Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/d60bf23b-d6d2-3882-94c7-ef5be712650a.roa
File:                     d60bf23b-d6d2-3882-94c7-ef5be712650a.roa (raw, json)
Hash identifier:          ftp28ygE1anlCD/IdbTHiw015FV9rdg/n1UFf10c9Bk=
Subject key identifier:   67:88:DD:18:9F:5F:E5:ED:B7:59:1C:4D:AF:D6:62:CA:1F:CB:25:F6
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F4328584E5D149DA196BD9583FB022F00
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/d60bf23b-d6d2-3882-94c7-ef5be712650a.roa
Signing time:             Thu 02 Jul 2026 09:00:12 +0000
ROA not before:           Thu 02 Jul 2026 09:00:12 +0000
ROA not after:            Wed 30 Sep 2026 09:00:12 +0000
asID:                     46407
IP address blocks:        2001:19f0:5404::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:14:9d:a1:96:bd:95:83:fb:02:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Jul  2 09:00:12 2026 GMT
            Not After : Sep 30 09:00:12 2026 GMT
        Subject: CN=a280a9ef-80d9-4019-8430-ecdaf194c76d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b5:e3:6d:1f:cb:65:08:dd:0f:f1:07:44:42:
                    bb:39:36:97:94:07:27:d3:a3:6f:7b:fd:c8:dd:12:
                    14:fc:1e:20:43:fc:f6:aa:3c:16:f9:93:02:ab:64:
                    2e:ba:19:3d:c2:4c:7b:97:29:9c:50:f1:65:bc:60:
                    de:d3:be:a9:56:ff:d3:f2:9c:3a:be:e7:71:d1:bc:
                    be:70:03:e9:56:9b:16:36:86:c4:eb:17:a5:3d:87:
                    14:52:d3:50:04:0c:c6:d9:ff:1d:14:a3:d7:78:c5:
                    b0:a7:32:1a:83:f7:84:c8:ca:7a:bb:6c:e8:bf:5e:
                    aa:b1:6b:14:ea:19:1f:b8:b0:ba:c1:b6:98:46:59:
                    80:d0:ba:e4:ed:aa:44:c8:a6:15:67:a3:03:f6:11:
                    f5:3c:c0:a6:fb:a1:26:c0:45:8c:b8:ab:41:65:c7:
                    a6:cb:4e:e3:1c:f2:2e:df:54:2e:59:e9:b0:49:af:
                    12:2a:89:f8:04:9e:75:b8:a3:2e:81:f3:b2:75:87:
                    7f:38:89:8f:25:49:68:f9:7d:fd:b4:c6:7a:53:1c:
                    8a:06:61:bd:7e:57:fd:7b:57:af:22:4f:13:b4:a1:
                    36:d7:c5:0c:1a:04:b0:5c:9b:6e:19:0b:7c:a5:8a:
                    26:c7:b5:b8:6c:72:c9:34:50:3a:60:b0:24:d3:e0:
                    c6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:88:DD:18:9F:5F:E5:ED:B7:59:1C:4D:AF:D6:62:CA:1F:CB:25:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/d60bf23b-d6d2-3882-94c7-ef5be712650a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19f0:5404::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:9b:83:3c:67:cc:c1:ed:37:7c:ec:11:84:9f:d8:52:93:a0:
         39:d5:37:3f:d2:61:e9:4c:7c:2a:f3:1a:ca:dc:5f:bf:9e:5d:
         1c:26:7d:12:a1:e7:fe:d2:a7:33:13:44:4f:f9:85:16:e4:c2:
         4e:69:5c:7c:56:7a:ec:f7:f1:c0:58:45:86:fa:de:23:7f:86:
         20:92:63:6a:c0:1d:a5:34:b1:90:fe:91:21:52:fd:d5:15:dc:
         ec:25:4a:d6:e3:fa:ae:36:ef:18:e9:21:53:d5:4c:bc:6f:1c:
         d9:bc:a1:3e:6d:b3:92:dd:12:9d:d6:c7:15:da:a1:b3:78:77:
         52:8e:c7:89:84:00:d7:8e:96:37:bf:99:35:11:d1:c2:4c:12:
         51:eb:1e:2a:da:65:64:6b:c8:8a:13:be:f8:7a:d4:51:ee:50:
         75:71:89:87:97:c2:64:a1:f3:1a:22:86:e6:cf:6d:69:85:a2:
         41:0f:62:3b:ac:b1:55:02:f6:a1:84:2b:6a:aa:fd:5c:0a:5c:
         fd:95:63:62:cd:58:13:fb:ac:03:cb:8b:6b:37:f3:d1:b3:66:
         c8:f6:c3:5e:3a:0a:ee:fe:ce:d5:83:04:97:9a:25:52:f4:71:
         da:4d:e5:bb:f3:b9:b2:a1:f5:ab:fd:f2:56:a1:af:f2:28:74:
         96:d9:f3:0a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5dFJ2hlr2Vg/sCLwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjM4MTc3MzYtN2U1ZS00NzQwLThlZTEtYWM2ZjIzMTdm
MDhkMB4XDTI2MDcwMjA5MDAxMloXDTI2MDkzMDA5MDAxMlowLzEtMCsGA1UEAxMk
YTI4MGE5ZWYtODBkOS00MDE5LTg0MzAtZWNkYWYxOTRjNzZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubXjbR/LZQjdD/EHREK7OTaXlAcn06Nve/3I
3RIU/B4gQ/z2qjwW+ZMCq2Quuhk9wkx7lymcUPFlvGDe076pVv/T8pw6vudx0by+
cAPpVpsWNobE6xelPYcUUtNQBAzG2f8dFKPXeMWwpzIag/eEyMp6u2zov16qsWsU
6hkfuLC6wbaYRlmA0Lrk7apEyKYVZ6MD9hH1PMCm+6EmwEWMuKtBZcemy07jHPIu
31QuWemwSa8SKon4BJ51uKMugfOydYd/OImPJUlo+X39tMZ6UxyKBmG9flf9e1ev
Ik8TtKE218UMGgSwXJtuGQt8pYomx7W4bHLJNFA6YLAk0+DGJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGeI3RifX+Xtt1kcTa/WYsofyyX2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82Mzgx
NzczNi03ZTVlLTQ3NDAtOGVlMS1hYzZmMjMxN2YwOGQvZDYwYmYyM2ItZDZkMi0z
ODgyLTk0YzctZWY1YmU3MTI2NTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjM4MTc3MzYtN2U1ZS00NzQwLThl
ZTEtYWM2ZjIzMTdmMDhkLzYzODE3NzM2LTdlNWUtNDc0MC04ZWUxLWFjNmYyMzE3
ZjA4ZC5jcmwwHwYDVR0jBBgwFoAUtfT/gcvgoCb1EjWns0Rz0IlP/HcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MzgxNzczNi03ZTVlLTQ3NDAtOGVlMS1hYzZm
MjMxN2YwOGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEZ8FQE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAKbgzxnzMHtN3zsEYSf2FKToDnVNz/SYelMfCrzGsrcX7+eXRwm
fRKh5/7SpzMTRE/5hRbkwk5pXHxWeuz38cBYRYb63iN/hiCSY2rAHaU0sZD+kSFS
/dUV3OwlStbj+q427xjpIVPVTLxvHNm8oT5ts5LdEp3WxxXaobN4d1KOx4mEANeO
lje/mTUR0cJMElHrHiraZWRryIoTvvh61FHuUHVxiYeXwmSh8xoihubPbWmFokEP
YjussVUC9qGEK2qq/VwKXP2VY2LNWBP7rAPLi2s389GzZsj2w146Cu7+ztWDBJea
JVL0cdpN5bvzubKh9av98lahr/IodJbZ8wo=
-----END CERTIFICATE-----
Generated at Fri Jul 17 07:24:25 2026 by rpki-client