Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/2e7fedc6-4231-3453-9c5a-bd24e5304959.roa
File:                     2e7fedc6-4231-3453-9c5a-bd24e5304959.roa (raw, json)
Hash identifier:          xqdv/xhuFKZoAJqUDQ9Iuk70FKIXWpMCTmHyCbKe+ao=
Subject key identifier:   AA:D7:31:75:4A:E0:1E:01:38:CC:D6:F4:80:84:B6:06:77:69:FB:F4
Certificate issuer:       /CN=7a2be303-4525-4433-b220-b1c6b5052945
Certificate serial:       010D0C9F4328584EED521050C406C48560382700
Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/2e7fedc6-4231-3453-9c5a-bd24e5304959.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     64269
IP address blocks:        2604:28c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:10:50:c4:06:c4:85:60:38:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=d022e802-f391-4445-b2bb-a5d33f04f32a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:16:c0:92:ba:39:de:fc:ee:f6:aa:a2:8f:71:
                    58:d3:e8:37:c5:1d:9e:fa:dd:8c:83:6e:31:b0:33:
                    ba:fe:7d:18:47:5a:1b:d2:63:0e:37:ab:87:20:58:
                    4d:7d:a7:64:a5:26:17:63:d1:e8:a4:8c:63:43:dc:
                    da:f0:17:ff:b9:fa:4e:49:4a:72:34:85:41:da:3e:
                    77:b2:79:3d:2b:e8:00:7b:28:4c:8d:b2:08:03:c9:
                    97:31:9e:7b:f7:95:a3:a2:78:c5:9f:72:2d:30:3e:
                    e4:fa:f2:65:4e:8f:05:b8:41:a7:d4:ae:47:14:f5:
                    3e:9d:6f:48:e1:d3:e5:05:a1:30:39:ad:94:5c:57:
                    22:30:83:f4:0c:40:93:2f:b6:a5:9b:f8:b7:77:04:
                    2f:a0:2f:c8:10:19:e3:d2:af:23:36:bf:16:97:8b:
                    57:3d:e7:45:9d:98:72:f8:69:33:a5:83:38:f7:06:
                    87:e5:8b:f1:61:27:e6:dc:fa:cc:c9:2d:81:b4:ab:
                    6e:47:d6:db:4e:e3:ee:ed:f9:0b:85:b9:b7:3c:29:
                    09:d6:3b:92:4d:27:b9:6b:bd:e6:f7:f9:43:50:ee:
                    ff:38:20:99:6a:71:0d:7f:a4:f0:27:cd:c7:b3:84:
                    38:a5:ec:24:23:d3:71:ab:2e:db:d9:52:b3:c8:7f:
                    75:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D7:31:75:4A:E0:1E:01:38:CC:D6:F4:80:84:B6:06:77:69:FB:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/2e7fedc6-4231-3453-9c5a-bd24e5304959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:28c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:2e:d3:ed:87:5f:61:2a:b8:7d:6d:d0:39:32:19:f9:9f:ea:
         4d:9d:c7:fd:b3:e2:5d:e9:c1:aa:98:a8:b3:ab:a0:69:0f:8b:
         a7:96:6f:6d:e8:0b:d9:3b:c2:fc:60:5a:61:25:e0:ef:63:62:
         13:8f:4a:6c:bc:fc:f5:d6:1e:58:51:64:f0:b5:c3:ca:f0:bc:
         5f:cc:bb:bd:d1:05:06:d1:58:fe:3b:87:20:59:36:08:0e:a6:
         c7:6e:9d:10:aa:93:f9:75:f0:6a:72:3a:fc:22:f0:6e:f4:28:
         74:1a:b2:6f:a7:ff:b7:58:dc:ab:b8:9f:80:56:a7:67:36:41:
         c2:c4:76:90:db:ab:d8:07:ac:68:10:9b:74:f8:7a:59:b8:5c:
         6b:7b:cc:8a:1e:5b:8f:b5:48:22:73:40:a6:b8:7f:e4:88:b2:
         62:2e:b9:bf:fd:ab:36:92:53:79:02:3d:71:aa:b3:9e:ea:1e:
         ec:27:89:62:f3:08:2b:68:27:fe:9c:63:06:d5:13:ea:ec:c4:
         2b:05:b6:3c:e9:f3:83:e7:1e:c4:2b:a3:5d:36:b2:1e:e0:5b:
         b3:cc:b6:bc:3f:d3:bd:8a:9f:71:5b:cb:c9:2f:02:17:37:88:
         2a:bd:81:56:46:12:c7:2e:1a:6b:5e:34:94:41:1a:de:f9:48:
         e5:88:15:6a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7tUhBQxAbEhWA4JwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy
OTQ1MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk
ZDAyMmU4MDItZjM5MS00NDQ1LWIyYmItYTVkMzNmMDRmMzJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBbAkro53vzu9qqij3FY0+g3xR2e+t2Mg24x
sDO6/n0YR1ob0mMON6uHIFhNfadkpSYXY9HopIxjQ9za8Bf/ufpOSUpyNIVB2j53
snk9K+gAeyhMjbIIA8mXMZ5795WjonjFn3ItMD7k+vJlTo8FuEGn1K5HFPU+nW9I
4dPlBaEwOa2UXFciMIP0DECTL7alm/i3dwQvoC/IEBnj0q8jNr8Wl4tXPedFnZhy
+GkzpYM49waH5YvxYSfm3PrMyS2BtKtuR9bbTuPu7fkLhbm3PCkJ1juSTSe5a73m
9/lDUO7/OCCZanENf6TwJ83Hs4Q4pewkI9Nxqy7b2VKzyH91nwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKrXMXVK4B4BOMzW9ICEtgZ3afv0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi
ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvMmU3ZmVkYzYtNDIzMS0z
NDUzLTljNWEtYmQyNGU1MzA0OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy
MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1
Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2
YjUwNTI5NDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQowDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQASLtPth19hKrh9bdA5Mhn5n+pNncf9s+Jd6cGqmKizq6BpD4unlm9t
6AvZO8L8YFphJeDvY2ITj0psvPz11h5YUWTwtcPK8LxfzLu90QUG0Vj+O4cgWTYI
DqbHbp0QqpP5dfBqcjr8IvBu9Ch0GrJvp/+3WNyruJ+AVqdnNkHCxHaQ26vYB6xo
EJt0+HpZuFxre8yKHluPtUgic0CmuH/kiLJiLrm//as2klN5Aj1xqrOe6h7sJ4li
8wgraCf+nGMG1RPq7MQrBbY86fOD5x7EK6NdNrIe4FuzzLa8P9O9ip9xW8vJLwIX
N4gqvYFWRhLHLhprXjSUQRre+UjliBVq
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:26:17 2026 by rpki-client