Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/531c87d4-b71e-38e9-af69-12aeb95ac062.roa
File:                     531c87d4-b71e-38e9-af69-12aeb95ac062.roa (raw, json)
Hash identifier:          g6OaBtgMdyLkPHWEG4YaRwKIKmg3BSCCSLi0xLY79s4=
Subject key identifier:   8B:F6:F8:96:EC:83:00:53:7B:27:AC:5E:20:17:14:92:BA:60:AF:E0
Certificate issuer:       /CN=85faca83-186c-473a-88cc-290a53538b08
Certificate serial:       010D0C9F4328584E6B0A07F22AE2371AF76DD380
Authority key identifier: 2B:06:F7:85:C5:E3:D4:4A:F0:DA:07:82:22:97:1E:1F:40:6D:99:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/531c87d4-b71e-38e9-af69-12aeb95ac062.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     20295
IP address blocks:        2605:9100::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/85faca83-186c-473a-88cc-290a53538b08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/85faca83-186c-473a-88cc-290a53538b08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:07:f2:2a:e2:37:1a:f7:6d:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85faca83-186c-473a-88cc-290a53538b08
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=b7e36e4f-047b-4f29-a724-5063be24c89a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b4:cf:32:ea:a0:3c:18:b7:28:c5:39:eb:62:
                    d8:0f:59:1a:31:2a:30:0c:68:d1:6c:63:36:88:40:
                    c3:35:2a:93:a0:7c:40:48:24:63:06:5b:3f:64:0a:
                    ca:32:ed:1d:b6:ea:a7:c8:18:e1:99:b3:51:29:c3:
                    77:cd:5c:72:eb:c3:68:6c:f3:67:83:00:5b:49:a4:
                    d5:17:73:aa:97:bd:fa:88:62:8a:1f:f9:1f:db:54:
                    10:de:5e:fd:2f:ac:21:43:1f:01:db:0a:23:f4:a1:
                    73:a6:d0:fe:62:96:9d:91:d6:52:30:c7:c4:17:c0:
                    49:ae:76:f3:c2:c6:62:c9:42:65:40:a1:bc:4f:92:
                    77:24:29:cb:e5:ee:a8:c7:24:fa:b8:42:8d:00:ef:
                    9d:6e:f1:84:73:07:15:00:3f:81:ed:eb:90:91:32:
                    25:dc:36:91:6e:a0:37:12:20:66:ae:f4:ed:ab:0b:
                    05:2e:18:86:5a:08:b2:e7:71:27:e6:3d:c7:57:96:
                    6d:87:49:dd:c9:29:bc:04:f6:07:bc:e3:b7:9b:ea:
                    3d:ca:77:90:03:a9:5e:78:10:68:6c:4e:53:b1:c2:
                    e9:79:dd:7a:33:30:72:82:ac:4d:fa:34:53:26:fb:
                    31:dc:b1:c4:9d:ce:16:2c:07:c1:5e:07:73:e5:7e:
                    53:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F6:F8:96:EC:83:00:53:7B:27:AC:5E:20:17:14:92:BA:60:AF:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/531c87d4-b71e-38e9-af69-12aeb95ac062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08/85faca83-186c-473a-88cc-290a53538b08.crl

            X509v3 Authority Key Identifier:
                keyid:2B:06:F7:85:C5:E3:D4:4A:F0:DA:07:82:22:97:1E:1F:40:6D:99:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85faca83-186c-473a-88cc-290a53538b08.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:52:4c:b3:68:d3:9f:cc:4a:e8:7a:af:69:93:ff:c2:9c:32:
         c6:f8:7a:fc:61:69:07:d3:3c:fb:fe:1d:01:0b:02:94:36:34:
         69:16:8b:a7:17:84:d5:b1:f8:d3:26:ca:59:44:eb:f8:17:e2:
         4f:5a:2b:1d:bb:3d:72:1c:74:06:98:46:cd:1c:3d:13:e1:3d:
         01:a8:d8:0a:23:e1:ca:d0:3d:46:f7:64:83:47:de:79:f9:90:
         b1:6c:f4:04:a5:04:c8:b5:1a:b5:10:aa:e2:ff:08:2c:ec:5a:
         4f:00:6a:4a:09:8f:5f:a7:fa:a6:4a:5f:83:cc:99:c1:f5:b0:
         bd:7b:5c:57:f1:7d:a3:f5:41:d9:3e:14:e4:7b:bf:a6:25:d0:
         45:fd:ad:19:1c:be:4f:2a:f9:ef:fd:f3:81:28:74:4c:7b:6c:
         08:14:b2:a9:8d:fa:d6:31:46:84:46:f8:d6:db:fe:57:95:ff:
         c5:70:b5:3c:b2:3c:11:5c:a0:bd:24:4b:39:6b:5f:0a:12:82:
         f6:34:bc:db:62:59:55:ff:b4:5a:9e:f6:0a:4a:13:86:ac:af:
         76:63:0e:85:bd:eb:d3:58:53:49:3f:31:ba:0d:10:43:f1:6a:
         12:2e:a5:a6:0e:b5:1e:d9:0b:93:ef:3c:24:2b:1b:1d:08:be:
         d5:bc:46:6d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5rCgfyKuI3Gvdt04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODVmYWNhODMtMTg2Yy00NzNhLTg4Y2MtMjkwYTUzNTM4
YjA4MB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk
YjdlMzZlNGYtMDQ3Yi00ZjI5LWE3MjQtNTA2M2JlMjRjODlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbTPMuqgPBi3KMU562LYD1kaMSowDGjRbGM2
iEDDNSqToHxASCRjBls/ZArKMu0dtuqnyBjhmbNRKcN3zVxy68NobPNngwBbSaTV
F3Oql736iGKKH/kf21QQ3l79L6whQx8B2woj9KFzptD+YpadkdZSMMfEF8BJrnbz
wsZiyUJlQKG8T5J3JCnL5e6oxyT6uEKNAO+dbvGEcwcVAD+B7euQkTIl3DaRbqA3
EiBmrvTtqwsFLhiGWgiy53En5j3HV5Zth0ndySm8BPYHvOO3m+o9yneQA6leeBBo
bE5TscLped16MzBygqxN+jRTJvsx3LHEnc4WLAfBXgdz5X5TRQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIv2+JbsgwBTeyesXiAXFJK6YK/gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84NWZh
Y2E4My0xODZjLTQ3M2EtODhjYy0yOTBhNTM1MzhiMDgvNTMxYzg3ZDQtYjcxZS0z
OGU5LWFmNjktMTJhZWI5NWFjMDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvODVmYWNhODMtMTg2Yy00NzNhLTg4
Y2MtMjkwYTUzNTM4YjA4Lzg1ZmFjYTgzLTE4NmMtNDczYS04OGNjLTI5MGE1MzUz
OGIwOC5jcmwwHwYDVR0jBBgwFoAUKwb3hcXj1Erw2geCIpceH0BtmYEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS84NWZhY2E4My0xODZjLTQ3M2EtODhjYy0yOTBh
NTM1MzhiMDguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWRADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAVUkyzaNOfzEroeq9pk//CnDLG+Hr8YWkH0zz7/h0BCwKUNjRpFoun
F4TVsfjTJspZROv4F+JPWisduz1yHHQGmEbNHD0T4T0BqNgKI+HK0D1G92SDR955
+ZCxbPQEpQTItRq1EKri/wgs7FpPAGpKCY9fp/qmSl+DzJnB9bC9e1xX8X2j9UHZ
PhTke7+mJdBF/a0ZHL5PKvnv/fOBKHRMe2wIFLKpjfrWMUaERvjW2/5Xlf/FcLU8
sjwRXKC9JEs5a18KEoL2NLzbYllV/7RanvYKShOGrK92Yw6FvevTWFNJPzG6DRBD
8WoSLqWmDrUe2QuT7zwkKxsdCL7VvEZt
-----END CERTIFICATE-----
Generated at Mon Jul 13 04:16:57 2026 by rpki-client