Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/644c461b-c7da-36b5-8d90-01885e089d23.roa
File:                     644c461b-c7da-36b5-8d90-01885e089d23.roa (raw, json)
Hash identifier:          FneU90WcmbDzC5ztJSn5liD7u2EsMv/iI4V5eVLLOms=
Subject key identifier:   73:E3:AA:71:A1:FE:D2:D8:D1:25:2C:7C:52:D2:C8:8D:63:46:95:22
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584EA79387B68C4266F83F21C640
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/644c461b-c7da-36b5-8d90-01885e089d23.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23260
IP address blocks:        2604:8d40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:87:b6:8c:42:66:f8:3f:21:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=012802ca-87d5-4246-8129-56f6407f47fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:09:f9:92:d9:74:7b:a1:4d:01:8e:d5:18:54:
                    02:07:ff:1f:42:1d:5e:ad:4f:1e:ac:ba:7e:6d:9a:
                    78:bb:a9:62:7d:37:2a:d2:b2:3e:a2:ba:5a:79:bf:
                    80:2a:44:ce:a8:33:af:b7:64:12:2a:ce:23:50:c0:
                    89:0c:63:a2:15:91:4d:eb:fd:d3:b1:f5:bc:2f:70:
                    b3:b6:26:27:fc:20:dd:3b:3e:7c:e7:46:a9:7f:c4:
                    0a:47:77:40:38:cd:0d:0f:9e:90:9a:cc:4e:13:2e:
                    06:69:69:5f:29:20:6e:ea:50:ff:83:80:5e:7a:ff:
                    30:8e:12:28:e5:a1:50:54:34:1b:14:6d:3d:1e:a9:
                    a4:03:85:81:29:23:fb:b2:ca:6a:55:f0:a0:8c:ff:
                    87:21:27:27:d1:70:fd:9f:b5:c0:80:cd:d3:88:a4:
                    b6:be:d4:07:89:de:61:ba:60:42:19:79:56:c7:ef:
                    de:dc:d0:a3:af:a7:a0:22:ae:1f:66:57:43:eb:eb:
                    29:aa:2f:39:b9:82:55:96:fe:07:72:10:7c:14:9a:
                    1c:e6:0b:e7:63:4c:48:15:45:a9:4e:34:38:4e:60:
                    28:16:04:3c:32:f8:04:af:8b:1d:29:be:b8:89:ed:
                    5a:77:9c:a3:8f:1d:fd:94:a2:b4:3f:9e:b8:e0:fa:
                    7c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E3:AA:71:A1:FE:D2:D8:D1:25:2C:7C:52:D2:C8:8D:63:46:95:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/644c461b-c7da-36b5-8d90-01885e089d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:8d40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:76:0f:ab:d1:c2:f9:41:1d:5f:8d:33:1b:9c:cc:43:5d:97:
         dc:11:c5:8b:e7:b3:9c:9c:ea:12:a5:11:f4:25:a9:b5:d7:44:
         9b:4c:19:3a:df:93:c3:57:94:d1:49:dd:5d:c1:17:47:92:23:
         bd:df:7c:af:da:35:1d:fa:45:6f:63:25:fc:de:bb:fc:b1:d6:
         69:f4:0d:ba:ab:ce:b8:ca:51:12:e7:ad:74:c6:91:76:bb:48:
         80:cc:85:3c:c9:d4:c2:0f:7f:a1:27:b8:43:ce:70:f0:7c:c2:
         cc:00:fe:dc:ce:74:03:55:e1:7e:aa:01:db:f5:69:2c:44:93:
         7f:b5:1a:25:ac:a2:76:7c:a8:db:ec:3c:35:e0:b3:42:98:f0:
         c9:d2:1d:d0:95:8d:90:3b:01:1e:a2:e1:a8:b9:69:43:bf:d3:
         fb:03:1b:eb:b7:ce:4e:69:05:25:57:a2:b0:f9:5f:e3:88:f0:
         31:e0:b4:9a:cc:20:16:13:fd:dc:18:21:18:5e:ef:b7:05:f8:
         26:2c:c4:3d:3f:83:3d:63:ae:98:6a:8d:f8:75:b8:84:44:93:
         7d:90:e4:4d:39:8c:d0:a5:ef:28:74:35:e3:2f:9d:c0:d8:76:
         a6:0f:ab:ee:00:fc:70:95:f7:18:21:59:13:4c:1f:66:d5:65:
         fa:2c:9f:80
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nk4e2jEJm+D8hxkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MDEyODAyY2EtODdkNS00MjQ2LTgxMjktNTZmNjQwN2Y0N2ZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgn5ktl0e6FNAY7VGFQCB/8fQh1erU8erLp+
bZp4u6lifTcq0rI+orpaeb+AKkTOqDOvt2QSKs4jUMCJDGOiFZFN6/3TsfW8L3Cz
tiYn/CDdOz5850apf8QKR3dAOM0ND56QmsxOEy4GaWlfKSBu6lD/g4Beev8wjhIo
5aFQVDQbFG09HqmkA4WBKSP7sspqVfCgjP+HIScn0XD9n7XAgM3TiKS2vtQHid5h
umBCGXlWx+/e3NCjr6egIq4fZldD6+spqi85uYJVlv4HchB8FJoc5gvnY0xIFUWp
TjQ4TmAoFgQ8MvgEr4sdKb64ie1ad5yjjx39lKK0P5644Pp81wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHPjqnGh/tLY0SUsfFLSyI1jRpUiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvNjQ0YzQ2MWItYzdkYS0z
NmI1LThkOTAtMDE4ODVlMDg5ZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSNQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBvdg+r0cL5QR1fjTMbnMxDXZfcEcWL57OcnOoSpRH0Jam110SbTBk6
35PDV5TRSd1dwRdHkiO933yv2jUd+kVvYyX83rv8sdZp9A26q864ylES5610xpF2
u0iAzIU8ydTCD3+hJ7hDznDwfMLMAP7cznQDVeF+qgHb9WksRJN/tRolrKJ2fKjb
7Dw14LNCmPDJ0h3QlY2QOwEeouGouWlDv9P7Axvrt85OaQUlV6Kw+V/jiPAx4LSa
zCAWE/3cGCEYXu+3BfgmLMQ9P4M9Y66Yao34dbiERJN9kORNOYzQpe8odDXjL53A
2HamD6vuAPxwlfcYIVkTTB9m1WX6LJ+A
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:57:23 2026 by rpki-client