Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/d9a77be0-fcbb-3955-a589-a5dde9b2b06a.roa
File:                     d9a77be0-fcbb-3955-a589-a5dde9b2b06a.roa (raw, json)
Hash identifier:          ffD+jWnnCnsdwJGB4hLBZ2Qs9ZGA7L3fpumJ0vadRMk=
Subject key identifier:   EF:51:E4:67:BA:97:2B:41:40:65:58:06:7C:26:23:46:A3:1B:29:30
Certificate issuer:       /CN=900e393b-502e-4acc-8781-1980cd140a32
Certificate serial:       010D0C9F4328584E78FF74C9643689AEFA397F80
Authority key identifier: F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/d9a77be0-fcbb-3955-a589-a5dde9b2b06a.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     812
IP address blocks:        2605:8d80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:74:c9:64:36:89:ae:fa:39:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900e393b-502e-4acc-8781-1980cd140a32
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=b741915a-1f8a-42f4-838c-04cc20fa086d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:32:e8:0b:81:67:a6:ec:fa:b2:2c:b4:0a:9b:
                    eb:59:e9:6c:23:d2:92:2a:ac:f9:ea:63:9f:00:80:
                    84:c9:9b:2d:1e:4b:96:7e:af:97:bf:f2:b6:8c:48:
                    64:0e:c0:88:cb:c2:fa:e6:77:5d:b1:ea:00:32:5e:
                    65:e7:3c:f9:a6:b1:c8:d3:42:21:7b:39:7d:47:55:
                    b7:be:3f:0a:48:8a:ff:1a:92:11:17:f9:1a:27:21:
                    d4:e4:c1:1e:8c:d4:77:7c:4d:ff:50:f4:3b:a8:ee:
                    38:e1:92:81:0c:c2:38:39:aa:8b:2b:79:02:4d:53:
                    ec:75:ce:bd:c0:e6:eb:60:cb:0d:ed:20:6d:0f:ea:
                    90:d6:9f:ff:a7:d1:6c:9e:aa:a0:37:e6:aa:dc:fd:
                    50:b0:48:c9:7f:ea:bb:6a:ce:06:d2:90:92:88:c9:
                    81:6f:03:7d:6b:b7:9b:e7:57:64:b0:72:be:05:e1:
                    05:cb:ea:ad:2f:14:58:52:cf:24:9b:b3:ef:e3:71:
                    fd:0e:a5:f7:e8:12:b2:0b:59:f2:f5:e6:ad:34:3d:
                    7d:17:c4:41:bf:9d:a3:13:03:f3:5d:d4:9c:b8:36:
                    9f:fa:fa:11:60:07:6f:b5:69:25:ad:ea:ae:b4:88:
                    53:09:de:ad:9b:5f:63:cf:d7:cc:c1:2b:86:d2:96:
                    7d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:51:E4:67:BA:97:2B:41:40:65:58:06:7C:26:23:46:A3:1B:29:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/d9a77be0-fcbb-3955-a589-a5dde9b2b06a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32/900e393b-502e-4acc-8781-1980cd140a32.crl

            X509v3 Authority Key Identifier:
                keyid:F0:90:0E:66:BE:C8:36:B8:92:DB:0A:F9:CA:2A:EC:E3:19:3C:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/900e393b-502e-4acc-8781-1980cd140a32.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8d80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:48:b1:16:2d:18:5c:7a:24:ef:3c:e9:98:00:ba:29:c6:b8:
         cf:76:b1:b9:cf:2e:a4:36:fa:c9:23:fd:9a:0f:75:8a:fb:23:
         21:b4:ee:e3:a5:45:42:40:a5:de:61:a4:1a:e9:b7:97:ad:a9:
         c5:f2:83:2c:90:99:d8:d7:5f:ee:0c:fb:fd:66:85:00:2b:2e:
         92:4a:7a:22:b1:c0:03:b2:32:54:16:ba:31:ad:0a:95:c6:6e:
         04:92:3b:3a:16:c7:eb:02:c3:06:92:20:36:38:22:5d:3b:0d:
         05:a3:0d:2b:c3:57:b8:eb:b7:59:8f:3b:44:63:67:b5:a7:34:
         3b:13:56:5e:e3:25:c9:4a:ae:6f:e7:c9:74:10:5e:07:5a:55:
         f5:94:b0:63:ca:3d:25:a3:48:14:3f:cb:0b:0f:ff:c7:6e:30:
         f6:09:3f:5a:16:23:88:9a:26:4b:7e:48:ee:3e:d3:c4:01:cf:
         14:da:f4:e2:df:0d:01:eb:0c:d4:75:a6:2c:00:00:9f:b7:2d:
         e0:0a:3a:ec:98:dc:cd:00:c5:af:af:5f:f7:19:b6:72:cc:ba:
         af:c2:3a:a0:40:d0:95:4a:b0:6b:6a:d3:f4:e2:0e:5f:40:cb:
         60:28:12:de:34:d6:95:8a:ef:cb:cc:76:67:43:c2:56:99:43:
         72:a9:8a:31
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE54/3TJZDaJrvo5f4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTAwZTM5M2ItNTAyZS00YWNjLTg3ODEtMTk4MGNkMTQw
YTMyMB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk
Yjc0MTkxNWEtMWY4YS00MmY0LTgzOGMtMDRjYzIwZmEwODZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTLoC4Fnpuz6siy0CpvrWelsI9KSKqz56mOf
AICEyZstHkuWfq+Xv/K2jEhkDsCIy8L65nddseoAMl5l5zz5prHI00Ihezl9R1W3
vj8KSIr/GpIRF/kaJyHU5MEejNR3fE3/UPQ7qO444ZKBDMI4OaqLK3kCTVPsdc69
wObrYMsN7SBtD+qQ1p//p9FsnqqgN+aq3P1QsEjJf+q7as4G0pCSiMmBbwN9a7eb
51dksHK+BeEFy+qtLxRYUs8km7Pv43H9DqX36BKyC1ny9eatND19F8RBv52jEwPz
XdScuDaf+voRYAdvtWklrequtIhTCd6tm19jz9fMwSuG0pZ9MQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFO9R5Ge6lytBQGVYBnwmI0ajGykwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBl
MzkzYi01MDJlLTRhY2MtODc4MS0xOTgwY2QxNDBhMzIvZDlhNzdiZTAtZmNiYi0z
OTU1LWE1ODktYTVkZGU5YjJiMDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTAwZTM5M2ItNTAyZS00YWNjLTg3
ODEtMTk4MGNkMTQwYTMyLzkwMGUzOTNiLTUwMmUtNGFjYy04NzgxLTE5ODBjZDE0
MGEzMi5jcmwwHwYDVR0jBBgwFoAU8JAOZr7INriS2wr5yirs4xk8K04wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy85MDBlMzkzYi01MDJlLTRhY2MtODc4MS0xOTgw
Y2QxNDBhMzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWNgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC6SLEWLRhceiTvPOmYALopxrjPdrG5zy6kNvrJI/2aD3WK+yMhtO7j
pUVCQKXeYaQa6beXranF8oMskJnY11/uDPv9ZoUAKy6SSnoiscADsjJUFroxrQqV
xm4Ekjs6FsfrAsMGkiA2OCJdOw0Fow0rw1e467dZjztEY2e1pzQ7E1Ze4yXJSq5v
58l0EF4HWlX1lLBjyj0lo0gUP8sLD//HbjD2CT9aFiOImiZLfkjuPtPEAc8U2vTi
3w0B6wzUdaYsAACfty3gCjrsmNzNAMWvr1/3GbZyzLqvwjqgQNCVSrBratP04g5f
QMtgKBLeNNaViu/LzHZnQ8JWmUNyqYox
-----END CERTIFICATE-----
Generated at Sun Jul 19 15:03:31 2026 by rpki-client