Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/927fe1cd-0450-3edf-9f91-6026bc74aeba.roa
File:                     927fe1cd-0450-3edf-9f91-6026bc74aeba.roa (raw, json)
Hash identifier:          VEKMngW5heY0mRI4hAH2yHohz58paHDGC6lypWqZOqM=
Subject key identifier:   84:85:E5:B0:2C:FB:EE:21:A1:29:B2:19:AB:11:60:F4:80:BC:41:C6
Certificate issuer:       /CN=dd7b3d8a-c070-4037-aed5-19b7f0828ef6
Certificate serial:       010D0C9F4328584F119D1955035C6468E0043D40
Authority key identifier: 52:4E:4C:8E:17:6F:9C:C5:8D:1C:22:04:A9:6B:AD:0B:40:E2:2D:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/927fe1cd-0450-3edf-9f91-6026bc74aeba.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     20473
IP address blocks:        2620:c7:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:19:55:03:5c:64:68:e0:04:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd7b3d8a-c070-4037-aed5-19b7f0828ef6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=296fd380-e00d-47a6-817f-56c32c01a9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3c:49:e0:48:bb:15:ed:17:18:4b:9b:bb:15:
                    10:bb:64:43:38:f1:b2:b3:32:a1:19:6e:19:16:8d:
                    65:4c:40:8e:84:aa:55:da:48:49:42:ac:0d:c1:2f:
                    b5:34:ac:9c:9d:d8:47:16:04:97:34:64:ed:ca:bc:
                    e9:8e:1b:ea:85:43:2b:4d:8d:5e:4f:ea:a9:72:04:
                    20:a8:ac:0c:25:61:61:fe:69:05:4c:a1:64:48:c1:
                    fc:d6:33:d2:dd:a3:f6:49:33:2b:94:ef:57:09:a4:
                    ee:70:5c:fa:6d:57:04:04:be:f0:08:f8:bd:1f:30:
                    fa:46:71:6b:71:ad:4e:1d:4f:ab:57:72:db:c7:b0:
                    d4:de:af:54:35:29:8c:37:18:a1:44:c9:c3:d2:fb:
                    7f:76:23:17:e0:15:6c:f2:41:c4:8a:12:8c:f2:b3:
                    af:99:cf:75:72:d4:18:4e:a5:8a:41:e5:51:7f:2c:
                    41:6a:0f:e8:cc:18:6e:9e:a6:74:3a:6c:43:83:6d:
                    a3:bf:1e:19:32:b5:3c:47:f1:7d:03:82:4c:6d:7a:
                    8f:04:a9:c4:4a:64:12:d1:1e:ff:d7:d4:27:60:94:
                    a0:1e:97:e0:32:b8:e0:a0:a0:05:14:cd:a2:9e:dd:
                    b1:17:d0:74:e7:b5:ba:72:65:b4:eb:1a:d1:25:95:
                    52:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:85:E5:B0:2C:FB:EE:21:A1:29:B2:19:AB:11:60:F4:80:BC:41:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/927fe1cd-0450-3edf-9f91-6026bc74aeba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.crl

            X509v3 Authority Key Identifier:
                keyid:52:4E:4C:8E:17:6F:9C:C5:8D:1C:22:04:A9:6B:AD:0B:40:E2:2D:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c7:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:73:97:ad:de:ae:29:05:d0:7e:81:09:f6:f9:eb:13:4c:76:
         e7:3b:61:ab:3d:aa:3c:5b:b6:50:0f:77:24:f6:54:de:81:06:
         bd:95:1e:88:03:be:60:82:54:c5:8c:52:66:f4:58:3b:ef:3c:
         f5:c7:ee:04:78:fc:07:fd:a0:00:67:16:2d:c6:97:b6:7f:41:
         a7:05:24:55:c5:ab:26:81:37:0f:85:62:7c:8d:0c:3f:94:c0:
         10:e2:f2:d6:a3:59:8a:91:11:85:b5:41:6e:4a:16:e0:24:d8:
         e4:a1:d2:07:e7:b2:ff:cf:6a:37:b0:65:a5:c4:8f:9a:49:00:
         6a:11:fa:c3:67:29:00:59:74:57:8c:76:6d:90:41:0f:25:19:
         ff:0a:a4:33:c9:0b:9a:45:ae:8e:38:bd:5f:c7:33:c3:10:ca:
         84:50:1a:7c:88:26:1c:6f:44:cd:29:bc:d0:f7:16:e4:e4:55:
         8c:7d:26:f1:51:25:42:4c:52:09:f5:29:d3:a8:6b:62:d2:64:
         47:bd:38:ae:b5:b3:c0:4e:c8:52:1a:31:ef:5f:d9:2c:3e:59:
         2b:5f:bd:72:ab:02:76:e8:e6:23:43:7c:45:e1:c9:85:8f:57:
         41:90:cb:be:14:76:52:5e:86:d3:aa:8b:a4:9c:8f:aa:14:d8:
         99:39:fe:0e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8RnRlVA1xkaOAEPUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ3YjNkOGEtYzA3MC00MDM3LWFlZDUtMTliN2YwODI4
ZWY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
Mjk2ZmQzODAtZTAwZC00N2E2LTgxN2YtNTZjMzJjMDFhOWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTxJ4Ei7Fe0XGEubuxUQu2RDOPGyszKhGW4Z
Fo1lTECOhKpV2khJQqwNwS+1NKycndhHFgSXNGTtyrzpjhvqhUMrTY1eT+qpcgQg
qKwMJWFh/mkFTKFkSMH81jPS3aP2STMrlO9XCaTucFz6bVcEBL7wCPi9HzD6RnFr
ca1OHU+rV3Lbx7DU3q9UNSmMNxihRMnD0vt/diMX4BVs8kHEihKM8rOvmc91ctQY
TqWKQeVRfyxBag/ozBhunqZ0OmxDg22jvx4ZMrU8R/F9A4JMbXqPBKnESmQS0R7/
19QnYJSgHpfgMrjgoKAFFM2int2xF9B057W6cmW06xrRJZVSyQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFISF5bAs++4hoSmyGasRYPSAvEHGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kZDdi
M2Q4YS1jMDcwLTQwMzctYWVkNS0xOWI3ZjA4MjhlZjYvOTI3ZmUxY2QtMDQ1MC0z
ZWRmLTlmOTEtNjAyNmJjNzRhZWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGQ3YjNkOGEtYzA3MC00MDM3LWFl
ZDUtMTliN2YwODI4ZWY2L2RkN2IzZDhhLWMwNzAtNDAzNy1hZWQ1LTE5YjdmMDgy
OGVmNi5jcmwwHwYDVR0jBBgwFoAUUk5MjhdvnMWNHCIEqWutC0DiLRIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kZDdiM2Q4YS1jMDcwLTQwMzctYWVkNS0xOWI3
ZjA4MjhlZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAx2AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABZzl63erikF0H6BCfb56xNMduc7Yas9qjxbtlAPdyT2VN6BBr2V
HogDvmCCVMWMUmb0WDvvPPXH7gR4/Af9oABnFi3Gl7Z/QacFJFXFqyaBNw+FYnyN
DD+UwBDi8tajWYqREYW1QW5KFuAk2OSh0gfnsv/PajewZaXEj5pJAGoR+sNnKQBZ
dFeMdm2QQQ8lGf8KpDPJC5pFro44vV/HM8MQyoRQGnyIJhxvRM0pvND3FuTkVYx9
JvFRJUJMUgn1KdOoa2LSZEe9OK61s8BOyFIaMe9f2Sw+WStfvXKrAnbo5iNDfEXh
yYWPV0GQy74UdlJehtOqi6Scj6oU2Jk5/g4=
-----END CERTIFICATE-----
Generated at Sun Sep 13 13:24:22 2026 by rpki-client