Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/678023c5-89c4-337b-8c32-69a1e588ee14.roa
File:                     678023c5-89c4-337b-8c32-69a1e588ee14.roa (raw, json)
Hash identifier:          x7/z9VRruorXGp9Rsc/Cy4bj5PnvYWnci/BQxUtK9eY=
Subject key identifier:   21:BC:BE:82:6D:8B:59:18:DD:46:98:37:60:29:B2:79:72:49:97:0C
Certificate issuer:       /CN=a4f253af-de59-456e-9354-4078d22e8677
Certificate serial:       010D0C9F4328584EA9EF0042354F50F7F91AD328
Authority key identifier: 81:27:DB:F0:81:88:E4:39:2A:DF:35:A7:D3:68:47:1F:89:EC:9A:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/678023c5-89c4-337b-8c32-69a1e588ee14.roa
Signing time:             Wed 29 Jul 2026 21:41:41 +0000
ROA not before:           Wed 29 Jul 2026 21:41:41 +0000
ROA not after:            Tue 27 Oct 2026 21:41:17 +0000
asID:                     396982
IP address blocks:        2607:4240:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/a4f253af-de59-456e-9354-4078d22e8677.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/a4f253af-de59-456e-9354-4078d22e8677.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a9:ef:00:42:35:4f:50:f7:f9:1a:d3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f253af-de59-456e-9354-4078d22e8677
        Validity
            Not Before: Jul 29 21:41:41 2026 GMT
            Not After : Oct 27 21:41:17 2026 GMT
        Subject: CN=151579e3-4ba3-4f1c-b654-f86ec8afaa49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d1:11:7d:bd:34:ed:b8:22:9a:1d:48:37:58:
                    7d:fa:4d:1d:89:be:22:a1:75:56:b9:8c:d3:33:ff:
                    43:d9:e1:a1:dd:ca:2b:a9:fe:78:4e:a1:e6:0b:14:
                    19:7e:1a:45:86:2a:bd:d0:52:0e:dc:ae:fb:5b:7e:
                    d8:71:9b:0d:a3:64:eb:97:b9:a3:43:dd:b8:6f:94:
                    80:ca:9c:f6:df:2a:aa:24:f9:c7:f8:d1:52:91:e8:
                    69:14:a6:c2:3b:e0:fe:73:21:fd:27:20:3c:e8:68:
                    fb:e5:be:5c:34:d7:6e:c3:42:60:69:e3:d8:9c:04:
                    6f:ff:ac:f0:70:e6:38:5c:27:f6:17:ac:c7:14:05:
                    1e:4f:a2:86:f3:02:06:f7:29:66:34:f2:02:34:17:
                    27:6d:fc:c5:bb:e3:c7:2d:01:40:d4:39:2c:69:3c:
                    14:a6:4c:2a:d6:c2:40:a7:d3:f0:ec:5a:f5:1a:e3:
                    22:80:26:e6:9c:9f:f2:5e:e3:d1:16:7b:30:b0:5f:
                    8d:b8:67:8d:c3:49:5c:a8:99:11:dd:c8:21:49:40:
                    12:3a:84:e5:08:a3:a4:8f:bf:25:ae:ec:60:12:e7:
                    8b:88:4a:72:0f:03:90:a2:47:84:a1:8f:0c:a0:21:
                    ab:e9:e4:eb:04:ce:ee:78:0a:48:45:1e:f4:38:dd:
                    9d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BC:BE:82:6D:8B:59:18:DD:46:98:37:60:29:B2:79:72:49:97:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/678023c5-89c4-337b-8c32-69a1e588ee14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/a4f253af-de59-456e-9354-4078d22e8677.crl

            X509v3 Authority Key Identifier:
                keyid:81:27:DB:F0:81:88:E4:39:2A:DF:35:A7:D3:68:47:1F:89:EC:9A:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4240:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:c2:b8:1f:84:bb:3e:0d:0d:e4:0c:55:09:eb:b9:fb:7c:08:
         e0:5b:d2:92:e6:3a:38:e3:03:c5:64:92:a2:7e:32:2d:b0:1e:
         4d:e1:e5:0b:df:90:e3:5a:48:15:0d:6c:91:32:7e:9a:ca:7d:
         06:b1:2e:d4:b0:f9:c7:78:e1:87:e8:2f:11:58:e4:11:c6:e1:
         60:54:4c:69:97:3b:cb:4d:24:71:7f:cc:6b:ad:5c:ed:4c:e2:
         43:5e:80:a6:7c:76:5c:d4:06:80:8c:6a:9e:31:d4:ec:41:c9:
         fd:87:ea:a4:2f:93:41:82:eb:77:9e:e5:74:7c:4d:cd:56:db:
         12:56:76:93:bd:fe:33:38:1a:f1:85:7d:7e:8e:2a:cf:40:47:
         5a:ef:a5:b6:3a:60:3f:4a:e0:e0:c7:2b:0c:28:24:5e:48:fb:
         d5:cc:44:94:67:53:60:f5:77:73:5e:b1:cc:73:25:d2:bd:58:
         a5:55:b6:02:fc:7c:34:d3:b0:22:82:b1:e9:1a:16:36:23:61:
         26:6c:9b:e2:c0:e3:a9:8d:e2:fa:28:85:c0:db:c9:b8:0a:f2:
         9e:70:88:c5:80:2a:44:3b:e3:15:7f:c3:f2:14:b4:94:eb:33:
         a0:e8:f6:30:77:6b:c0:09:4b:a0:a0:ed:9b:a4:b8:9b:38:30:
         f8:28:7b:c1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6p7wBCNU9Q9/ka0ygwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTRmMjUzYWYtZGU1OS00NTZlLTkzNTQtNDA3OGQyMmU4
Njc3MB4XDTI2MDcyOTIxNDE0MVoXDTI2MTAyNzIxNDExN1owLzEtMCsGA1UEAxMk
MTUxNTc5ZTMtNGJhMy00ZjFjLWI2NTQtZjg2ZWM4YWZhYTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNERfb007bgimh1IN1h9+k0dib4ioXVWuYzT
M/9D2eGh3corqf54TqHmCxQZfhpFhiq90FIO3K77W37YcZsNo2Trl7mjQ924b5SA
ypz23yqqJPnH+NFSkehpFKbCO+D+cyH9JyA86Gj75b5cNNduw0JgaePYnARv/6zw
cOY4XCf2F6zHFAUeT6KG8wIG9ylmNPICNBcnbfzFu+PHLQFA1DksaTwUpkwq1sJA
p9Pw7Fr1GuMigCbmnJ/yXuPRFnswsF+NuGeNw0lcqJkR3cghSUASOoTlCKOkj78l
ruxgEueLiEpyDwOQokeEoY8MoCGr6eTrBM7ueApIRR70ON2d2QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCG8voJti1kY3UaYN2ApsnlySZcMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hNGYy
NTNhZi1kZTU5LTQ1NmUtOTM1NC00MDc4ZDIyZTg2NzcvNjc4MDIzYzUtODljNC0z
MzdiLThjMzItNjlhMWU1ODhlZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTRmMjUzYWYtZGU1OS00NTZlLTkz
NTQtNDA3OGQyMmU4Njc3L2E0ZjI1M2FmLWRlNTktNDU2ZS05MzU0LTQwNzhkMjJl
ODY3Ny5jcmwwHwYDVR0jBBgwFoAUgSfb8IGI5Dkq3zWn02hHH4nsmsAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hNGYyNTNhZi1kZTU5LTQ1NmUtOTM1NC00MDc4
ZDIyZTg2NzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdCQEAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG/CuB+Euz4NDeQMVQnruft8COBb0pLmOjjjA8VkkqJ+Mi2wHk3h
5QvfkONaSBUNbJEyfprKfQaxLtSw+cd44YfoLxFY5BHG4WBUTGmXO8tNJHF/zGut
XO1M4kNegKZ8dlzUBoCMap4x1OxByf2H6qQvk0GC63ee5XR8Tc1W2xJWdpO9/jM4
GvGFfX6OKs9AR1rvpbY6YD9K4ODHKwwoJF5I+9XMRJRnU2D1d3NescxzJdK9WKVV
tgL8fDTTsCKCsekaFjYjYSZsm+LA46mN4voohcDbybgK8p5wiMWAKkQ74xV/w/IU
tJTrM6Do9jB3a8AJS6Cg7ZukuJs4MPgoe8E=
-----END CERTIFICATE-----
Generated at Sat Aug 22 18:10:20 2026 by rpki-client