Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/ba7544c9-2698-3c1d-882c-7ddabe9e62e2.roa
File:                     ba7544c9-2698-3c1d-882c-7ddabe9e62e2.roa (raw, json)
Hash identifier:          isCvF7hdgwQSovveFUBPJJh6UMTbWB2GjFYl3vDY7jw=
Subject key identifier:   63:20:2D:C7:DD:29:F5:C8:59:CD:AA:BB:01:F9:E1:A4:11:01:05:07
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584ED861DB406618C92F51A88F20
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/ba7544c9-2698-3c1d-882c-7ddabe9e62e2.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     15418
IP address blocks:        2607:f1c0:fe::/47 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:db:40:66:18:c9:2f:51:a8:8f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=22841e1a-c7d7-4a30-9550-a65e61690684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:07:96:8f:e1:57:4d:d3:e1:0c:72:a1:5e:4e:
                    84:6a:b2:b9:34:cc:94:c9:86:07:fd:b7:e1:94:ff:
                    eb:68:d8:09:eb:c1:ae:52:a2:a4:9c:d2:74:c0:f7:
                    5b:a6:c8:21:93:44:26:b3:b3:97:5c:4b:f4:3f:fb:
                    4d:36:80:86:a0:6d:20:78:19:cb:a0:aa:94:f0:3c:
                    1c:aa:66:e5:39:6a:7e:bd:22:8c:2f:c9:fc:96:43:
                    39:ac:b9:51:ef:15:f6:dc:84:bf:c4:37:e7:87:04:
                    a9:34:9b:10:95:a1:95:98:79:91:48:26:ce:ab:33:
                    1d:c8:e0:33:c1:51:f6:38:52:5e:67:8f:3a:37:6c:
                    b1:4c:ea:ca:26:be:1e:f7:f4:bc:0a:6e:59:f3:27:
                    cb:e9:a6:c2:00:0d:10:5e:7f:bf:58:14:63:cb:08:
                    45:ba:cb:4c:ef:73:c2:64:d8:b0:41:63:c6:cd:6b:
                    1c:c3:3f:64:6b:e4:4f:45:8f:59:f6:24:27:63:bc:
                    43:36:0e:ec:54:73:6d:9a:5e:8b:38:a8:a8:ad:e1:
                    cd:12:93:fc:9f:95:5c:b5:4b:5e:df:fb:5f:a7:73:
                    1a:6f:39:0b:76:2c:a5:40:f9:18:31:f6:d8:da:dd:
                    af:e9:4d:b2:25:74:d0:49:75:ef:93:f2:47:eb:25:
                    78:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:20:2D:C7:DD:29:F5:C8:59:CD:AA:BB:01:F9:E1:A4:11:01:05:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/ba7544c9-2698-3c1d-882c-7ddabe9e62e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f1c0:fe::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:ef:32:d3:2d:d8:3f:7b:78:83:9e:df:6e:12:a1:95:e0:85:
         d8:65:76:f6:6c:a8:36:52:47:69:0b:36:88:2e:4f:04:82:45:
         bb:bf:cb:6b:26:b5:6a:5d:06:ab:a6:db:92:42:9d:ea:15:35:
         a5:69:d4:ce:2a:5a:e7:63:32:0d:8c:a5:fd:3c:2b:15:a6:2a:
         f7:74:2b:98:9d:db:b8:99:64:e9:6d:76:d4:00:fc:88:f9:f2:
         f2:52:56:45:a8:64:54:00:d1:cd:42:2b:9e:5d:e9:77:27:5a:
         55:fa:e6:c6:c9:a4:f2:17:98:41:52:12:e8:b7:a1:bd:6c:e8:
         6c:df:d0:f5:53:15:57:4b:0d:50:bd:33:a9:ac:bb:59:19:47:
         b9:71:15:bf:76:85:b5:3f:92:ed:7b:c7:a7:cf:3f:4e:b3:a2:
         5f:45:73:e3:6d:ac:7a:56:c2:17:6e:d6:86:7a:82:4f:b7:9d:
         83:99:d5:91:1a:45:90:45:bd:51:43:dc:8b:30:cf:af:62:1b:
         e0:2c:2b:c4:5e:75:65:4f:85:45:29:cb:f9:db:ba:eb:61:96:
         90:16:46:96:a9:46:60:c8:7d:55:a1:ab:ae:b0:4e:c9:5f:d2:
         50:8c:76:70:fc:d8:39:9b:23:21:01:dc:e3:d2:5c:f7:cb:90:
         6e:3e:b4:5b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7YYdtAZhjJL1GojyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JhNzk5ODgtODBiYy00ZmNiLThmYWYtNjI0NDAwZDVm
MWNlMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
MjI4NDFlMWEtYzdkNy00YTMwLTk1NTAtYTY1ZTYxNjkwNjg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAeWj+FXTdPhDHKhXk6EarK5NMyUyYYH/bfh
lP/raNgJ68GuUqKknNJ0wPdbpsghk0Qms7OXXEv0P/tNNoCGoG0geBnLoKqU8Dwc
qmblOWp+vSKML8n8lkM5rLlR7xX23IS/xDfnhwSpNJsQlaGVmHmRSCbOqzMdyOAz
wVH2OFJeZ486N2yxTOrKJr4e9/S8Cm5Z8yfL6abCAA0QXn+/WBRjywhFustM73PC
ZNiwQWPGzWscwz9ka+RPRY9Z9iQnY7xDNg7sVHNtml6LOKioreHNEpP8n5VctUte
3/tfp3MabzkLdiylQPkYMfbY2t2v6U2yJXTQSXXvk/JH6yV45wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGMgLcfdKfXIWc2quwH54aQRAQUHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3
OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0MDBkNWYxY2UvYmE3NTQ0YzktMjY5OC0z
YzFkLTg4MmMtN2RkYWJlOWU2MmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2JhNzk5ODgtODBiYy00ZmNiLThm
YWYtNjI0NDAwZDVmMWNlLzdiYTc5OTg4LTgwYmMtNGZjYi04ZmFmLTYyNDQwMGQ1
ZjFjZS5jcmwwHwYDVR0jBBgwFoAUNBe8v2tKYwrKo8WIvEUP5ZR5xFowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0
MDBkNWYxY2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgfxwAD+
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIjvMtMt2D97eIOe324SoZXghdhldvZsqDZSR2kLNoguTwSCRbu/
y2smtWpdBqum25JCneoVNaVp1M4qWudjMg2Mpf08KxWmKvd0K5id27iZZOltdtQA
/Ij58vJSVkWoZFQA0c1CK55d6XcnWlX65sbJpPIXmEFSEui3ob1s6Gzf0PVTFVdL
DVC9M6msu1kZR7lxFb92hbU/ku17x6fPP06zol9Fc+NtrHpWwhdu1oZ6gk+3nYOZ
1ZEaRZBFvVFD3Iswz69iG+AsK8RedWVPhUUpy/nbuuthlpAWRpapRmDIfVWhq66w
Tslf0lCMdnD82DmbIyEB3OPSXPfLkG4+tFs=
-----END CERTIFICATE-----
Generated at Fri Sep 18 22:10:11 2026 by rpki-client