Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/ad247e1c-c7f5-33b6-b8b4-0592e7c01677.roa
File:                     ad247e1c-c7f5-33b6-b8b4-0592e7c01677.roa (raw, json)
Hash identifier:          T7TRSlLVBsiXOYjYNjvkNdbpfqHH1xrgXR8IpyIvvNU=
Subject key identifier:   BF:87:00:D6:4B:75:8E:99:B9:06:5D:EC:0B:F9:CC:AF:BB:58:DF:4F
Certificate issuer:       /CN=b04c27dd-ce06-4d0a-ae84-1d675e85ce59
Certificate serial:       010D0C9F4328584EA78739694450040172DAC840
Authority key identifier: 0D:51:66:96:3A:07:C0:C9:56:4D:30:56:AC:3A:FF:0C:9C:F4:19:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/ad247e1c-c7f5-33b6-b8b4-0592e7c01677.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     32024
IP address blocks:        2607:69c0:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:39:69:44:50:04:01:72:da:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04c27dd-ce06-4d0a-ae84-1d675e85ce59
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=348ae7fd-9950-4e58-bd11-10bda83f7fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dd:fe:d9:7d:19:19:b0:51:11:20:f5:01:6f:
                    b6:45:85:35:8b:4d:bc:b5:81:32:d9:17:2c:30:cb:
                    82:a7:1a:b8:28:f5:78:64:66:ac:f5:37:73:51:1e:
                    3b:fa:cf:fc:3a:fc:d6:ab:6c:92:49:d5:47:d9:aa:
                    1c:86:e1:0e:12:54:4f:3a:63:31:d2:4d:15:17:1f:
                    04:75:39:20:e9:2b:02:82:78:cc:c9:c7:da:c2:46:
                    5a:e9:52:bc:c7:2b:f9:80:61:4e:2f:0b:06:f0:b0:
                    52:25:ba:b4:47:7c:6f:03:ef:e1:f8:ef:2e:78:94:
                    ec:3c:0e:fc:b6:e3:5f:de:3f:16:15:8b:ed:a7:d8:
                    6b:54:89:e3:97:88:b7:f5:e2:64:3d:30:33:02:8f:
                    29:62:07:c5:c0:11:c5:79:64:59:65:b3:da:8d:d9:
                    e0:c6:70:66:db:35:32:ee:65:f0:3a:e7:65:f1:0d:
                    43:48:ba:e7:e8:4d:4a:4c:06:30:3d:a3:30:13:3e:
                    c8:85:99:b3:2c:e2:34:a5:fb:6f:67:52:70:b6:da:
                    ec:95:bd:39:aa:61:5d:21:55:fc:da:93:cf:69:9f:
                    fa:01:3b:c4:59:f5:76:36:c9:84:7b:f4:95:af:41:
                    1e:31:44:bc:fb:80:73:1d:21:c6:5a:d0:d8:1d:ee:
                    c8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:87:00:D6:4B:75:8E:99:B9:06:5D:EC:0B:F9:CC:AF:BB:58:DF:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/ad247e1c-c7f5-33b6-b8b4-0592e7c01677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.crl

            X509v3 Authority Key Identifier:
                keyid:0D:51:66:96:3A:07:C0:C9:56:4D:30:56:AC:3A:FF:0C:9C:F4:19:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:69c0:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:f4:6a:6c:c1:59:78:ea:b9:51:e6:9e:a6:73:4c:d0:ab:a8:
         45:f0:8e:e3:6b:31:c5:54:dd:d7:28:67:22:f8:5c:10:81:04:
         85:66:44:a2:d4:02:22:46:dc:9a:fa:8d:9e:f4:11:8b:b5:bc:
         7d:d4:a8:b0:d1:3c:23:7c:e5:fb:8c:65:01:3a:b3:0e:39:df:
         e0:d3:5e:c4:bc:b7:02:b2:02:ce:36:83:ca:97:c3:b7:ac:72:
         4c:9a:4a:46:fb:1a:58:ac:d1:8d:cd:d2:74:3a:0d:17:ac:6f:
         ca:ac:f7:e2:39:94:8d:ac:07:a8:d2:88:41:8f:d8:c3:b3:30:
         36:95:40:4b:d3:ab:d0:04:b1:60:75:8f:07:47:83:ff:cf:f6:
         a0:19:60:b0:4a:91:a8:ae:ae:31:a8:07:25:71:80:4d:58:a8:
         04:af:44:d9:55:07:26:30:37:29:f8:20:41:26:4b:58:b4:5f:
         1d:97:de:5b:19:79:78:04:96:f2:2a:ff:fa:21:5b:98:06:ef:
         21:90:d2:0d:de:78:d6:b3:1c:ad:25:e1:7f:19:35:19:e7:2c:
         36:b4:8d:9c:e4:38:f3:63:66:ad:5c:1c:b1:c5:39:04:26:57:
         41:67:39:72:36:6d:e7:40:d9:35:96:c6:87:56:ff:3b:0b:b3:
         de:1d:4e:c4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6nhzlpRFAEAXLayEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjA0YzI3ZGQtY2UwNi00ZDBhLWFlODQtMWQ2NzVlODVj
ZTU5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MzQ4YWU3ZmQtOTk1MC00ZTU4LWJkMTEtMTBiZGE4M2Y3ZmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA093+2X0ZGbBRESD1AW+2RYU1i028tYEy2Rcs
MMuCpxq4KPV4ZGas9TdzUR47+s/8OvzWq2ySSdVH2aochuEOElRPOmMx0k0VFx8E
dTkg6SsCgnjMycfawkZa6VK8xyv5gGFOLwsG8LBSJbq0R3xvA+/h+O8ueJTsPA78
tuNf3j8WFYvtp9hrVInjl4i39eJkPTAzAo8pYgfFwBHFeWRZZbPajdngxnBm2zUy
7mXwOudl8Q1DSLrn6E1KTAYwPaMwEz7IhZmzLOI0pftvZ1Jwttrslb05qmFdIVX8
2pPPaZ/6ATvEWfV2NsmEe/SVr0EeMUS8+4BzHSHGWtDYHe7INQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFL+HANZLdY6ZuQZd7Av5zK+7WN9PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iMDRj
MjdkZC1jZTA2LTRkMGEtYWU4NC0xZDY3NWU4NWNlNTkvYWQyNDdlMWMtYzdmNS0z
M2I2LWI4YjQtMDU5MmU3YzAxNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjA0YzI3ZGQtY2UwNi00ZDBhLWFl
ODQtMWQ2NzVlODVjZTU5L2IwNGMyN2RkLWNlMDYtNGQwYS1hZTg0LTFkNjc1ZTg1
Y2U1OS5jcmwwHwYDVR0jBBgwFoAUDVFmljoHwMlWTTBWrDr/DJz0GQIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iMDRjMjdkZC1jZTA2LTRkMGEtYWU4NC0xZDY3
NWU4NWNlNTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgdpwMAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAg/RqbMFZeOq5UeaepnNM0KuoRfCO42sxxVTd1yhnIvhcEIEEhWZE
otQCIkbcmvqNnvQRi7W8fdSosNE8I3zl+4xlATqzDjnf4NNexLy3ArICzjaDypfD
t6xyTJpKRvsaWKzRjc3SdDoNF6xvyqz34jmUjawHqNKIQY/Yw7MwNpVAS9Or0ASx
YHWPB0eD/8/2oBlgsEqRqK6uMagHJXGATVioBK9E2VUHJjA3KfggQSZLWLRfHZfe
Wxl5eASW8ir/+iFbmAbvIZDSDd541rMcrSXhfxk1GecsNrSNnOQ482NmrVwcscU5
BCZXQWc5cjZt50DZNZbGh1b/Owuz3h1OxA==
-----END CERTIFICATE-----
Generated at Thu Aug 13 21:57:45 2026 by rpki-client