Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/68e5cf7b-bf41-3e2f-be15-9e8f9640b83f.roa
File:                     68e5cf7b-bf41-3e2f-be15-9e8f9640b83f.roa (raw, json)
Hash identifier:          4nnoRxHZcgJMljDkIaq6sfUhAqMVBVDeqzUBAtTKBQQ=
Subject key identifier:   BF:63:3A:F4:4B:18:98:8A:4C:71:BF:06:42:8E:3C:95:1C:13:CE:27
Certificate issuer:       /CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
Certificate serial:       010D0C9F4328584EA7943B342045A56B007EAB80
Authority key identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/68e5cf7b-bf41-3e2f-be15-9e8f9640b83f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     399870
IP address blocks:        2602:f7a5:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:3b:34:20:45:a5:6b:00:7e:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=dbc1c2ac-7989-422e-9bca-feaa2f34cd49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ef:8f:c5:01:0a:89:63:58:8d:08:f1:df:fb:
                    3f:13:10:27:92:9f:fa:70:40:8a:59:d0:d0:ef:5e:
                    a6:31:5b:18:d3:0e:8a:a6:0b:f5:0e:49:83:7d:2e:
                    2c:5c:0f:90:8f:b0:5e:9d:dc:a2:dd:83:71:3a:36:
                    0e:c5:08:00:76:8e:54:a6:93:11:ed:11:e3:9b:32:
                    6c:31:94:c1:fc:b6:a5:b7:a0:6e:4d:ea:a7:43:02:
                    57:9c:8f:76:e6:85:3f:55:da:53:9b:3f:1e:f7:c2:
                    82:95:ab:57:8a:81:85:bc:8c:17:56:fe:61:70:12:
                    7d:a4:10:c6:04:f4:9d:5b:d4:44:a3:cb:b7:ad:54:
                    a7:49:b8:77:f5:83:22:7c:fc:74:9a:91:25:29:b5:
                    95:96:48:cc:cd:18:23:22:69:bd:bc:6a:1b:33:b9:
                    91:cf:0e:6c:eb:81:43:85:63:bc:37:7f:f7:a9:d6:
                    7a:df:ec:d1:b8:f2:36:22:e3:1c:23:bb:f2:04:8c:
                    25:ac:78:ee:a7:41:0f:bd:78:0e:ad:05:c8:5f:e8:
                    dc:5b:39:96:1b:6c:8c:47:8c:70:76:4a:b1:ff:56:
                    cd:bd:f9:23:ab:f3:68:74:54:8c:fe:b5:16:03:de:
                    8f:95:b6:33:64:10:53:ae:63:3a:b8:41:d0:a3:f9:
                    e8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:63:3A:F4:4B:18:98:8A:4C:71:BF:06:42:8E:3C:95:1C:13:CE:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/68e5cf7b-bf41-3e2f-be15-9e8f9640b83f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl

            X509v3 Authority Key Identifier:
                keyid:B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a5:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:81:43:0d:b6:ac:d0:62:27:fa:83:60:ba:0b:e2:b7:7a:1b:
         38:bf:a8:4e:94:92:7a:3e:f8:57:14:47:28:a9:bb:9a:9f:c4:
         bf:7c:d0:60:16:96:46:d2:f1:2f:b8:6f:99:f5:76:e3:49:1f:
         b8:c8:f6:7c:3a:68:9b:42:2b:e5:1f:f3:18:32:43:8a:14:d1:
         ee:72:ce:90:ac:47:23:09:33:da:0d:0c:1e:62:3e:d2:e1:98:
         e0:70:28:1b:04:e0:b8:02:8b:3f:6d:e1:8c:fa:c4:ca:ea:93:
         b9:7a:ad:e0:e0:fa:95:35:6b:76:22:96:67:17:12:33:e4:13:
         58:a3:67:ab:80:89:aa:7f:34:a1:e8:a9:2b:2d:5b:ce:7a:f2:
         0c:90:f4:9f:da:ca:fb:93:43:63:77:29:ea:04:94:83:e4:29:
         4f:71:90:2f:c3:83:52:a5:d2:f1:cf:dc:2c:da:76:c5:15:4e:
         ea:bc:eb:d8:15:60:d5:3a:f8:16:a3:28:96:22:0d:2e:a7:bc:
         83:f9:bb:bd:1b:c8:97:98:09:63:c5:f6:0f:7d:be:37:e2:27:
         30:07:e3:54:e1:15:fb:09:39:52:72:2f:0c:25:a6:3f:64:86:
         d1:f6:f2:42:60:24:94:72:1c:f3:0d:e9:38:e5:98:be:fd:04:
         c0:31:44:3e
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6nlDs0IEWlawB+q4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIyZmRiMjctZTRmZS00ZDgxLTliZjQtZTEzYjFkYWY3
ZjUxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZGJjMWMyYWMtNzk4OS00MjJlLTliY2EtZmVhYTJmMzRjZDQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu+PxQEKiWNYjQjx3/s/ExAnkp/6cECKWdDQ
716mMVsY0w6Kpgv1DkmDfS4sXA+Qj7Bendyi3YNxOjYOxQgAdo5UppMR7RHjmzJs
MZTB/Lalt6BuTeqnQwJXnI925oU/VdpTmz8e98KClatXioGFvIwXVv5hcBJ9pBDG
BPSdW9REo8u3rVSnSbh39YMifPx0mpElKbWVlkjMzRgjImm9vGobM7mRzw5s64FD
hWO8N3/3qdZ63+zRuPI2IuMcI7vyBIwlrHjup0EPvXgOrQXIX+jcWzmWG2yMR4xw
dkqx/1bNvfkjq/NodFSM/rUWA96PlbYzZBBTrmM6uEHQo/nomQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFL9jOvRLGJiKTHG/BkKOPJUcE84nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMjJm
ZGIyNy1lNGZlLTRkODEtOWJmNC1lMTNiMWRhZjdmNTEvNjhlNWNmN2ItYmY0MS0z
ZTJmLWJlMTUtOWU4Zjk2NDBiODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTIyZmRiMjctZTRmZS00ZDgxLTli
ZjQtZTEzYjFkYWY3ZjUxL2EyMmZkYjI3LWU0ZmUtNGQ4MS05YmY0LWUxM2IxZGFm
N2Y1MS5jcmwwHwYDVR0jBBgwFoAUt1cVv4naXOAxdOzv9stZsvi4OkAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMjJmZGIyNy1lNGZlLTRkODEtOWJmNC1lMTNi
MWRhZjdmNTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3pQEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAQ4FDDbas0GIn+oNgugvit3obOL+oTpSSej74VxRHKKm7mp/Ev3zQ
YBaWRtLxL7hvmfV240kfuMj2fDpom0Ir5R/zGDJDihTR7nLOkKxHIwkz2g0MHmI+
0uGY4HAoGwTguAKLP23hjPrEyuqTuXqt4OD6lTVrdiKWZxcSM+QTWKNnq4CJqn80
oeipKy1bznryDJD0n9rK+5NDY3cp6gSUg+QpT3GQL8ODUqXS8c/cLNp2xRVO6rzr
2BVg1Tr4FqMoliINLqe8g/m7vRvIl5gJY8X2D32+N+InMAfjVOEV+wk5UnIvDCWm
P2SG0fbyQmAklHIc8w3pOOWYvv0EwDFEPg==
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:50:16 2026 by rpki-client