Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/ab49067f-5e99-3cae-8bc0-662f9e59df4f.roa
File:                     ab49067f-5e99-3cae-8bc0-662f9e59df4f.roa (raw, json)
Hash identifier:          qeF/Sf03GLRd8QZzQYG+muhTEXFQcMig9J+osKN4FT0=
Subject key identifier:   E6:F8:45:D1:B3:93:15:8E:32:35:42:01:AB:DB:D3:64:E4:78:87:47
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584E885A4829575C1803D593B0C0
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/ab49067f-5e99-3cae-8bc0-662f9e59df4f.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     393878
IP address blocks:        2607:9a80::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:48:29:57:5c:18:03:d5:93:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=7057c498-de1b-4476-a5e2-d8f85dac1329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e1:60:f1:cb:34:14:b3:b4:ad:b9:c6:56:b1:
                    c7:eb:84:95:fb:65:d2:cd:8e:92:c5:0c:a8:db:07:
                    7c:65:03:60:a4:a1:d2:63:94:c8:8a:e6:09:21:56:
                    27:8e:26:e2:9d:9c:15:86:c6:25:61:95:b8:1e:4c:
                    f4:8f:32:47:38:69:67:b7:2c:cc:80:3e:16:b6:6a:
                    a9:74:16:ca:d4:6d:23:0f:7b:c0:ef:5c:b3:1e:58:
                    cf:15:f0:0e:fa:3b:9a:bf:64:b2:a2:82:cc:02:70:
                    f5:24:65:44:bc:76:eb:4e:ab:29:95:89:9d:f3:bf:
                    83:8b:10:ad:b6:97:e8:17:3f:1d:18:28:3d:e4:bf:
                    7a:68:8a:e0:e7:eb:22:d7:6f:13:b7:e7:e1:74:dc:
                    7b:36:51:45:c2:2e:85:2f:57:b4:c3:90:3f:a3:f9:
                    e7:c6:0c:ac:29:20:f0:0f:6b:b0:cb:d2:a1:01:2e:
                    d3:80:dd:d2:19:ae:9e:51:0b:e7:05:b7:02:4c:53:
                    2c:66:b3:e0:58:f2:f6:d2:e2:6a:f7:d9:9f:ef:72:
                    fa:f3:81:d8:a9:cf:ce:80:8b:a1:e7:65:1a:b5:2d:
                    bd:69:43:75:01:93:26:20:65:e7:45:f6:b0:75:e5:
                    f7:63:41:38:d7:5e:7f:ce:a3:54:3a:46:7c:0f:10:
                    87:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F8:45:D1:B3:93:15:8E:32:35:42:01:AB:DB:D3:64:E4:78:87:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/ab49067f-5e99-3cae-8bc0-662f9e59df4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:33:a1:b5:4b:8c:e7:56:78:b9:ae:62:b6:2e:59:57:e6:71:
         54:13:db:18:a9:26:3d:92:f0:fb:2e:98:96:6c:c7:f8:9a:77:
         d6:fe:b9:dd:fd:90:11:d9:b4:84:7a:a2:ce:20:6f:75:3b:ae:
         65:d9:cf:5b:54:9e:ef:16:5a:52:71:d0:81:ae:05:47:75:78:
         73:cd:c2:08:a2:4a:b6:25:b8:4d:9c:4e:5e:5a:1f:fd:c3:00:
         dc:98:76:b4:4d:8b:13:c3:fe:3c:1f:a5:9c:b1:57:ae:51:dc:
         80:a1:67:98:df:be:72:8e:62:42:db:79:06:5a:6a:ed:e0:30:
         4d:e4:df:af:d1:fd:1a:6f:f6:32:bc:04:7e:e6:ab:f8:4e:e2:
         c0:64:87:45:41:7d:a2:8e:d8:1f:f8:88:63:f9:1f:36:2f:62:
         7d:be:26:f3:c4:8c:00:8f:2e:37:0c:34:4f:bd:28:b5:1b:39:
         66:b8:4b:18:5a:bc:47:0f:57:db:d0:22:b4:b6:cd:73:5e:5b:
         ec:64:b7:bc:4c:63:64:1c:7d:ce:34:7e:44:60:ca:ce:2e:4d:
         ae:ab:d1:fe:f4:31:6c:c9:f9:87:6f:00:eb:c0:55:60:2c:9f:
         fb:fb:f5:28:c8:ea:41:dd:2f:5e:50:4f:fa:20:92:3a:e7:f4:
         45:78:69:d3
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6IWkgpV1wYA9WTsMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5
NzdmMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk
NzA1N2M0OTgtZGUxYi00NDc2LWE1ZTItZDhmODVkYWMxMzI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuFg8cs0FLO0rbnGVrHH64SV+2XSzY6SxQyo
2wd8ZQNgpKHSY5TIiuYJIVYnjibinZwVhsYlYZW4Hkz0jzJHOGlntyzMgD4Wtmqp
dBbK1G0jD3vA71yzHljPFfAO+juav2SyooLMAnD1JGVEvHbrTqsplYmd87+DixCt
tpfoFz8dGCg95L96aIrg5+si128Tt+fhdNx7NlFFwi6FL1e0w5A/o/nnxgysKSDw
D2uwy9KhAS7TgN3SGa6eUQvnBbcCTFMsZrPgWPL20uJq99mf73L684HYqc/OgIuh
52UatS29aUN1AZMmIGXnRfawdeX3Y0E4115/zqNUOkZ8DxCHIwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOb4RdGzkxWOMjVCAavb02TkeIdHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm
ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvYWI0OTA2N2YtNWU5OS0z
Y2FlLThiYzAtNjYyZjllNTlkZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj
MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5
OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk
ZDQyOTk3N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeagDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAwM6G1S4znVni5rmK2LllX5nFUE9sYqSY9kvD7LpiWbMf4mnfW/rnd
/ZAR2bSEeqLOIG91O65l2c9bVJ7vFlpScdCBrgVHdXhzzcIIokq2JbhNnE5eWh/9
wwDcmHa0TYsTw/48H6WcsVeuUdyAoWeY375yjmJC23kGWmrt4DBN5N+v0f0ab/Yy
vAR+5qv4TuLAZIdFQX2ijtgf+Ihj+R82L2J9vibzxIwAjy43DDRPvSi1GzlmuEsY
WrxHD1fb0CK0ts1zXlvsZLe8TGNkHH3ONH5EYMrOLk2uq9H+9DFsyfmHbwDrwFVg
LJ/7+/UoyOpB3S9eUE/6IJI65/RFeGnT
-----END CERTIFICATE-----
Generated at Tue Jul 21 16:34:06 2026 by rpki-client