Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7072b073-0543-4df3-b189-6433ae3ac947/8d183476-c7d5-3d55-a0a8-3f0589f48522.roa
File:                     8d183476-c7d5-3d55-a0a8-3f0589f48522.roa (raw, json)
Hash identifier:          UrtHwCshDChus1x2kcrqdWGR3JGFXHI9kMdPLW0N2W0=
Subject key identifier:   D2:A6:6B:B4:E4:97:DE:B6:D5:0B:84:F6:B6:36:04:51:6B:DA:66:42
Certificate issuer:       /CN=7072b073-0543-4df3-b189-6433ae3ac947
Certificate serial:       010D0C9F4328584E5A49FADEEEB7148DE1D4F200
Authority key identifier: 28:D6:6A:B6:9C:BF:67:74:51:5A:2C:70:BD:50:90:72:D5:9D:8C:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7072b073-0543-4df3-b189-6433ae3ac947.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7072b073-0543-4df3-b189-6433ae3ac947/8d183476-c7d5-3d55-a0a8-3f0589f48522.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     399594
IP address blocks:        2602:f5e4::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7072b073-0543-4df3-b189-6433ae3ac947/7072b073-0543-4df3-b189-6433ae3ac947.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7072b073-0543-4df3-b189-6433ae3ac947/7072b073-0543-4df3-b189-6433ae3ac947.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7072b073-0543-4df3-b189-6433ae3ac947.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:fa:de:ee:b7:14:8d:e1:d4:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7072b073-0543-4df3-b189-6433ae3ac947
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=49f1f9e4-4d60-4753-a5e4-121eecc632f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:23:7e:db:c0:1b:b0:39:f1:4d:23:35:a6:81:
                    ab:c6:7a:3d:65:64:cd:43:88:b1:a3:e4:1c:1f:35:
                    46:fb:bd:74:79:f6:27:b1:4c:5e:ca:ba:33:18:1b:
                    ce:3e:4c:56:37:f1:d5:f3:88:8e:12:d7:14:8c:cc:
                    aa:a7:84:97:df:b9:9c:23:9f:e4:ae:b2:b4:13:08:
                    9f:3c:e6:fe:77:e0:e6:57:20:d7:b5:e8:94:b2:07:
                    45:4d:bf:40:e0:8e:b3:88:4e:82:18:3f:bf:da:f2:
                    df:56:29:1e:a9:41:7b:9d:4f:33:b8:f8:62:98:f2:
                    ee:49:a4:6d:e3:ac:f1:d8:4b:0b:1a:fc:86:cf:fc:
                    f3:6e:98:67:44:c0:90:be:2d:7a:bb:61:ee:d7:86:
                    dd:59:ae:bd:b2:f8:1c:98:58:aa:0a:d5:1e:ed:7b:
                    78:a8:c6:2c:0b:b2:18:7e:88:ae:36:4d:ed:eb:27:
                    27:68:a0:e8:6c:88:74:e2:8f:f7:fb:35:4f:cd:be:
                    51:42:29:34:53:33:ea:63:e3:89:81:c7:90:11:7a:
                    3f:e7:a8:03:26:6d:98:6f:f1:90:c8:db:82:97:08:
                    15:57:94:b6:84:0d:af:b0:5d:41:e1:c7:b4:c8:f7:
                    e0:7f:3e:57:05:f4:c0:f9:15:f1:af:24:72:38:2a:
                    18:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A6:6B:B4:E4:97:DE:B6:D5:0B:84:F6:B6:36:04:51:6B:DA:66:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7072b073-0543-4df3-b189-6433ae3ac947/8d183476-c7d5-3d55-a0a8-3f0589f48522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7072b073-0543-4df3-b189-6433ae3ac947/7072b073-0543-4df3-b189-6433ae3ac947.crl

            X509v3 Authority Key Identifier:
                keyid:28:D6:6A:B6:9C:BF:67:74:51:5A:2C:70:BD:50:90:72:D5:9D:8C:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7072b073-0543-4df3-b189-6433ae3ac947.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5e4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:f4:19:b5:26:62:07:57:05:37:17:27:d5:32:ca:6b:cf:b7:
         d7:46:24:6c:fe:ee:57:be:26:69:2d:61:c0:97:e9:2c:f9:e5:
         7c:6f:e7:cd:b7:89:a9:f2:9d:b3:b2:30:7c:de:35:3d:d8:e8:
         f7:b8:1d:7b:14:06:3b:07:7a:6f:fe:97:a6:e1:3c:8c:34:3d:
         a3:94:a4:48:4d:60:2a:6d:ce:00:b3:14:3e:f9:c8:86:2f:1b:
         f3:91:44:55:00:3b:92:16:7e:3b:60:5d:e0:98:4b:de:58:92:
         83:61:d3:16:a1:99:c5:00:90:20:be:0b:25:75:66:64:53:4e:
         17:cc:e1:04:73:5a:af:65:ed:54:fa:51:81:0e:66:5c:39:fe:
         95:c7:81:5c:a3:b7:15:f1:58:88:ce:3b:41:bd:e4:6b:92:47:
         11:e2:fc:fa:2c:92:84:0c:e3:31:c7:2c:ea:68:4a:d1:02:3b:
         da:51:30:b8:5c:97:1b:ed:46:d1:61:33:31:fd:c5:d6:48:10:
         50:ee:02:9b:c5:97:f5:6e:66:27:31:71:af:e1:eb:79:1d:c3:
         1e:f5:1d:fe:ed:91:f0:69:4b:59:b1:20:5b:bf:d5:e8:f4:3f:
         cb:12:0b:1a:6a:9a:fc:7a:86:be:0b:0d:b3:01:b3:bd:06:50:
         09:48:2c:07
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5aSfre7rcUjeHU8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzA3MmIwNzMtMDU0My00ZGYzLWIxODktNjQzM2FlM2Fj
OTQ3MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk
NDlmMWY5ZTQtNGQ2MC00NzUzLWE1ZTQtMTIxZWVjYzYzMmY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiN+28AbsDnxTSM1poGrxno9ZWTNQ4ixo+Qc
HzVG+710efYnsUxeyrozGBvOPkxWN/HV84iOEtcUjMyqp4SX37mcI5/krrK0Ewif
POb+d+DmVyDXteiUsgdFTb9A4I6ziE6CGD+/2vLfVikeqUF7nU8zuPhimPLuSaRt
46zx2EsLGvyGz/zzbphnRMCQvi16u2Hu14bdWa69svgcmFiqCtUe7Xt4qMYsC7IY
foiuNk3t6ycnaKDobIh04o/3+zVPzb5RQik0UzPqY+OJgceQEXo/56gDJm2Yb/GQ
yNuClwgVV5S2hA2vsF1B4ce0yPfgfz5XBfTA+RXxryRyOCoYmQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNKma7Tkl9621QuE9rY2BFFr2mZCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83MDcy
YjA3My0wNTQzLTRkZjMtYjE4OS02NDMzYWUzYWM5NDcvOGQxODM0NzYtYzdkNS0z
ZDU1LWEwYTgtM2YwNTg5ZjQ4NTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNzA3MmIwNzMtMDU0My00ZGYzLWIx
ODktNjQzM2FlM2FjOTQ3LzcwNzJiMDczLTA1NDMtNGRmMy1iMTg5LTY0MzNhZTNh
Yzk0Ny5jcmwwHwYDVR0jBBgwFoAUKNZqtpy/Z3RRWixwvVCQctWdjBIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC83MDcyYjA3My0wNTQzLTRkZjMtYjE4OS02NDMz
YWUzYWM5NDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL15AAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAVvQZtSZiB1cFNxcn1TLKa8+310YkbP7uV74maS1hwJfpLPnlfG/n
zbeJqfKds7IwfN41Pdjo97gdexQGOwd6b/6XpuE8jDQ9o5SkSE1gKm3OALMUPvnI
hi8b85FEVQA7khZ+O2Bd4JhL3liSg2HTFqGZxQCQIL4LJXVmZFNOF8zhBHNar2Xt
VPpRgQ5mXDn+lceBXKO3FfFYiM47Qb3ka5JHEeL8+iyShAzjMccs6mhK0QI72lEw
uFyXG+1G0WEzMf3F1kgQUO4Cm8WX9W5mJzFxr+HreR3DHvUd/u2R8GlLWbEgW7/V
6PQ/yxILGmqa/HqGvgsNswGzvQZQCUgsBw==
-----END CERTIFICATE-----
Generated at Mon Jul 6 20:12:47 2026 by rpki-client