Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/9f244d98-340c-3899-9c56-98ca1bbcc830.roa
File:                     9f244d98-340c-3899-9c56-98ca1bbcc830.roa (raw, json)
Hash identifier:          7gckpoYgwjjMOPAxYHAV9Mw0vSKK8+j1sfRW1vZnHVY=
Subject key identifier:   F8:D3:5B:92:80:61:6E:10:1F:D6:56:B1:27:C0:97:91:60:6D:9E:D6
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584EA79C230B795C078AF7CD0AC0
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/9f244d98-340c-3899-9c56-98ca1bbcc830.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     27539
IP address blocks:        2604:a900:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:23:0b:79:5c:07:8a:f7:cd:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=49c17e40-82de-45fa-914f-c45de11ea32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:47:e3:bb:ea:85:2f:c0:68:c9:d4:52:dd:29:
                    a3:8f:97:41:fb:9a:28:02:f0:e5:99:55:bb:8d:cf:
                    3f:41:b0:a0:71:d1:44:44:8f:f2:06:36:c4:20:8b:
                    10:cb:e2:c9:9b:c9:20:19:9a:23:0a:01:2c:d4:95:
                    bd:5b:ec:58:93:29:4e:30:50:52:17:dc:c9:bb:61:
                    6e:91:58:0b:17:f5:84:86:82:69:86:4b:9a:79:8a:
                    2b:37:7c:74:f6:99:42:3b:51:29:ad:4f:40:c5:89:
                    29:93:72:fc:41:3e:a9:95:29:f6:81:41:3f:4e:93:
                    f6:a3:85:13:a7:b4:b3:38:ac:9a:c0:c2:92:e7:e3:
                    ea:35:6e:c8:d9:f6:33:2a:16:d2:08:33:06:75:38:
                    9c:46:42:73:ca:a9:cf:d2:60:a9:58:e1:54:85:e4:
                    05:b5:d2:b8:9e:e5:1f:74:b5:5c:c5:53:ff:2e:e6:
                    b5:e4:88:fa:dd:13:71:a0:d0:1d:d3:64:ff:a7:fb:
                    ca:fa:ce:e9:26:6d:07:c3:dc:d2:b1:80:1a:3e:88:
                    63:70:a3:69:68:d1:f6:34:47:79:2e:c4:4f:a1:bd:
                    04:2a:65:9e:27:47:1e:6c:36:80:9a:7e:a5:47:24:
                    20:7b:30:30:5e:b1:a7:fa:db:39:c2:da:c2:3c:8e:
                    5d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D3:5B:92:80:61:6E:10:1F:D6:56:B1:27:C0:97:91:60:6D:9E:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/9f244d98-340c-3899-9c56-98ca1bbcc830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a900:8000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:14:c6:95:76:22:87:c5:87:50:cd:43:d4:ab:64:6a:31:94:
         00:d2:3b:85:13:12:d3:42:54:bd:fc:02:0a:3d:df:71:1b:07:
         50:ec:b6:48:6e:ab:96:02:b4:13:a8:db:ef:90:28:2f:99:47:
         f8:c6:6a:ab:f2:80:f2:2c:2c:2e:9c:b3:04:1d:67:60:d5:0f:
         64:6f:16:8e:83:84:7b:c9:81:e7:2c:aa:d3:bf:9a:ca:23:b4:
         59:2d:4b:4e:fb:05:1c:8d:39:05:55:3a:48:92:ec:34:df:91:
         46:56:21:45:f2:00:da:9d:96:0b:4b:aa:08:5f:96:d7:33:89:
         a5:a9:7d:2e:52:b5:ae:f7:7e:9a:bc:01:e8:d2:3f:59:80:ae:
         7d:11:20:36:09:84:61:6c:8b:53:c8:1d:2b:f3:f6:8c:77:a8:
         af:e8:b2:3d:80:da:0b:8b:f2:e2:8f:9f:b2:3c:e6:5b:b1:bf:
         e1:e0:57:82:df:5c:77:76:53:f3:cf:9d:29:ad:23:fc:73:b4:
         3a:a2:4b:4a:28:ff:87:1d:ca:13:14:b3:78:6e:5a:8d:e6:c4:
         0d:29:ad:99:59:a6:27:91:6c:16:0a:20:54:e7:6a:44:12:51:
         91:99:69:92:42:e0:95:43:4e:26:8e:c9:35:56:66:36:51:67:
         4d:12:74:d8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6nnCMLeVwHivfNCsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY0YTUzMDQtOTc0ZC00Yzg2LTk4MjktMmY0ZDhkYzli
OWI2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NDljMTdlNDAtODJkZS00NWZhLTkxNGYtYzQ1ZGUxMWVhMzJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkfju+qFL8BoydRS3Smjj5dB+5ooAvDlmVW7
jc8/QbCgcdFERI/yBjbEIIsQy+LJm8kgGZojCgEs1JW9W+xYkylOMFBSF9zJu2Fu
kVgLF/WEhoJphkuaeYorN3x09plCO1EprU9AxYkpk3L8QT6plSn2gUE/TpP2o4UT
p7SzOKyawMKS5+PqNW7I2fYzKhbSCDMGdTicRkJzyqnP0mCpWOFUheQFtdK4nuUf
dLVcxVP/Lua15Ij63RNxoNAd02T/p/vK+s7pJm0Hw9zSsYAaPohjcKNpaNH2NEd5
LsRPob0EKmWeJ0cebDaAmn6lRyQgezAwXrGn+ts5wtrCPI5dWwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPjTW5KAYW4QH9ZWsSfAl5FgbZ7WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NjRh
NTMwNC05NzRkLTRjODYtOTgyOS0yZjRkOGRjOWI5YjYvOWYyNDRkOTgtMzQwYy0z
ODk5LTljNTYtOThjYTFiYmNjODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDY0YTUzMDQtOTc0ZC00Yzg2LTk4
MjktMmY0ZDhkYzliOWI2LzQ2NGE1MzA0LTk3NGQtNGM4Ni05ODI5LTJmNGQ4ZGM5
YjliNi5jcmwwHwYDVR0jBBgwFoAUcgemEPwzJXUhFkgvpE9t1tV3MNUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80NjRhNTMwNC05NzRkLTRjODYtOTgyOS0yZjRk
OGRjOWI5YjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgSpAIAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEACxTGlXYih8WHUM1D1KtkajGUANI7hRMS00JUvfwCCj3fcRsHUOy2
SG6rlgK0E6jb75AoL5lH+MZqq/KA8iwsLpyzBB1nYNUPZG8WjoOEe8mB5yyq07+a
yiO0WS1LTvsFHI05BVU6SJLsNN+RRlYhRfIA2p2WC0uqCF+W1zOJpal9LlK1rvd+
mrwB6NI/WYCufREgNgmEYWyLU8gdK/P2jHeor+iyPYDaC4vy4o+fsjzmW7G/4eBX
gt9cd3ZT88+dKa0j/HO0OqJLSij/hx3KExSzeG5ajebEDSmtmVmmJ5FsFgogVOdq
RBJRkZlpkkLglUNOJo7JNVZmNlFnTRJ02A==
-----END CERTIFICATE-----
Generated at Thu Aug 13 22:01:14 2026 by rpki-client