Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5579c00f-c387-3c5c-8b0a-e3f9b59ec055.roa
File:                     5579c00f-c387-3c5c-8b0a-e3f9b59ec055.roa (raw, json)
Hash identifier:          PB1G6fkvdIwhNjKP2VwoANjbtfIOB8UMlq7guVsX7zY=
Subject key identifier:   4B:96:C5:72:3F:03:91:86:E2:0C:FB:34:13:76:80:91:9F:26:1E:3B
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584E7634C81FD8373A66FDDDDA20
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5579c00f-c387-3c5c-8b0a-e3f9b59ec055.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     33208
IP address blocks:        2607:9a80::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:c8:1f:d8:37:3a:66:fd:dd:da:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=846cfc9f-682c-40b3-92e8-5205506adda2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:31:1c:61:7c:56:cc:71:c9:ff:12:ee:81:37:
                    40:a6:44:af:e7:5d:7d:9a:07:6c:a4:ad:e3:2c:e9:
                    55:e6:d5:0f:a8:97:76:7a:e4:3e:14:cc:81:4c:de:
                    39:e0:8f:fe:82:fb:9a:c0:98:9d:21:82:ce:6e:e8:
                    5e:a8:e7:75:59:94:ef:b1:66:45:57:a1:7c:9f:c8:
                    71:a5:96:5f:21:0e:6c:de:72:9b:12:b5:c7:f2:36:
                    47:b3:07:b4:4d:1c:1b:61:53:2f:ee:3a:5e:45:65:
                    f0:85:ba:9a:64:7f:cc:bb:a1:f2:d1:13:6f:52:a7:
                    c7:50:c0:ec:22:2d:e5:e1:0f:f9:9d:15:47:e5:ed:
                    78:2c:44:18:63:fe:7d:c5:a2:39:ac:39:23:d8:4b:
                    68:8c:23:4a:54:e8:0f:b3:a0:e6:94:5c:7a:3b:fe:
                    11:b8:fc:07:81:60:e0:10:1e:c6:76:62:45:5f:fe:
                    8d:af:a3:75:45:6f:53:54:a1:c8:df:3e:d0:05:1d:
                    ed:64:4f:5d:16:94:4c:14:6c:5f:90:cf:71:d8:58:
                    ef:28:65:56:9a:db:7a:bf:bc:e3:bb:bd:0e:fd:be:
                    43:52:1d:0a:e5:66:5e:01:32:9c:61:9e:cd:2c:14:
                    31:6c:28:0d:21:a6:0e:6d:bf:32:9c:d7:2a:2f:d4:
                    c0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:96:C5:72:3F:03:91:86:E2:0C:FB:34:13:76:80:91:9F:26:1E:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5579c00f-c387-3c5c-8b0a-e3f9b59ec055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:88:bc:ae:0e:97:03:18:6a:77:63:9d:2a:ff:bc:1e:d5:60:
         75:d6:f5:78:bb:3b:33:d2:5c:c1:da:cc:35:64:bd:c5:29:69:
         5a:34:3a:4b:fc:fd:95:da:1e:d3:7f:86:9c:d9:85:2e:f7:3d:
         e0:9d:87:1c:ff:47:bb:d7:d8:ff:36:95:0e:1a:12:2f:7a:8a:
         d9:8e:84:86:b8:4b:d2:a7:e1:16:3b:0d:aa:ef:d8:97:a2:81:
         55:a9:ce:dd:69:cc:41:bc:f3:95:84:b3:b4:03:5a:56:db:2a:
         fb:92:44:d5:98:46:81:31:46:d7:01:41:07:4d:2b:df:25:cc:
         4a:61:ea:2e:9d:f7:e2:63:12:a4:d7:69:68:3f:86:4b:88:33:
         82:eb:ed:e9:fd:bc:d0:c6:c1:9a:87:23:73:7a:88:d9:8d:e4:
         2b:74:d5:f6:c1:d7:f0:b5:a3:63:1d:cb:9e:7b:0e:05:4e:da:
         32:6e:3a:fa:0f:85:af:35:f9:f2:5d:ac:c8:2c:d6:a2:1e:a3:
         74:53:20:34:bb:fb:15:42:e3:28:83:fc:7e:1b:45:9a:49:ad:
         21:cb:c0:da:4e:52:66:6e:1a:bd:d6:47:bc:3f:83:ac:4e:76:
         58:f4:02:c6:8f:ce:68:86:50:46:f9:88:d1:9d:d5:e8:dc:03:
         97:e5:15:79
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE52NMgf2Dc6Zv3d2iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5
NzdmMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk
ODQ2Y2ZjOWYtNjgyYy00MGIzLTkyZTgtNTIwNTUwNmFkZGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DEcYXxWzHHJ/xLugTdApkSv5119mgdspK3j
LOlV5tUPqJd2euQ+FMyBTN454I/+gvuawJidIYLObuheqOd1WZTvsWZFV6F8n8hx
pZZfIQ5s3nKbErXH8jZHswe0TRwbYVMv7jpeRWXwhbqaZH/Mu6Hy0RNvUqfHUMDs
Ii3l4Q/5nRVH5e14LEQYY/59xaI5rDkj2EtojCNKVOgPs6DmlFx6O/4RuPwHgWDg
EB7GdmJFX/6Nr6N1RW9TVKHI3z7QBR3tZE9dFpRMFGxfkM9x2FjvKGVWmtt6v7zj
u70O/b5DUh0K5WZeATKcYZ7NLBQxbCgNIaYObb8ynNcqL9TAvQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEuWxXI/A5GG4gz7NBN2gJGfJh47MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm
ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvNTU3OWMwMGYtYzM4Ny0z
YzVjLThiMGEtZTNmOWI1OWVjMDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj
MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5
OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk
ZDQyOTk3N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeagDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBqiLyuDpcDGGp3Y50q/7we1WB11vV4uzsz0lzB2sw1ZL3FKWlaNDpL
/P2V2h7Tf4ac2YUu9z3gnYcc/0e719j/NpUOGhIveorZjoSGuEvSp+EWOw2q79iX
ooFVqc7dacxBvPOVhLO0A1pW2yr7kkTVmEaBMUbXAUEHTSvfJcxKYeounffiYxKk
12loP4ZLiDOC6+3p/bzQxsGahyNzeojZjeQrdNX2wdfwtaNjHcueew4FTtoybjr6
D4WvNfnyXazILNaiHqN0UyA0u/sVQuMog/x+G0WaSa0hy8DaTlJmbhq91ke8P4Os
TnZY9ALGj85ohlBG+YjRndXo3AOX5RV5
-----END CERTIFICATE-----
Generated at Tue Jul 21 16:34:38 2026 by rpki-client