Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/0b40fd45-6ff0-35fa-8565-9949252a67f4.roa
File:                     0b40fd45-6ff0-35fa-8565-9949252a67f4.roa (raw, json)
Hash identifier:          G27hT1pRFk+zmPoMlGyk6y8SNc7sAjyNmR3dtL+41/8=
Subject key identifier:   91:A2:E5:D9:0E:66:8A:72:35:87:8A:EC:E2:C2:66:60:EE:05:E3:C6
Certificate issuer:       /CN=a97ec683-752f-402c-9901-cad9c007976f
Certificate serial:       010D0C9F4328584EA7887B0BEE1A7C9FF9DC9480
Authority key identifier: D4:79:40:E9:8A:39:8D:AE:C3:51:4B:CE:C9:9C:1C:9B:92:CF:AA:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/0b40fd45-6ff0-35fa-8565-9949252a67f4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        2620:b6:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/a97ec683-752f-402c-9901-cad9c007976f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/a97ec683-752f-402c-9901-cad9c007976f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:7b:0b:ee:1a:7c:9f:f9:dc:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a97ec683-752f-402c-9901-cad9c007976f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a5087296-6468-4363-aadd-9ad51f0d2235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cb:33:42:49:97:7c:4c:20:7a:ef:37:16:25:
                    e5:b3:7c:76:ff:58:ce:e6:a0:1b:09:05:1e:ee:6c:
                    c6:c0:db:01:52:21:86:37:a7:af:2b:e7:2a:36:f1:
                    dd:b0:d3:ad:31:cb:d5:59:4b:78:ca:98:d6:c9:4b:
                    bf:55:12:93:45:5b:14:07:9a:08:55:fa:cf:46:3b:
                    05:f4:34:70:7e:2f:79:44:80:a5:8a:9f:ca:e3:0d:
                    00:d0:88:ab:26:04:fb:72:dc:42:20:af:45:04:47:
                    9f:3f:11:e8:be:a0:7d:2e:b8:41:a1:3c:34:5b:f7:
                    78:13:6f:8f:53:36:ec:49:dc:88:aa:e6:dc:4f:d0:
                    36:21:50:0f:99:70:b1:5a:a0:32:4d:4d:7a:16:ef:
                    0f:1b:20:5e:09:21:39:36:ff:d4:d2:d7:cd:4c:97:
                    af:75:72:39:24:99:10:94:b7:33:5e:88:e7:74:1f:
                    89:61:bb:ae:e5:78:38:48:a4:34:58:3c:a0:23:08:
                    b1:96:ff:b7:46:52:ec:75:4a:eb:15:71:91:4c:1e:
                    6e:07:c1:4a:00:11:b7:5e:09:68:0a:2d:aa:a5:b6:
                    f3:bb:9c:a3:66:3c:59:2b:c8:90:6f:3b:b2:7f:20:
                    46:3d:b7:ab:fe:7b:1d:10:91:ef:5c:b4:bf:28:73:
                    46:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A2:E5:D9:0E:66:8A:72:35:87:8A:EC:E2:C2:66:60:EE:05:E3:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/0b40fd45-6ff0-35fa-8565-9949252a67f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f/a97ec683-752f-402c-9901-cad9c007976f.crl

            X509v3 Authority Key Identifier:
                keyid:D4:79:40:E9:8A:39:8D:AE:C3:51:4B:CE:C9:9C:1C:9B:92:CF:AA:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a97ec683-752f-402c-9901-cad9c007976f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:b6:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:47:83:23:ce:f7:9a:75:76:1c:de:e7:2c:13:97:82:00:d7:
         e1:cf:2f:a4:4e:26:f8:a7:f8:72:3e:64:dd:42:86:d4:93:06:
         5c:7d:a7:ad:35:37:45:6f:cd:60:ab:7d:1f:e3:cf:1e:a8:34:
         a5:bd:00:63:e7:66:47:3e:93:c3:47:65:0d:37:bd:75:96:a6:
         d6:c9:40:4e:1c:6e:1f:53:b9:ac:f3:d2:d6:57:84:e5:c2:e5:
         d6:a0:d3:a7:63:3c:6d:78:c1:62:b5:0f:09:30:af:4b:88:e7:
         e6:3f:eb:b5:38:94:e2:79:d2:9f:72:4f:1b:92:05:f3:0b:fe:
         75:09:9f:a8:75:2e:db:48:90:3b:86:7f:ea:86:a5:90:be:14:
         0b:f4:c2:0d:ff:bf:da:ee:51:67:0d:c0:f7:cc:e8:15:0d:35:
         35:fc:c8:85:3a:e7:61:53:a0:f0:66:72:b1:ae:e9:c4:8f:91:
         cb:24:d3:27:0d:ba:46:d9:e2:7e:1e:32:c6:fb:ee:98:68:80:
         9b:19:dd:a5:63:16:cf:bd:38:db:8b:94:5c:af:87:59:fe:52:
         7b:17:1e:63:38:95:c4:52:b1:db:93:bc:fd:af:df:67:09:20:
         a1:8a:60:5e:4d:2f:bf:f4:75:62:45:88:99:f6:c4:0a:8b:2f:
         b9:cb:0b:fd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6niHsL7hp8n/nclIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTk3ZWM2ODMtNzUyZi00MDJjLTk5MDEtY2FkOWMwMDc5
NzZmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YTUwODcyOTYtNjQ2OC00MzYzLWFhZGQtOWFkNTFmMGQyMjM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8szQkmXfEwgeu83FiXls3x2/1jO5qAbCQUe
7mzGwNsBUiGGN6evK+cqNvHdsNOtMcvVWUt4ypjWyUu/VRKTRVsUB5oIVfrPRjsF
9DRwfi95RIClip/K4w0A0IirJgT7ctxCIK9FBEefPxHovqB9LrhBoTw0W/d4E2+P
UzbsSdyIqubcT9A2IVAPmXCxWqAyTU16Fu8PGyBeCSE5Nv/U0tfNTJevdXI5JJkQ
lLczXojndB+JYbuu5Xg4SKQ0WDygIwixlv+3RlLsdUrrFXGRTB5uB8FKABG3Xglo
Ci2qpbbzu5yjZjxZK8iQbzuyfyBGPber/nsdEJHvXLS/KHNGJwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJGi5dkOZopyNYeK7OLCZmDuBePGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hOTdl
YzY4My03NTJmLTQwMmMtOTkwMS1jYWQ5YzAwNzk3NmYvMGI0MGZkNDUtNmZmMC0z
NWZhLTg1NjUtOTk0OTI1MmE2N2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTk3ZWM2ODMtNzUyZi00MDJjLTk5
MDEtY2FkOWMwMDc5NzZmL2E5N2VjNjgzLTc1MmYtNDAyYy05OTAxLWNhZDljMDA3
OTc2Zi5jcmwwHwYDVR0jBBgwFoAU1HlA6Yo5ja7DUUvOyZwcm5LPqkcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hOTdlYzY4My03NTJmLTQwMmMtOTkwMS1jYWQ5
YzAwNzk3NmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAtiAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAApHgyPO95p1dhze5ywTl4IA1+HPL6ROJvin+HI+ZN1ChtSTBlx9
p601N0VvzWCrfR/jzx6oNKW9AGPnZkc+k8NHZQ03vXWWptbJQE4cbh9Tuazz0tZX
hOXC5dag06djPG14wWK1Dwkwr0uI5+Y/67U4lOJ50p9yTxuSBfML/nUJn6h1LttI
kDuGf+qGpZC+FAv0wg3/v9ruUWcNwPfM6BUNNTX8yIU652FToPBmcrGu6cSPkcsk
0ycNukbZ4n4eMsb77phogJsZ3aVjFs+9ONuLlFyvh1n+UnsXHmM4lcRSsduTvP2v
32cJIKGKYF5NL7/0dWJFiJn2xAqLL7nLC/0=
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:55:53 2026 by rpki-client