Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5/78c2b0a0-d7e4-38bd-b98d-5a60ba8a4913.roa
File:                     78c2b0a0-d7e4-38bd-b98d-5a60ba8a4913.roa (raw, json)
Hash identifier:          i2vNcLykfCCtwO1d1gKITH5P2XgCzih0TTyKXjn+SwA=
Subject key identifier:   8A:91:D1:A0:0C:93:A2:57:E1:A3:A4:63:DF:A3:28:24:9C:7C:1F:04
Certificate issuer:       /CN=6b94ef6e-7ebc-4239-94f3-7165ed163af5
Certificate serial:       010D0C9F4328584EFB4761EB8A6E22FB6376B600
Authority key identifier: A4:8C:DF:01:15:04:7B:EA:BB:5F:6C:F7:FC:0A:5D:7D:AA:B8:1C:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5/78c2b0a0-d7e4-38bd-b98d-5a60ba8a4913.roa
Signing time:             Fri 28 Aug 2026 01:00:12 +0000
ROA not before:           Fri 28 Aug 2026 01:00:12 +0000
ROA not after:            Thu 26 Nov 2026 02:00:12 +0000
asID:                     397903
IP address blocks:        2607:5040::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5/6b94ef6e-7ebc-4239-94f3-7165ed163af5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5/6b94ef6e-7ebc-4239-94f3-7165ed163af5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fb:47:61:eb:8a:6e:22:fb:63:76:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b94ef6e-7ebc-4239-94f3-7165ed163af5
        Validity
            Not Before: Aug 28 01:00:12 2026 GMT
            Not After : Nov 26 02:00:12 2026 GMT
        Subject: CN=83ffe4b4-36be-450f-a38d-99ea6b374ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ad:0a:33:19:a5:67:6f:82:01:13:30:e1:6c:
                    9b:e0:02:2e:47:d0:08:23:0e:55:d5:49:00:20:a9:
                    b5:5d:5a:a3:18:de:b7:b4:26:ea:7d:56:24:ee:21:
                    51:14:c6:f3:68:11:08:20:4c:5c:d9:23:65:2a:f5:
                    f9:6f:ed:96:b5:a5:93:b8:14:54:07:a2:04:f6:06:
                    2f:6a:5e:e4:b1:aa:9a:3d:2d:21:00:52:fd:30:23:
                    a7:b9:61:b1:49:fe:19:17:8f:bf:3d:54:79:73:0b:
                    74:41:2a:3f:3c:7c:7c:53:1c:84:64:7d:42:8e:32:
                    6d:27:41:e2:a7:44:27:60:5f:56:7b:e9:da:4b:0f:
                    2a:cf:02:ea:42:a3:f2:fd:9f:88:3b:d9:3d:f4:a0:
                    fd:3e:41:8d:b9:df:68:88:51:bf:50:78:a1:6c:0f:
                    ef:6c:cc:b0:4c:77:bc:8b:7a:e8:82:8a:6b:84:ec:
                    70:e6:67:0d:d2:c5:54:4a:bd:59:73:eb:e9:b4:33:
                    cc:69:64:8e:d8:e1:49:e6:6f:d3:ac:d7:d7:75:da:
                    af:f2:6a:bc:ef:0a:c2:6c:92:a4:2d:ea:0b:9e:73:
                    3d:46:41:7a:c3:4c:5f:46:84:06:c4:b4:b5:99:83:
                    d7:36:b7:b8:b1:6a:14:3d:08:38:fe:d4:41:bc:6c:
                    0d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:91:D1:A0:0C:93:A2:57:E1:A3:A4:63:DF:A3:28:24:9C:7C:1F:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5/78c2b0a0-d7e4-38bd-b98d-5a60ba8a4913.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5/6b94ef6e-7ebc-4239-94f3-7165ed163af5.crl

            X509v3 Authority Key Identifier:
                keyid:A4:8C:DF:01:15:04:7B:EA:BB:5F:6C:F7:FC:0A:5D:7D:AA:B8:1C:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b94ef6e-7ebc-4239-94f3-7165ed163af5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:60:c5:78:1a:86:57:85:96:52:ff:3d:f5:72:de:23:5e:45:
         cf:2c:79:d3:80:82:5f:af:5b:c1:f1:1e:f0:d4:e1:46:15:9b:
         8f:33:40:04:89:96:66:d0:e3:bd:af:27:d0:b1:6d:c0:b9:1f:
         ec:75:33:ae:ba:2a:e9:bc:de:45:34:ce:ca:fe:24:91:a5:5b:
         ba:49:db:9a:7e:1b:af:9d:cf:e3:70:7b:18:b5:24:1e:4e:ba:
         2d:35:4d:1d:38:b6:ce:75:bf:fd:98:d3:80:fd:e9:6e:71:a5:
         28:e1:04:6f:c2:3e:93:8d:a2:bd:6c:a9:e7:01:5e:c7:1d:40:
         96:d7:35:3d:66:8a:53:b1:d7:1b:33:87:32:73:76:1a:80:59:
         d8:e1:d2:4f:71:dd:a8:7e:9d:d4:95:fb:74:14:7e:6d:e7:05:
         2f:26:2c:b3:74:70:4c:74:ab:8c:16:f9:8d:99:d9:ac:2b:f0:
         78:ee:4a:07:4d:00:0a:66:60:67:24:5b:50:ee:11:4b:8f:7c:
         73:bd:6a:bc:f3:42:56:c0:c7:41:f0:28:a0:54:af:2f:97:24:
         0d:8e:f9:65:0c:75:64:3a:5b:15:42:d3:de:92:f1:aa:29:43:
         d1:22:b4:92:73:17:7b:e5:e8:f6:b2:d6:ba:23:cc:e4:53:dd:
         4f:53:d2:63
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE77R2Hrim4i+2N2tgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmI5NGVmNmUtN2ViYy00MjM5LTk0ZjMtNzE2NWVkMTYz
YWY1MB4XDTI2MDgyODAxMDAxMloXDTI2MTEyNjAyMDAxMlowLzEtMCsGA1UEAxMk
ODNmZmU0YjQtMzZiZS00NTBmLWEzOGQtOTllYTZiMzc0ZWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo60KMxmlZ2+CARMw4Wyb4AIuR9AIIw5V1UkA
IKm1XVqjGN63tCbqfVYk7iFRFMbzaBEIIExc2SNlKvX5b+2WtaWTuBRUB6IE9gYv
al7ksaqaPS0hAFL9MCOnuWGxSf4ZF4+/PVR5cwt0QSo/PHx8UxyEZH1CjjJtJ0Hi
p0QnYF9We+naSw8qzwLqQqPy/Z+IO9k99KD9PkGNud9oiFG/UHihbA/vbMywTHe8
i3rogoprhOxw5mcN0sVUSr1Zc+vptDPMaWSO2OFJ5m/TrNfXddqv8mq87wrCbJKk
LeoLnnM9RkF6w0xfRoQGxLS1mYPXNre4sWoUPQg4/tRBvGwNVQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIqR0aAMk6JX4aOkY9+jKCScfB8EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82Yjk0
ZWY2ZS03ZWJjLTQyMzktOTRmMy03MTY1ZWQxNjNhZjUvNzhjMmIwYTAtZDdlNC0z
OGJkLWI5OGQtNWE2MGJhOGE0OTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNmI5NGVmNmUtN2ViYy00MjM5LTk0
ZjMtNzE2NWVkMTYzYWY1LzZiOTRlZjZlLTdlYmMtNDIzOS05NGYzLTcxNjVlZDE2
M2FmNS5jcmwwHwYDVR0jBBgwFoAUpIzfARUEe+q7X2z3/Apdfaq4HDYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi82Yjk0ZWY2ZS03ZWJjLTQyMzktOTRmMy03MTY1
ZWQxNjNhZjUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdQQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBpYMV4GoZXhZZS/z31ct4jXkXPLHnTgIJfr1vB8R7w1OFGFZuPM0AE
iZZm0OO9ryfQsW3AuR/sdTOuuirpvN5FNM7K/iSRpVu6Sduafhuvnc/jcHsYtSQe
TrotNU0dOLbOdb/9mNOA/elucaUo4QRvwj6TjaK9bKnnAV7HHUCW1zU9ZopTsdcb
M4cyc3YagFnY4dJPcd2ofp3Ulft0FH5t5wUvJiyzdHBMdKuMFvmNmdmsK/B47koH
TQAKZmBnJFtQ7hFLj3xzvWq880JWwMdB8CigVK8vlyQNjvllDHVkOlsVQtPekvGq
KUPRIrSScxd75ej2sta6I8zkU91PU9Jj
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:33:16 2026 by rpki-client