Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/75345195-d252-3b7e-822c-fc11771031dc.roa
File:                     75345195-d252-3b7e-822c-fc11771031dc.roa (raw, json)
Hash identifier:          PZEhwIlWjiM3/E3t23yGejxY2vN11S6TTj/GUajUWuU=
Subject key identifier:   98:D4:A5:53:2F:58:B3:DF:13:E9:5B:DA:EE:A0:C4:83:61:24:A5:02
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F4328584F857842DB6388A59B6ADA4020
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/75345195-d252-3b7e-822c-fc11771031dc.roa
Signing time:             Fri 16 Oct 2026 13:00:12 +0000
ROA not before:           Fri 16 Oct 2026 13:00:12 +0000
ROA not after:            Thu 14 Jan 2027 14:00:12 +0000
asID:                     8075
IP address blocks:        2620:12c:90c1::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:78:42:db:63:88:a5:9b:6a:da:40:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: Oct 16 13:00:12 2026 GMT
            Not After : Jan 14 14:00:12 2027 GMT
        Subject: CN=499e0ed4-efcf-48be-be7f-dc8752da45d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:18:f8:c6:14:93:81:13:37:f7:95:b6:10:
                    2c:4e:b1:5b:b6:0e:07:71:56:63:71:e1:b3:de:54:
                    42:bb:c1:1e:d6:eb:78:05:4d:0c:8e:76:6d:67:a7:
                    25:f7:ec:04:14:59:db:ea:19:c4:b2:f6:66:a0:30:
                    39:50:49:48:87:46:d5:c6:c7:fe:d6:13:20:8a:4d:
                    fd:5d:b3:b3:a7:75:54:6c:bb:d2:0a:4b:fc:20:40:
                    9d:25:f1:bc:a3:7a:b5:33:e9:29:5e:f2:7c:6b:9d:
                    70:66:82:df:90:4a:2f:0c:50:1a:03:8d:c0:de:05:
                    37:56:f7:e9:13:e5:a3:7f:87:82:05:9f:8e:3a:70:
                    d9:3b:1c:7f:ac:e0:45:61:7c:c1:a9:eb:98:37:1a:
                    5e:16:45:4e:e7:e9:31:29:7c:fc:fe:73:c0:13:b8:
                    26:94:83:81:15:68:02:4a:8b:49:08:92:bd:f9:07:
                    f0:61:cd:b0:fd:61:62:b9:81:88:a3:1c:be:c4:f5:
                    19:78:e4:90:e4:a3:73:3e:a1:03:58:7e:8f:53:bd:
                    60:20:29:f4:8d:e4:b2:93:4d:e8:54:25:27:dc:0d:
                    ef:d1:d5:eb:45:fa:88:35:d2:24:7d:74:09:75:32:
                    05:78:b8:d4:11:8b:ba:fc:57:47:98:05:0a:a6:a9:
                    88:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D4:A5:53:2F:58:B3:DF:13:E9:5B:DA:EE:A0:C4:83:61:24:A5:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/75345195-d252-3b7e-822c-fc11771031dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12c:90c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:1d:d6:80:65:12:3f:e5:cc:61:38:c4:9c:4f:e6:07:ad:84:
         81:13:1f:bd:30:e6:88:77:58:16:93:c5:f9:ba:81:87:3d:68:
         e4:d8:5f:a5:c0:24:de:a0:03:36:a4:6e:2c:66:a7:9d:6f:d4:
         66:ec:5a:01:12:66:01:d7:ff:8d:b3:c2:24:9e:8a:de:80:f5:
         b7:50:e3:55:57:5d:81:42:c6:d5:33:08:b0:7f:15:94:d3:7c:
         6a:fe:85:14:df:54:a7:d8:a3:4f:8c:cc:6c:7a:bf:e4:72:48:
         ad:c4:6e:7c:42:20:15:c1:ab:77:b8:9c:25:56:81:96:f6:40:
         47:c5:08:0b:6d:29:de:2c:0c:19:ca:f9:b9:50:d3:37:0a:70:
         c8:4d:29:d2:82:80:7c:b0:b4:cf:85:5f:97:a8:d4:34:64:49:
         45:de:93:5a:67:64:02:5e:0a:22:34:cd:1c:8a:26:80:db:20:
         22:a4:88:da:db:7d:05:58:de:f8:b1:bf:a6:79:76:5e:ef:6e:
         de:65:e5:43:dc:bc:87:51:c2:9b:38:9b:c6:ed:d1:5d:0a:d8:
         17:f3:3f:fc:81:e6:ae:51:59:4c:7c:02:71:9d:1d:e0:46:a7:
         7f:13:ce:42:3a:a5:8d:71:0a:32:bd:b0:36:43:7f:53:32:67:
         91:7e:0a:b8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+FeELbY4ilm2raQCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk
Y2M0MB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk
NDk5ZTBlZDQtZWZjZi00OGJlLWJlN2YtZGM4NzUyZGE0NWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzgY+MYUk4ETN/eVthAsTrFbtg4HcVZjceGz
3lRCu8Ee1ut4BU0MjnZtZ6cl9+wEFFnb6hnEsvZmoDA5UElIh0bVxsf+1hMgik39
XbOzp3VUbLvSCkv8IECdJfG8o3q1M+kpXvJ8a51wZoLfkEovDFAaA43A3gU3Vvfp
E+Wjf4eCBZ+OOnDZOxx/rOBFYXzBqeuYNxpeFkVO5+kxKXz8/nPAE7gmlIOBFWgC
SotJCJK9+QfwYc2w/WFiuYGIoxy+xPUZeOSQ5KNzPqEDWH6PU71gICn0jeSyk03o
VCUn3A3v0dXrRfqINdIkfXQJdTIFeLjUEYu6/FdHmAUKpqmIIwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJjUpVMvWLPfE+lb2u6gxINhJKUCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk
ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvNzUzNDUxOTUtZDI1Mi0z
YjdlLTgyMmMtZmMxMTc3MTAzMWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz
MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3
ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5
M2ZhN2RjYzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABLJDB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJcd1oBlEj/lzGE4xJxP5gethIETH70w5oh3WBaTxfm6gYc9aOTY
X6XAJN6gAzakbixmp51v1GbsWgESZgHX/42zwiSeit6A9bdQ41VXXYFCxtUzCLB/
FZTTfGr+hRTfVKfYo0+MzGx6v+RySK3EbnxCIBXBq3e4nCVWgZb2QEfFCAttKd4s
DBnK+blQ0zcKcMhNKdKCgHywtM+FX5eo1DRkSUXek1pnZAJeCiI0zRyKJoDbICKk
iNrbfQVY3vixv6Z5dl7vbt5l5UPcvIdRwps4m8bt0V0K2BfzP/yB5q5RWUx8AnGd
HeBGp38TzkI6pY1xCjK9sDZDf1MyZ5F+Crg=
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:23:49 2026 by rpki-client