Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/410ac1f7-3bb8-3d9d-81e4-8cfe9e0a76c7.roa
File:                     410ac1f7-3bb8-3d9d-81e4-8cfe9e0a76c7.roa (raw, json)
Hash identifier:          UHTlttc5hfQUe8RhQkYewFHAEfa9kjEZ0xBHTLNiQVs=
Subject key identifier:   F7:69:76:C8:5E:73:EA:3D:B6:A3:F2:99:08:2A:81:0D:C9:44:DB:B5
Certificate issuer:       /CN=a327249c-db27-40a5-b04c-da03ae2d60a8
Certificate serial:       010D0C9F4328584EFF776829B3FB0C6495ECCC00
Authority key identifier: EB:26:19:96:8E:04:30:B5:09:27:D9:05:C9:A9:B3:08:A2:06:C7:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/410ac1f7-3bb8-3d9d-81e4-8cfe9e0a76c7.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     6939
IP address blocks:        2607:9440::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/a327249c-db27-40a5-b04c-da03ae2d60a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/a327249c-db27-40a5-b04c-da03ae2d60a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:68:29:b3:fb:0c:64:95:ec:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a327249c-db27-40a5-b04c-da03ae2d60a8
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=d7083a33-a5b8-46c5-b660-fc68e74241fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:64:19:a9:b4:a4:eb:31:1d:99:d4:46:a8:d6:
                    dc:04:be:8d:40:09:62:10:f5:a0:24:ef:18:64:00:
                    05:4d:bd:17:f1:48:c9:30:64:7b:8a:83:ad:72:34:
                    75:2a:89:3e:23:97:69:f5:c5:0a:e7:26:6b:14:06:
                    55:2d:89:fa:6f:4a:fb:95:72:b1:b7:09:2b:d6:85:
                    69:d8:53:74:a8:19:ce:77:cd:58:5d:ba:12:de:98:
                    73:81:cb:1c:44:d7:64:ee:50:d8:70:09:c5:80:27:
                    e9:36:89:5a:e1:15:cb:86:fe:6c:0c:56:01:b8:1e:
                    2f:e5:2a:35:63:b8:d9:21:15:ea:94:a4:bf:a6:94:
                    10:d3:91:b5:1f:00:0a:35:7c:77:4d:70:a0:cb:c6:
                    92:9a:ac:3f:a7:34:c2:0e:88:b8:79:60:5c:21:75:
                    f3:ff:45:03:dd:93:de:37:6e:d3:41:27:e1:50:a5:
                    c6:3c:d0:a8:4e:11:e4:d6:b2:90:7a:c5:45:10:57:
                    75:8c:a6:46:ef:c7:22:58:86:3a:15:8f:67:33:2d:
                    31:53:41:91:51:32:b2:9c:67:66:94:0d:c1:44:f1:
                    71:31:70:92:fa:12:ca:4e:b0:29:13:d5:8f:65:57:
                    e4:8f:7d:2f:a6:5b:e6:eb:32:00:9e:22:b6:5d:b1:
                    62:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:69:76:C8:5E:73:EA:3D:B6:A3:F2:99:08:2A:81:0D:C9:44:DB:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/410ac1f7-3bb8-3d9d-81e4-8cfe9e0a76c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8/a327249c-db27-40a5-b04c-da03ae2d60a8.crl

            X509v3 Authority Key Identifier:
                keyid:EB:26:19:96:8E:04:30:B5:09:27:D9:05:C9:A9:B3:08:A2:06:C7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a327249c-db27-40a5-b04c-da03ae2d60a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:6b:f6:bb:bc:3f:a8:a1:e9:ca:83:e0:35:6f:89:69:f9:7b:
         7b:39:4b:57:09:75:c2:ae:82:da:ff:1f:54:0a:5c:2b:0a:ff:
         1d:19:31:50:bf:a8:60:71:78:c8:4c:c0:6d:7e:82:ef:e9:10:
         9b:3c:55:73:29:6f:38:9f:f9:1b:63:d5:74:ea:4b:c6:74:e0:
         0b:59:e0:1b:e0:84:b1:f8:11:6e:69:a1:e2:36:86:95:80:63:
         fd:9d:50:c3:9b:59:83:2f:bf:0a:3d:1e:87:0b:70:10:c0:7f:
         1d:70:6a:00:a2:4d:ae:af:55:a6:f7:d9:4f:7b:75:1e:cf:41:
         7c:02:4a:0e:87:2c:15:da:3f:8d:e4:06:d4:bd:3b:6b:bb:99:
         f8:01:3a:e0:be:11:ad:4b:04:78:aa:f3:5b:73:92:c5:81:71:
         5d:c3:30:06:74:91:a4:9a:b9:46:8a:bf:f9:31:95:7e:c0:d6:
         50:b8:82:9c:bb:88:c1:b0:f6:d5:6f:35:91:25:30:d4:a6:ee:
         0b:aa:01:af:36:b1:9b:ab:26:1c:5c:27:5f:42:4e:9e:36:31:
         49:99:c4:54:bc:5b:6b:dd:62:a4:e0:2f:eb:04:bd:ee:05:df:
         80:77:91:a2:a4:ac:10:bd:85:82:35:13:c1:c3:33:76:3a:f9:
         25:1e:e6:2c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7/d2gps/sMZJXszAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMyNzI0OWMtZGIyNy00MGE1LWIwNGMtZGEwM2FlMmQ2
MGE4MB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk
ZDcwODNhMzMtYTViOC00NmM1LWI2NjAtZmM2OGU3NDI0MWZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2QZqbSk6zEdmdRGqNbcBL6NQAliEPWgJO8Y
ZAAFTb0X8UjJMGR7ioOtcjR1Kok+I5dp9cUK5yZrFAZVLYn6b0r7lXKxtwkr1oVp
2FN0qBnOd81YXboS3phzgcscRNdk7lDYcAnFgCfpNola4RXLhv5sDFYBuB4v5So1
Y7jZIRXqlKS/ppQQ05G1HwAKNXx3TXCgy8aSmqw/pzTCDoi4eWBcIXXz/0UD3ZPe
N27TQSfhUKXGPNCoThHk1rKQesVFEFd1jKZG78ciWIY6FY9nMy0xU0GRUTKynGdm
lA3BRPFxMXCS+hLKTrApE9WPZVfkj30vplvm6zIAniK2XbFiZwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPdpdshec+o9tqPymQgqgQ3JRNu1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hMzI3
MjQ5Yy1kYjI3LTQwYTUtYjA0Yy1kYTAzYWUyZDYwYTgvNDEwYWMxZjctM2JiOC0z
ZDlkLTgxZTQtOGNmZTllMGE3NmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYTMyNzI0OWMtZGIyNy00MGE1LWIw
NGMtZGEwM2FlMmQ2MGE4L2EzMjcyNDljLWRiMjctNDBhNS1iMDRjLWRhMDNhZTJk
NjBhOC5jcmwwHwYDVR0jBBgwFoAU6yYZlo4EMLUJJ9kFyamzCKIGx2swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9hMzI3MjQ5Yy1kYjI3LTQwYTUtYjA0Yy1kYTAz
YWUyZDYwYTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeUQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBta/a7vD+ooenKg+A1b4lp+Xt7OUtXCXXCroLa/x9UClwrCv8dGTFQ
v6hgcXjITMBtfoLv6RCbPFVzKW84n/kbY9V06kvGdOALWeAb4ISx+BFuaaHiNoaV
gGP9nVDDm1mDL78KPR6HC3AQwH8dcGoAok2ur1Wm99lPe3Uez0F8AkoOhywV2j+N
5AbUvTtru5n4ATrgvhGtSwR4qvNbc5LFgXFdwzAGdJGkmrlGir/5MZV+wNZQuIKc
u4jBsPbVbzWRJTDUpu4LqgGvNrGbqyYcXCdfQk6eNjFJmcRUvFtr3WKk4C/rBL3u
Bd+Ad5GipKwQvYWCNRPBwzN2OvklHuYs
-----END CERTIFICATE-----
Generated at Tue Sep 1 12:52:07 2026 by rpki-client