Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/1085d183-4a39-3c43-abf3-8719482aa95a.roa
File:                     1085d183-4a39-3c43-abf3-8719482aa95a.roa (raw, json)
Hash identifier:          yy6aCV/e6ymLWUNbtrVlwCKHfh9Kz4uysfJBmeOh4cc=
Subject key identifier:   45:69:1A:57:FD:FF:A7:13:BD:3D:CF:36:91:B1:E6:6E:5A:23:88:93
Certificate issuer:       /CN=f16b1ed2-491f-4ed7-be99-59b20310c475
Certificate serial:       010D0C9F4328584E50849A9A2D7C6AC62F1E9700
Authority key identifier: 10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/1085d183-4a39-3c43-abf3-8719482aa95a.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     11924
IP address blocks:        2607:faa0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:9a:9a:2d:7c:6a:c6:2f:1e:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16b1ed2-491f-4ed7-be99-59b20310c475
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=ab4dd7d3-2ba1-4ffa-8fa7-e9ab3aad0dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:52:c4:7d:0d:3e:f0:64:ff:a4:cf:a4:f7:3e:
                    ae:c6:e9:f1:14:96:97:55:3b:5b:ac:a6:07:ae:c1:
                    ce:08:5b:16:bf:61:9f:77:c1:df:92:cc:da:17:ef:
                    57:04:86:5a:c2:29:b8:78:43:13:4a:3e:40:18:fc:
                    a6:ef:e3:89:0d:9e:85:08:81:6d:05:79:7e:4f:a6:
                    14:97:94:41:a5:4f:5d:74:ba:46:bd:a2:cf:89:af:
                    58:9b:08:eb:0a:0a:68:ee:c2:48:dc:b1:5a:20:e2:
                    ee:43:e2:cd:64:f5:8c:a4:67:b3:2a:a2:2b:5a:ec:
                    8f:3d:e8:53:97:43:22:1d:db:0a:78:7f:06:3f:fc:
                    41:cf:29:21:0e:5b:82:e1:c5:1a:d5:31:8d:f0:a7:
                    f1:9d:c2:b5:0d:63:07:54:c1:f0:2f:8a:ac:fe:b2:
                    73:d2:e4:d6:6a:a2:29:bc:a4:3f:2e:df:68:4a:cc:
                    61:25:d0:cd:26:dc:ba:1a:e8:68:3e:b2:3d:74:f9:
                    5d:25:27:91:af:12:75:fc:d9:f1:e7:76:2b:3e:d1:
                    d5:0b:b7:63:c6:31:29:b4:43:c2:a1:92:35:3f:43:
                    53:00:5f:83:53:2e:ff:ad:5b:a5:40:92:51:4c:04:
                    a1:41:ec:9a:96:85:83:fb:4a:89:1c:76:af:a5:43:
                    08:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:69:1A:57:FD:FF:A7:13:BD:3D:CF:36:91:B1:E6:6E:5A:23:88:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/1085d183-4a39-3c43-abf3-8719482aa95a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl

            X509v3 Authority Key Identifier:
                keyid:10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:faa0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:4d:da:96:ec:3e:dc:e7:3a:44:20:28:25:80:27:23:18:94:
         ba:4e:93:71:3a:9e:b2:92:f1:57:c7:f7:74:89:96:f3:39:b8:
         27:f2:29:dd:92:db:a9:c3:8d:ea:aa:51:af:79:4b:06:28:36:
         71:61:d2:33:3c:81:5c:9a:db:66:77:3c:21:bf:f4:9b:55:3c:
         14:40:46:7b:04:fb:62:97:ed:1c:84:53:07:87:28:fd:6d:f9:
         ca:e3:4b:d8:ee:47:53:a5:bd:25:ba:d9:cb:dd:3b:24:1d:2a:
         27:b7:bb:04:55:60:ed:19:13:c1:b6:c6:e4:9f:9f:c6:98:43:
         8a:8e:ca:50:eb:9c:94:9f:58:f6:c2:2a:af:17:24:22:9f:e4:
         e8:92:5c:47:78:05:37:22:27:d4:2c:75:c6:79:b3:f1:9f:b7:
         12:02:dc:74:2c:3e:83:16:26:94:5b:a0:79:18:b5:99:a2:fd:
         c7:60:57:97:8b:03:78:e2:73:c8:93:c3:8b:b6:58:e4:e5:6b:
         46:bf:bc:9e:c0:56:75:55:d0:56:33:d6:68:16:4a:71:fb:25:
         c9:5b:77:5e:86:40:b3:d3:f7:42:f8:e9:bb:f7:fa:49:53:0f:
         7c:3f:7e:91:95:d6:14:c7:56:93:64:73:c2:d0:94:33:54:fe:
         7b:53:99:0b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5QhJqaLXxqxi8elwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjE2YjFlZDItNDkxZi00ZWQ3LWJlOTktNTliMjAzMTBj
NDc1MB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk
YWI0ZGQ3ZDMtMmJhMS00ZmZhLThmYTctZTlhYjNhYWQwZGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFLEfQ0+8GT/pM+k9z6uxunxFJaXVTtbrKYH
rsHOCFsWv2Gfd8HfkszaF+9XBIZawim4eEMTSj5AGPym7+OJDZ6FCIFtBXl+T6YU
l5RBpU9ddLpGvaLPia9YmwjrCgpo7sJI3LFaIOLuQ+LNZPWMpGezKqIrWuyPPehT
l0MiHdsKeH8GP/xBzykhDluC4cUa1TGN8KfxncK1DWMHVMHwL4qs/rJz0uTWaqIp
vKQ/Lt9oSsxhJdDNJty6GuhoPrI9dPldJSeRrxJ1/Nnx53YrPtHVC7djxjEptEPC
oZI1P0NTAF+DUy7/rVulQJJRTAShQeyaloWD+0qJHHavpUMInQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEVpGlf9/6cTvT3PNpGx5m5aI4iTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMTZi
MWVkMi00OTFmLTRlZDctYmU5OS01OWIyMDMxMGM0NzUvMTA4NWQxODMtNGEzOS0z
YzQzLWFiZjMtODcxOTQ4MmFhOTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjE2YjFlZDItNDkxZi00ZWQ3LWJl
OTktNTliMjAzMTBjNDc1L2YxNmIxZWQyLTQ5MWYtNGVkNy1iZTk5LTU5YjIwMzEw
YzQ3NS5jcmwwHwYDVR0jBBgwFoAUEGObLEoCatgzyXEiJFJcgL5sq9YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mMTZiMWVkMi00OTFmLTRlZDctYmU5OS01OWIy
MDMxMGM0NzUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf6oDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBqTdqW7D7c5zpEICglgCcjGJS6TpNxOp6ykvFXx/d0iZbzObgn8ind
ktupw43qqlGveUsGKDZxYdIzPIFcmttmdzwhv/SbVTwUQEZ7BPtil+0chFMHhyj9
bfnK40vY7kdTpb0lutnL3TskHSont7sEVWDtGRPBtsbkn5/GmEOKjspQ65yUn1j2
wiqvFyQin+ToklxHeAU3IifULHXGebPxn7cSAtx0LD6DFiaUW6B5GLWZov3HYFeX
iwN44nPIk8OLtljk5WtGv7yewFZ1VdBWM9ZoFkpx+yXJW3dehkCz0/dC+Om79/pJ
Uw98P36RldYUx1aTZHPC0JQzVP57U5kL
-----END CERTIFICATE-----
Generated at Mon Jul 20 17:53:39 2026 by rpki-client