Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/7d68b9ce-b762-3e17-8013-4ff3f5937365.roa
File:                     7d68b9ce-b762-3e17-8013-4ff3f5937365.roa (raw, json)
Hash identifier:          LQF82EPxBvLnzzjaSUKXkleFmW0jFRW7Ms5wLNIQZg8=
Subject key identifier:   30:9A:38:40:20:55:15:6A:D4:D8:31:7F:74:E5:44:3C:47:B4:49:6F
Certificate issuer:       /CN=ad03f8e2-2c6b-41ab-8a4f-a20f958719ec
Certificate serial:       010D0C9F4328584E9EAFE5FB0572604B12CD6400
Authority key identifier: 5D:5F:F1:BE:36:F6:F7:F7:0E:7B:B6:2D:C5:C6:79:16:5E:87:55:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/7d68b9ce-b762-3e17-8013-4ff3f5937365.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     401268
IP address blocks:        2602:f86d::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:e5:fb:05:72:60:4b:12:cd:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad03f8e2-2c6b-41ab-8a4f-a20f958719ec
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=88d63c4a-16e4-4444-a2a9-162119f81677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:62:93:d4:88:51:4f:c3:70:78:59:87:d3:a5:
                    bd:a5:a7:71:d8:37:59:2e:d4:8c:49:dd:7d:e8:f2:
                    fc:05:20:b0:7d:d2:5d:0f:96:a8:54:aa:93:01:98:
                    41:c7:7d:a2:f5:54:d6:69:c6:f4:3e:5c:58:07:da:
                    de:b7:6f:6c:e9:21:38:2c:ae:90:17:90:a6:f4:0a:
                    75:dc:48:02:8d:5d:5d:a0:d7:e3:38:95:c6:30:ae:
                    36:0c:8c:3a:f1:7a:67:a4:b0:80:d0:8c:7b:e9:99:
                    3a:14:bb:4e:fd:ee:23:61:11:a2:d1:8b:b9:fa:ee:
                    2b:fa:31:ac:83:4e:bb:0d:ab:99:0c:eb:5d:fb:63:
                    2b:19:60:eb:19:54:5b:46:cd:18:12:36:19:42:82:
                    95:0c:41:57:c0:93:68:47:82:2c:4e:22:2d:61:80:
                    d4:27:a3:de:c3:ce:1b:f0:04:b8:ac:1b:32:52:60:
                    04:d7:9e:86:81:98:43:9d:9b:da:cd:79:d8:20:4f:
                    e8:65:ec:b8:03:0d:27:53:f0:92:c7:cd:21:d4:52:
                    49:4f:6f:a6:71:ce:c7:06:69:e9:61:64:f6:7d:b0:
                    b6:b3:cd:20:76:92:79:e2:50:49:a2:f6:a2:bc:dc:
                    2a:ec:2a:aa:64:a6:02:f9:42:14:eb:17:83:ab:e3:
                    9f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9A:38:40:20:55:15:6A:D4:D8:31:7F:74:E5:44:3C:47:B4:49:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/7d68b9ce-b762-3e17-8013-4ff3f5937365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.crl

            X509v3 Authority Key Identifier:
                keyid:5D:5F:F1:BE:36:F6:F7:F7:0E:7B:B6:2D:C5:C6:79:16:5E:87:55:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f86d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:71:15:c0:dc:be:ce:5a:a6:e8:83:ee:9a:68:08:76:06:dd:
         56:82:69:6a:ed:bf:08:5f:8a:93:53:73:82:60:7b:2b:4a:62:
         7c:2e:74:17:30:8d:54:05:89:26:65:40:b2:18:85:2c:3c:66:
         42:05:5d:e0:a6:56:6f:99:4d:85:c5:09:0a:56:4e:dc:53:b0:
         cb:69:b2:4b:f7:84:6f:77:81:e2:bd:e8:9c:90:71:b8:21:b4:
         6c:2a:9c:72:ce:da:2e:ea:3d:02:a9:60:96:35:53:2d:a6:ad:
         23:df:47:13:4d:5f:39:2f:bb:54:b5:14:bd:61:37:35:78:e3:
         60:a7:e5:79:e4:7c:d8:ca:47:86:59:f2:68:2d:80:54:ff:37:
         8e:dc:54:c3:c9:d8:bd:6e:cc:ec:e8:82:c2:d6:a8:2f:41:9c:
         2b:fe:05:1c:63:25:09:fa:7a:a0:5b:01:36:0c:5b:7e:0d:66:
         69:1d:ea:8f:9b:af:67:30:b8:43:56:bc:28:be:4f:c8:89:23:
         a7:5a:29:f4:5d:02:7b:67:47:1b:cc:31:23:b5:d4:33:6c:f8:
         f3:75:1a:f2:c9:73:b5:19:1e:c1:4a:03:7f:a9:fe:ad:d4:df:
         aa:aa:46:05:2a:2d:f7:fa:88:63:39:2a:60:02:d6:5f:6d:3d:
         58:63:2c:e5
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6er+X7BXJgSxLNZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWQwM2Y4ZTItMmM2Yi00MWFiLThhNGYtYTIwZjk1ODcx
OWVjMB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk
ODhkNjNjNGEtMTZlNC00NDQ0LWEyYTktMTYyMTE5ZjgxNjc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GKT1IhRT8NweFmH06W9padx2DdZLtSMSd19
6PL8BSCwfdJdD5aoVKqTAZhBx32i9VTWacb0PlxYB9ret29s6SE4LK6QF5Cm9Ap1
3EgCjV1doNfjOJXGMK42DIw68XpnpLCA0Ix76Zk6FLtO/e4jYRGi0Yu5+u4r+jGs
g067DauZDOtd+2MrGWDrGVRbRs0YEjYZQoKVDEFXwJNoR4IsTiItYYDUJ6Pew84b
8AS4rBsyUmAE156GgZhDnZvazXnYIE/oZey4Aw0nU/CSx80h1FJJT2+mcc7HBmnp
YWT2fbC2s80gdpJ54lBJovaivNwq7CqqZKYC+UIU6xeDq+OfYwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDCaOEAgVRVq1Ngxf3TlRDxHtElvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZDAz
ZjhlMi0yYzZiLTQxYWItOGE0Zi1hMjBmOTU4NzE5ZWMvN2Q2OGI5Y2UtYjc2Mi0z
ZTE3LTgwMTMtNGZmM2Y1OTM3MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWQwM2Y4ZTItMmM2Yi00MWFiLThh
NGYtYTIwZjk1ODcxOWVjL2FkMDNmOGUyLTJjNmItNDFhYi04YTRmLWEyMGY5NTg3
MTllYy5jcmwwHwYDVR0jBBgwFoAUXV/xvjb29/cOe7YtxcZ5Fl6HVbwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hZDAzZjhlMi0yYzZiLTQxYWItOGE0Zi1hMjBm
OTU4NzE5ZWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4bQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEACHEVwNy+zlqm6IPummgIdgbdVoJpau2/CF+Kk1NzgmB7K0pifC50
FzCNVAWJJmVAshiFLDxmQgVd4KZWb5lNhcUJClZO3FOwy2myS/eEb3eB4r3onJBx
uCG0bCqccs7aLuo9AqlgljVTLaatI99HE01fOS+7VLUUvWE3NXjjYKfleeR82MpH
hlnyaC2AVP83jtxUw8nYvW7M7OiCwtaoL0GcK/4FHGMlCfp6oFsBNgxbfg1maR3q
j5uvZzC4Q1a8KL5PyIkjp1op9F0Ce2dHG8wxI7XUM2z483Ua8slztRkewUoDf6n+
rdTfqqpGBSot9/qIYzkqYALWX209WGMs5Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 20:36:27 2026 by rpki-client