBp79DVb0XfD8yHM/cNMvoDgLZ5gNZSY2ox98mU5078zC803/hhdPOyivbAQFlti
mII3+vZqs8uST/3BphhmI09evocjtbgqNnjQgtFeY0gDipKAVwyElcHPwE+8dp3y
Tr8KiYuHVtdgzSZhW6YRJ0TXA7weNTVtGVIKxolXfTpRc8l8XYM/Bf+IZIOTBU2M
7EUGvsXWk9EuZDxjlPe5TUoVUa93d++hJco=
-----END CERTIFICATE-----
Generated at Tue Jul 21 15:59:39 2026 by rpki-client