Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/79a75857-a8dd-342c-933c-947c4710fda2.roa
File:                     79a75857-a8dd-342c-933c-947c4710fda2.roa (raw, json)
Hash identifier:          oS7KcgY3TX+LYJTvsgQ0GMCoDGJgt5w1APhXNz0J0Vg=
Subject key identifier:   79:A4:D0:FF:2A:BC:C2:7F:D8:9A:AB:6E:79:8D:7B:7E:4B:96:E3:B0
Certificate issuer:       /CN=0c3cf342-4337-44bf-ac45-d0772ad75854
Certificate serial:       010D0C9F4328584EA787762CD6C0332F6903B7A0
Authority key identifier: 33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/79a75857-a8dd-342c-933c-947c4710fda2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     49791
IP address blocks:        2606:2040:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:76:2c:d6:c0:33:2f:69:03:b7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c3cf342-4337-44bf-ac45-d0772ad75854
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=128b747e-234d-4c12-ad45-6c4f68c68c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:50:d9:d7:06:ce:3f:7d:b9:a8:26:55:63:fc:
                    20:77:5b:6e:f7:9a:b1:b4:ac:20:e1:5a:1b:3e:59:
                    4e:98:8a:a6:eb:16:e4:cc:26:77:2e:6f:8b:85:b4:
                    ee:a9:d6:77:8d:a1:d5:58:4b:ac:62:0a:d0:ad:8f:
                    a7:27:8d:42:cc:3f:11:05:51:80:9a:3c:08:4f:71:
                    e8:84:db:e9:62:93:da:9b:b4:6b:e1:07:37:53:34:
                    bb:58:d6:eb:15:77:f6:83:d1:09:ec:a4:0f:17:e1:
                    63:88:6a:ba:46:0f:40:e7:9e:16:ba:36:f5:4a:79:
                    49:07:1e:4d:51:1c:b3:c7:65:c0:23:a2:22:01:b9:
                    ec:48:1f:e2:dd:a3:83:cf:12:0f:27:0f:d1:7f:e3:
                    b3:f7:ce:64:fb:d9:2c:25:df:12:ec:be:46:b7:65:
                    f4:37:7b:81:54:d7:6c:e6:19:72:66:af:cd:14:2a:
                    c7:2b:34:40:d0:0b:77:49:9b:3b:17:45:05:70:54:
                    b7:f1:39:03:35:0e:0f:81:62:a2:dc:ba:56:6c:d5:
                    f7:25:4a:5b:16:36:c2:fb:9a:f3:9f:73:4c:96:8b:
                    33:0f:f6:62:09:d5:fc:95:e7:0a:45:f3:30:b3:72:
                    37:db:01:6d:bc:26:43:db:03:aa:91:94:1a:09:8d:
                    9d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A4:D0:FF:2A:BC:C2:7F:D8:9A:AB:6E:79:8D:7B:7E:4B:96:E3:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/79a75857-a8dd-342c-933c-947c4710fda2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854/0c3cf342-4337-44bf-ac45-d0772ad75854.crl

            X509v3 Authority Key Identifier:
                keyid:33:E5:6D:7B:B8:6A:FB:59:72:2D:35:F7:95:9D:2A:87:95:1F:95:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c3cf342-4337-44bf-ac45-d0772ad75854.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2040:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ee:05:0f:c9:c6:bd:6d:29:2c:d2:7f:53:4c:0e:9f:5d:c6:
         bf:fc:f7:a0:47:35:66:2f:ea:0a:a0:76:bd:c3:87:59:c5:96:
         e5:2d:b2:c8:b8:b8:c8:65:bc:9d:44:75:a0:0d:70:a5:a0:d8:
         05:13:ed:da:03:60:25:48:a0:87:28:c9:a2:38:bd:18:5b:aa:
         93:c8:3d:f9:21:44:32:b2:c6:ab:45:97:ab:f5:ff:4e:7f:ab:
         d3:d4:67:d5:44:15:e5:b3:46:be:19:c9:12:61:fc:cc:df:c8:
         72:80:f6:81:8e:2a:de:b2:7f:f1:02:02:d9:0e:3c:4d:9d:60:
         5a:cb:88:f4:f6:dc:b0:32:55:65:d1:38:7e:a3:12:d8:f6:e4:
         c7:5b:22:03:01:07:e6:e4:55:e6:eb:ac:00:0b:c0:49:af:77:
         b6:4f:c0:01:46:ac:a8:cc:f5:95:bf:ab:85:4e:33:41:d6:7a:
         2a:a6:1d:88:4f:7a:4b:aa:65:4d:e6:30:7d:5c:85:a4:7e:c9:
         cc:8d:5c:62:fd:07:07:22:68:41:dd:37:2c:4f:d8:42:a6:19:
         02:0e:49:b2:8e:e9:01:69:90:8e:10:61:86:46:e5:23:9d:db:
         79:05:d7:40:49:64:27:d4:29:80:73:83:d2:99:a3:c0:ee:d0:
         51:d3:6d:26
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6nh3Ys1sAzL2kDt6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGMzY2YzNDItNDMzNy00NGJmLWFjNDUtZDA3NzJhZDc1
ODU0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MTI4Yjc0N2UtMjM0ZC00YzEyLWFkNDUtNmM0ZjY4YzY4Yzg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlDZ1wbOP325qCZVY/wgd1tu95qxtKwg4Vob
PllOmIqm6xbkzCZ3Lm+LhbTuqdZ3jaHVWEusYgrQrY+nJ41CzD8RBVGAmjwIT3Ho
hNvpYpPam7Rr4Qc3UzS7WNbrFXf2g9EJ7KQPF+FjiGq6Rg9A554Wujb1SnlJBx5N
URyzx2XAI6IiAbnsSB/i3aODzxIPJw/Rf+Oz985k+9ksJd8S7L5Gt2X0N3uBVNds
5hlyZq/NFCrHKzRA0At3SZs7F0UFcFS38TkDNQ4PgWKi3LpWbNX3JUpbFjbC+5rz
n3NMloszD/ZiCdX8lecKRfMws3I32wFtvCZD2wOqkZQaCY2deQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHmk0P8qvMJ/2JqrbnmNe35LluOwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNj
ZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3MmFkNzU4NTQvNzlhNzU4NTctYThkZC0z
NDJjLTkzM2MtOTQ3YzQ3MTBmZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGMzY2YzNDItNDMzNy00NGJmLWFj
NDUtZDA3NzJhZDc1ODU0LzBjM2NmMzQyLTQzMzctNDRiZi1hYzQ1LWQwNzcyYWQ3
NTg1NC5jcmwwHwYDVR0jBBgwFoAUM+Vte7hq+1lyLTX3lZ0qh5UflWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYzNjZjM0Mi00MzM3LTQ0YmYtYWM0NS1kMDc3
MmFkNzU4NTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgYgQBAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAFu4FD8nGvW0pLNJ/U0wOn13Gv/z3oEc1Zi/qCqB2vcOHWcWW5S2y
yLi4yGW8nUR1oA1wpaDYBRPt2gNgJUighyjJoji9GFuqk8g9+SFEMrLGq0WXq/X/
Tn+r09Rn1UQV5bNGvhnJEmH8zN/IcoD2gY4q3rJ/8QIC2Q48TZ1gWsuI9PbcsDJV
ZdE4fqMS2Pbkx1siAwEH5uRV5uusAAvASa93tk/AAUasqMz1lb+rhU4zQdZ6KqYd
iE96S6plTeYwfVyFpH7JzI1cYv0HByJoQd03LE/YQqYZAg5Jso7pAWmQjhBhhkbl
I53beQXXQElkJ9QpgHOD0pmjwO7QUdNtJg==
-----END CERTIFICATE-----
Generated at Wed Sep 9 21:31:14 2026 by rpki-client