Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/f795707f-42b9-3e1c-9651-5bb7df87b841.roa
File:                     f795707f-42b9-3e1c-9651-5bb7df87b841.roa (raw, json)
Hash identifier:          k0fszDHtqm8FWp+GfBTS2SAPUKuNfEDakVrxucYbd/o=
Subject key identifier:   C5:9D:37:10:69:B3:E5:D0:63:11:1B:1E:19:47:8B:16:FA:43:7E:A8
Certificate issuer:       /CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
Certificate serial:       010D0C9F4328584E376475BF8E493E629CA4FD80
Authority key identifier: 96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/f795707f-42b9-3e1c-9651-5bb7df87b841.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     32982
IP address blocks:        2607:f368:804::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:75:bf:8e:49:3e:62:9c:a4:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=e926ab94-bdff-4dab-a28d-010d7b8dcd69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:03:28:1f:5d:6a:54:c8:93:1c:90:6f:30:1d:
                    47:a8:ad:b8:3f:3c:8b:38:8f:af:32:51:e0:f7:03:
                    91:bf:f6:03:29:b1:5e:88:96:fe:93:ce:2d:5c:f1:
                    f9:bf:9e:94:66:93:a7:c6:0c:40:53:c8:9c:5e:f9:
                    e1:ed:ae:70:fb:6b:d5:36:46:d7:c1:97:11:65:53:
                    6f:d2:5b:65:49:22:3d:ac:3d:07:61:4d:3c:68:26:
                    f3:8c:7d:91:e8:fb:e3:0a:8b:13:28:19:9e:8f:8e:
                    20:ff:6c:a9:2c:2f:94:12:27:01:5d:f8:3e:92:11:
                    07:51:47:13:0c:b9:4b:e4:45:3f:9f:7b:3b:10:06:
                    23:10:93:1a:ef:63:1b:c0:a4:47:8d:87:10:38:7c:
                    cd:08:fa:d2:bb:b8:45:00:14:56:1d:04:fb:b1:91:
                    84:44:60:b7:0d:5a:41:05:00:9c:e1:e9:b1:26:8d:
                    02:ee:18:f1:4e:63:c7:80:07:07:a9:7d:99:aa:05:
                    5b:87:31:2c:39:6c:1b:7d:98:55:99:a2:93:e8:40:
                    ae:66:23:a0:f8:ba:a0:17:4c:03:76:8f:06:03:0e:
                    8d:b3:76:e7:7e:e4:5d:f6:17:a3:be:07:67:bf:b8:
                    91:15:e2:ca:7f:d9:83:07:2a:01:13:a9:b6:07:49:
                    3b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9D:37:10:69:B3:E5:D0:63:11:1B:1E:19:47:8B:16:FA:43:7E:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/f795707f-42b9-3e1c-9651-5bb7df87b841.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.crl

            X509v3 Authority Key Identifier:
                keyid:96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368:804::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:6f:e2:5a:1b:ed:f4:71:2d:17:bf:64:59:20:57:f4:6d:4c:
         82:13:0a:ea:02:6e:24:86:35:47:cd:14:d2:4a:42:e0:3a:db:
         d2:bf:ff:de:49:ed:3f:b2:39:15:27:4a:0f:e8:8d:0b:42:bc:
         ce:98:fc:ea:e4:aa:f2:ff:c3:30:c8:a7:c6:e1:c7:23:db:56:
         25:0a:a6:ca:c5:20:a1:e7:08:6a:af:1a:a5:de:9a:1c:cb:8c:
         44:27:c4:a9:ee:e9:1e:07:87:6d:9d:18:eb:29:05:87:6d:e3:
         42:21:33:22:c6:d2:46:c5:fe:9f:7e:96:ed:fb:15:78:b1:a9:
         3f:4c:83:cb:c8:72:80:36:62:3d:9f:eb:b1:fe:0e:ae:c9:78:
         00:fc:73:43:7e:65:a4:5c:1e:12:0b:71:d6:85:19:6c:34:fb:
         cb:a5:8b:b7:10:2f:34:57:75:6d:98:5d:fc:87:a0:48:ea:c6:
         d5:a0:04:dd:de:ff:5a:14:90:dc:82:24:27:4a:60:57:90:6c:
         42:7b:b2:5a:22:67:68:a7:bb:f2:69:97:1f:c9:9c:3b:2d:c4:
         44:a1:bf:cf:44:4e:35:14:d9:9c:76:01:fd:03:bb:3e:15:c4:
         ed:c6:29:63:8c:4b:bd:88:ca:5d:19:73:35:8c:84:49:fb:2b:
         d3:2a:4d:e6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE43ZHW/jkk+Ypyk/YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwMWI2OTQtNjI0Mi00YjFjLWE4NDEtZDBhNzIxNGNk
OWM3MB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk
ZTkyNmFiOTQtYmRmZi00ZGFiLWEyOGQtMDEwZDdiOGRjZDY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QMoH11qVMiTHJBvMB1HqK24PzyLOI+vMlHg
9wORv/YDKbFeiJb+k84tXPH5v56UZpOnxgxAU8icXvnh7a5w+2vVNkbXwZcRZVNv
0ltlSSI9rD0HYU08aCbzjH2R6PvjCosTKBmej44g/2ypLC+UEicBXfg+khEHUUcT
DLlL5EU/n3s7EAYjEJMa72MbwKRHjYcQOHzNCPrSu7hFABRWHQT7sZGERGC3DVpB
BQCc4emxJo0C7hjxTmPHgAcHqX2ZqgVbhzEsOWwbfZhVmaKT6ECuZiOg+LqgF0wD
do8GAw6Ns3bnfuRd9hejvgdnv7iRFeLKf9mDByoBE6m2B0k7nwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMWdNxBps+XQYxEbHhlHixb6Q36oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjAx
YjY5NC02MjQyLTRiMWMtYTg0MS1kMGE3MjE0Y2Q5YzcvZjc5NTcwN2YtNDJiOS0z
ZTFjLTk2NTEtNWJiN2RmODdiODQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTYwMWI2OTQtNjI0Mi00YjFjLWE4
NDEtZDBhNzIxNGNkOWM3L2U2MDFiNjk0LTYyNDItNGIxYy1hODQxLWQwYTcyMTRj
ZDljNy5jcmwwHwYDVR0jBBgwFoAUlnqmOy7TqmVEC36L9Uu68e2VUAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lNjAxYjY5NC02MjQyLTRiMWMtYTg0MS1kMGE3
MjE0Y2Q5YzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgfzaAgE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD5v4lob7fRxLRe/ZFkgV/RtTIITCuoCbiSGNUfNFNJKQuA629K/
/95J7T+yORUnSg/ojQtCvM6Y/OrkqvL/wzDIp8bhxyPbViUKpsrFIKHnCGqvGqXe
mhzLjEQnxKnu6R4Hh22dGOspBYdt40IhMyLG0kbF/p9+lu37FXixqT9Mg8vIcoA2
Yj2f67H+Dq7JeAD8c0N+ZaRcHhILcdaFGWw0+8uli7cQLzRXdW2YXfyHoEjqxtWg
BN3e/1oUkNyCJCdKYFeQbEJ7sloiZ2inu/Jplx/JnDstxEShv89ETjUU2Zx2Af0D
uz4VxO3GKWOMS72Iyl0ZczWMhEn7K9MqTeY=
-----END CERTIFICATE-----
Generated at Mon Jul 6 20:12:42 2026 by rpki-client