Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/76f20a08-edc1-360f-b8e4-c62f8ebb677d.roa
File:                     76f20a08-edc1-360f-b8e4-c62f8ebb677d.roa (raw, json)
Hash identifier:          EjGXdRVkeE+NicB3igYTTunWTG3s9pXuD5bY86JICm4=
Subject key identifier:   A3:3F:F9:F3:27:95:1F:7D:AB:7D:8B:16:84:2E:67:DA:55:5E:2A:79
Certificate issuer:       /CN=d414bd1e-af01-4ff2-92ae-ece02a34cdb9
Certificate serial:       010D0C9F4328584B0746BB9570928A2EED5D5340
Authority key identifier: 16:0E:3F:D9:3C:76:D6:B7:2E:B4:AF:CB:5F:C8:99:38:12:AC:7A:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/76f20a08-edc1-360f-b8e4-c62f8ebb677d.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     26141
IP address blocks:        2607:a2c0::/32 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/d414bd1e-af01-4ff2-92ae-ece02a34cdb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/d414bd1e-af01-4ff2-92ae-ece02a34cdb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:bb:95:70:92:8a:2e:ed:5d:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d414bd1e-af01-4ff2-92ae-ece02a34cdb9
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=428d9746-22f9-4050-a66e-85911854fed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:04:e8:25:2f:ea:28:a0:ea:df:66:4a:67:1c:
                    ba:18:c9:55:31:9a:8b:9d:54:7f:86:17:ab:cf:5a:
                    9e:8d:bb:a6:d6:1b:a4:b1:dd:81:88:8c:02:82:26:
                    ba:7f:86:a5:d3:e7:3a:24:08:b0:d5:f8:33:b2:86:
                    f7:e4:2f:f0:3e:71:c3:3f:3a:e0:b3:40:ca:6f:38:
                    53:a6:6f:85:75:97:53:47:84:68:af:29:a2:cf:26:
                    9e:32:7a:97:4a:ef:f2:09:05:63:75:72:3b:28:7c:
                    b3:a9:a0:a4:54:60:76:00:a2:32:c6:b5:3d:12:83:
                    6e:36:08:4f:65:0e:89:89:8f:b2:98:f9:3e:43:17:
                    c9:1b:ca:86:fa:48:a4:ff:87:4a:b8:28:ab:58:b5:
                    87:ea:14:0e:d9:e0:51:63:54:e7:57:ed:2a:0a:40:
                    b3:16:57:89:d7:7b:42:1e:b6:10:97:89:03:ee:b5:
                    77:d3:28:f3:3d:6b:b3:53:d4:cf:7f:a6:10:1d:08:
                    ac:a3:61:2f:83:a2:65:fa:0c:4e:e5:b0:c4:d4:c6:
                    af:21:cd:26:ca:c5:2e:05:ea:76:9d:7a:65:bf:9c:
                    cc:9b:9f:42:59:4e:c2:a1:9d:10:53:d5:4c:66:f7:
                    56:75:a4:12:85:9f:88:82:c7:91:87:d5:d4:d8:21:
                    9b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3F:F9:F3:27:95:1F:7D:AB:7D:8B:16:84:2E:67:DA:55:5E:2A:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/76f20a08-edc1-360f-b8e4-c62f8ebb677d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9/d414bd1e-af01-4ff2-92ae-ece02a34cdb9.crl

            X509v3 Authority Key Identifier:
                keyid:16:0E:3F:D9:3C:76:D6:B7:2E:B4:AF:CB:5F:C8:99:38:12:AC:7A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d414bd1e-af01-4ff2-92ae-ece02a34cdb9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a2c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:d6:40:e8:39:e1:09:53:aa:b2:3e:f2:31:34:80:3f:a7:dd:
         62:75:b2:6c:c0:fa:63:47:d0:8c:61:93:2e:8c:de:10:37:30:
         58:d5:89:c2:0c:df:4f:04:c0:be:2d:60:de:94:7c:ea:ac:dc:
         93:85:56:e3:1f:f6:30:77:e3:cc:51:8c:8d:36:77:e4:d4:38:
         98:89:9f:03:a3:d0:b0:42:81:1e:03:60:ee:b5:6a:13:42:bb:
         83:8c:88:89:24:0c:33:7a:55:9d:3c:ac:bc:2e:d0:55:64:61:
         1f:9a:f0:82:99:07:a4:a4:7c:0f:16:f0:d9:91:f3:62:e7:f0:
         af:ff:c2:18:e5:28:8d:2d:1a:ce:36:ed:78:0e:5b:81:84:ed:
         2c:4d:a1:23:a9:5d:17:53:3f:94:34:cf:01:84:0d:cc:dd:16:
         e9:5e:1f:69:ba:31:66:fd:fd:d8:41:51:d2:fd:62:47:66:ab:
         85:a2:3e:40:3b:74:10:aa:a7:fe:de:1c:46:9a:35:14:a8:29:
         81:ed:a4:69:7a:d8:6e:72:7e:d4:1f:9a:7e:90:2f:53:97:e3:
         04:62:bb:cd:95:bc:11:23:14:6e:c2:a9:58:2f:61:41:23:bd:
         0d:87:6c:05:6f:cf:fc:8b:43:1e:05:f9:5d:93:a9:43:54:8a:
         33:fd:11:14
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsHRruVcJKKLu1dU0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQxNGJkMWUtYWYwMS00ZmYyLTkyYWUtZWNlMDJhMzRj
ZGI5MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk
NDI4ZDk3NDYtMjJmOS00MDUwLWE2NmUtODU5MTE4NTRmZWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wToJS/qKKDq32ZKZxy6GMlVMZqLnVR/hher
z1qejbum1huksd2BiIwCgia6f4al0+c6JAiw1fgzsob35C/wPnHDPzrgs0DKbzhT
pm+FdZdTR4RorymizyaeMnqXSu/yCQVjdXI7KHyzqaCkVGB2AKIyxrU9EoNuNghP
ZQ6JiY+ymPk+QxfJG8qG+kik/4dKuCirWLWH6hQO2eBRY1TnV+0qCkCzFleJ13tC
HrYQl4kD7rV30yjzPWuzU9TPf6YQHQiso2Evg6Jl+gxO5bDE1MavIc0mysUuBep2
nXplv5zMm59CWU7CoZ0QU9VMZvdWdaQShZ+IgseRh9XU2CGbewIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKM/+fMnlR99q32LFoQuZ9pVXip5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNDE0
YmQxZS1hZjAxLTRmZjItOTJhZS1lY2UwMmEzNGNkYjkvNzZmMjBhMDgtZWRjMS0z
NjBmLWI4ZTQtYzYyZjhlYmI2NzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDQxNGJkMWUtYWYwMS00ZmYyLTky
YWUtZWNlMDJhMzRjZGI5L2Q0MTRiZDFlLWFmMDEtNGZmMi05MmFlLWVjZTAyYTM0
Y2RiOS5jcmwwHwYDVR0jBBgwFoAUFg4/2Tx21rcutK/LX8iZOBKsegkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kNDE0YmQxZS1hZjAxLTRmZjItOTJhZS1lY2Uw
MmEzNGNkYjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeiwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA81kDoOeEJU6qyPvIxNIA/p91idbJswPpjR9CMYZMujN4QNzBY1YnC
DN9PBMC+LWDelHzqrNyThVbjH/Ywd+PMUYyNNnfk1DiYiZ8Do9CwQoEeA2DutWoT
QruDjIiJJAwzelWdPKy8LtBVZGEfmvCCmQekpHwPFvDZkfNi5/Cv/8IY5SiNLRrO
Nu14DluBhO0sTaEjqV0XUz+UNM8BhA3M3RbpXh9pujFm/f3YQVHS/WJHZquFoj5A
O3QQqqf+3hxGmjUUqCmB7aRpethucn7UH5p+kC9Tl+MEYrvNlbwRIxRuwqlYL2FB
I70Nh2wFb8/8i0MeBfldk6lDVIoz/REU
-----END CERTIFICATE-----
Generated at Fri Oct 10 22:24:16 2025 by rpki-client