Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/5804f869-6080-32c2-b9e4-b73d94e4428b.roa
File:                     5804f869-6080-32c2-b9e4-b73d94e4428b.roa (raw, json)
Hash identifier:          2Bw25lhJHMR4AJpbR5Ty1cg6uMe50tpycFGus2mUuUw=
Subject key identifier:   38:B1:63:9A:10:F1:D8:48:94:43:B4:8B:15:7B:14:C5:C6:C4:5C:14
Certificate issuer:       /CN=f7322b5f-0541-4784-9e5e-c4e8dd728e59
Certificate serial:       010D0C9F4328584E376487C44802E143522044C0
Authority key identifier: 3B:72:1A:C5:54:9A:F6:70:C0:81:FD:58:38:ED:59:4E:48:46:A3:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/5804f869-6080-32c2-b9e4-b73d94e4428b.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     8075
IP address blocks:        2620:129:f001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:87:c4:48:02:e1:43:52:20:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7322b5f-0541-4784-9e5e-c4e8dd728e59
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=3fa04f63-09f7-4a43-812b-6259895323e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cd:af:82:aa:9d:07:5e:84:73:31:43:ee:d4:
                    39:9d:17:1b:56:34:13:cc:ce:76:e9:ed:bf:6c:39:
                    45:f6:b0:a8:aa:74:25:eb:e9:82:b1:c9:f3:66:43:
                    87:c8:75:79:59:e9:55:c6:55:8e:40:ef:88:1d:c8:
                    61:5f:ad:91:9f:44:51:47:c0:6a:7a:7e:4b:48:8c:
                    bc:5f:29:45:a7:72:b3:7b:f2:2b:48:78:16:59:16:
                    e1:48:0a:22:0a:e7:dc:93:11:87:90:5d:29:8d:52:
                    26:6a:9c:e8:a4:a2:aa:41:33:23:31:2a:70:1c:2c:
                    6c:0b:21:90:6d:25:ac:a2:9b:16:26:2b:88:1c:68:
                    d3:81:3e:31:56:e9:a2:1e:8e:bb:4b:bf:eb:43:a4:
                    2e:47:c4:1a:23:76:87:38:9b:f8:84:75:d4:94:7a:
                    79:7f:e0:50:c5:d9:c5:20:67:ae:3b:8e:71:e5:18:
                    06:20:59:7c:87:c6:e1:fa:09:31:61:41:43:6f:cc:
                    11:1e:a0:19:f9:a1:4b:c4:c8:a7:c7:be:a2:a1:bb:
                    79:3b:5d:ca:0b:13:98:e7:4a:8d:20:65:f8:17:6d:
                    72:3d:45:6b:ff:e3:d3:76:4a:ce:8c:a4:df:4d:30:
                    d7:80:4f:d6:f8:8d:19:4f:00:fe:05:ac:86:6d:0c:
                    90:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B1:63:9A:10:F1:D8:48:94:43:B4:8B:15:7B:14:C5:C6:C4:5C:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/5804f869-6080-32c2-b9e4-b73d94e4428b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59/f7322b5f-0541-4784-9e5e-c4e8dd728e59.crl

            X509v3 Authority Key Identifier:
                keyid:3B:72:1A:C5:54:9A:F6:70:C0:81:FD:58:38:ED:59:4E:48:46:A3:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f7322b5f-0541-4784-9e5e-c4e8dd728e59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:129:f001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:31:39:2a:68:59:00:5f:52:da:bf:44:41:42:b9:e3:dc:f1:
         63:6d:35:2b:6c:e5:8d:1a:0b:54:53:a8:02:ec:76:e9:88:bf:
         40:a3:af:b9:f4:0f:0b:6d:f2:b1:30:09:fc:9c:20:cb:e3:47:
         3d:6a:b5:68:9a:3e:86:7f:f4:15:b0:94:d2:30:14:88:ad:7a:
         86:b4:7e:40:e9:21:de:80:e6:87:0b:0d:5c:97:79:99:e1:5e:
         94:45:0c:46:52:1e:1a:21:99:50:ab:0d:fb:8e:ab:fa:da:6b:
         a3:cb:ec:14:41:ff:0f:c7:6d:ce:e2:c6:72:de:0f:7b:4b:00:
         b1:31:ef:f6:4b:76:86:01:02:a8:fb:73:22:3d:bc:20:1e:b6:
         16:8d:7f:c4:9c:ad:9f:e8:d6:f5:41:76:c7:50:b4:3a:f5:99:
         01:3b:ed:0e:c4:9d:37:ea:cf:ca:9d:95:27:f7:43:09:4b:50:
         68:77:72:cd:b9:bf:56:a1:ad:c0:0e:61:2f:2f:d0:75:f7:a6:
         df:3a:99:cc:c1:ca:b9:f3:57:48:7b:be:5d:8b:d5:f6:ba:cc:
         1d:13:bc:5e:d2:bf:78:eb:4d:27:23:aa:74:4a:40:46:a7:6c:
         3c:72:87:88:7d:40:75:72:3c:70:0a:80:91:b7:64:74:3b:8e:
         a2:35:22:df
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE43ZIfESALhQ1IgRMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjczMjJiNWYtMDU0MS00Nzg0LTllNWUtYzRlOGRkNzI4
ZTU5MB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk
M2ZhMDRmNjMtMDlmNy00YTQzLTgxMmItNjI1OTg5NTMyM2U0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM2vgqqdB16EczFD7tQ5nRcbVjQTzM526e2/
bDlF9rCoqnQl6+mCscnzZkOHyHV5WelVxlWOQO+IHchhX62Rn0RRR8Bqen5LSIy8
XylFp3Kze/IrSHgWWRbhSAoiCufckxGHkF0pjVImapzopKKqQTMjMSpwHCxsCyGQ
bSWsopsWJiuIHGjTgT4xVumiHo67S7/rQ6QuR8QaI3aHOJv4hHXUlHp5f+BQxdnF
IGeuO45x5RgGIFl8h8bh+gkxYUFDb8wRHqAZ+aFLxMinx76iobt5O13KCxOY50qN
IGX4F21yPUVr/+PTdkrOjKTfTTDXgE/W+I0ZTwD+BayGbQyQZwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDixY5oQ8dhIlEO0ixV7FMXGxFwUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mNzMy
MmI1Zi0wNTQxLTQ3ODQtOWU1ZS1jNGU4ZGQ3MjhlNTkvNTgwNGY4NjktNjA4MC0z
MmMyLWI5ZTQtYjczZDk0ZTQ0MjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjczMjJiNWYtMDU0MS00Nzg0LTll
NWUtYzRlOGRkNzI4ZTU5L2Y3MzIyYjVmLTA1NDEtNDc4NC05ZTVlLWM0ZThkZDcy
OGU1OS5jcmwwHwYDVR0jBBgwFoAUO3IaxVSa9nDAgf1YOO1ZTkhGo9UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9mNzMyMmI1Zi0wNTQxLTQ3ODQtOWU1ZS1jNGU4
ZGQ3MjhlNTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABKfAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACcxOSpoWQBfUtq/REFCuePc8WNtNSts5Y0aC1RTqALsdumIv0Cj
r7n0Dwtt8rEwCfycIMvjRz1qtWiaPoZ/9BWwlNIwFIiteoa0fkDpId6A5ocLDVyX
eZnhXpRFDEZSHhohmVCrDfuOq/raa6PL7BRB/w/Hbc7ixnLeD3tLALEx7/ZLdoYB
Aqj7cyI9vCAethaNf8ScrZ/o1vVBdsdQtDr1mQE77Q7EnTfqz8qdlSf3QwlLUGh3
cs25v1ahrcAOYS8v0HX3pt86mczByrnzV0h7vl2L1fa6zB0TvF7Sv3jrTScjqnRK
QEanbDxyh4h9QHVyPHAKgJG3ZHQ7jqI1It8=
-----END CERTIFICATE-----
Generated at Wed Jul 15 01:49:12 2026 by rpki-client