Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/6275ed1e-4afe-3aea-a866-b433aff793aa.roa
File:                     6275ed1e-4afe-3aea-a866-b433aff793aa.roa (raw, json)
Hash identifier:          yYBJeBObbRMVqxozVRuGcoeGcjnrxr2AjKHmNJKTFC0=
Subject key identifier:   39:3E:1C:42:76:35:EA:9D:39:13:4F:09:9F:71:38:60:A3:70:05:1B
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584F2957CE5059644657527C7400
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/6275ed1e-4afe-3aea-a866-b433aff793aa.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     13778
IP address blocks:        2620:147:120::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:ce:50:59:64:46:57:52:7c:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=e3b2738e-a7e9-4fe2-bf6d-d9f6bec4657d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9d:5d:dc:0f:cb:28:56:10:a7:f3:98:3d:26:
                    d0:75:31:33:7e:29:86:55:28:d2:d7:f8:1f:db:81:
                    ce:2c:d0:87:e1:19:d5:52:23:86:a3:e3:24:d4:1f:
                    42:bb:0c:85:45:4c:74:83:1a:b8:f8:c7:6e:87:92:
                    38:08:19:a0:3f:25:5e:40:4f:72:21:64:25:cd:d1:
                    08:f3:24:39:74:f5:9d:2b:bb:63:ad:11:eb:fb:04:
                    80:ed:59:a5:8a:d4:6e:c5:49:d7:63:ea:28:cc:95:
                    42:65:0d:60:d9:67:f5:b1:db:24:e6:33:f9:b6:26:
                    9e:5e:71:25:23:d8:46:68:df:1e:99:29:32:d0:61:
                    e7:e2:7a:61:4e:55:df:9f:44:20:d2:6a:49:8f:5e:
                    24:f8:3a:41:12:d6:dd:93:d0:e7:a8:1a:34:23:6b:
                    47:92:09:97:33:b2:3c:dc:38:ca:49:ff:37:3f:09:
                    0f:50:25:3e:e7:66:95:79:95:8b:9d:54:b4:76:5e:
                    1d:f0:4b:f1:36:1e:80:17:f1:40:b6:cc:24:3b:46:
                    86:18:1d:2f:97:62:58:a8:b1:b9:ce:5e:7c:8f:6b:
                    72:87:1a:ea:eb:79:64:ee:83:a0:15:f9:dd:fa:43:
                    1f:73:42:33:62:a4:55:28:c6:c0:34:7f:52:16:1d:
                    12:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3E:1C:42:76:35:EA:9D:39:13:4F:09:9F:71:38:60:A3:70:05:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/6275ed1e-4afe-3aea-a866-b433aff793aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:120::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:b0:38:be:79:21:2b:0b:30:76:bc:62:6c:3b:e0:12:d9:60:
         14:76:f8:53:65:ad:0a:d3:75:16:dc:58:15:68:d4:ce:69:2a:
         fc:ca:fd:f9:6b:26:f6:bc:58:be:bd:dd:5e:9a:23:a2:69:a6:
         99:42:2a:c1:ab:c4:ac:c9:16:25:79:13:5c:36:06:9a:08:97:
         e0:cc:b9:e3:63:83:33:85:fe:0d:21:a3:69:18:e4:6a:ef:84:
         60:10:1c:e4:d1:66:75:9f:21:74:e4:eb:ed:a8:f2:8a:1d:09:
         7d:95:55:b2:35:7f:b2:82:26:23:73:c5:34:f6:07:e7:fe:68:
         5e:f3:59:c2:a0:23:73:2d:b6:80:e6:42:b6:65:03:02:7a:26:
         b6:9d:5f:f0:39:1a:29:64:e8:c2:e9:07:e6:d9:37:26:a7:12:
         4b:1f:3c:9a:36:80:f7:de:05:42:de:6b:c8:96:44:34:e1:9d:
         4b:cf:f3:b3:11:55:5c:bf:90:49:f8:35:e5:84:80:c5:17:b6:
         af:19:1d:e6:d2:fd:2d:4d:6a:7b:53:a9:10:5b:fe:02:c3:52:
         02:ba:1b:af:31:5d:d3:30:d7:4c:39:03:b3:17:68:05:2b:1d:
         8a:64:ed:01:c7:26:24:72:dd:98:ed:46:fa:45:fc:1e:74:ce:
         80:2b:14:60
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8pV85QWWRGV1J8dAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl
NzUxMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk
ZTNiMjczOGUtYTdlOS00ZmUyLWJmNmQtZDlmNmJlYzQ2NTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt51d3A/LKFYQp/OYPSbQdTEzfimGVSjS1/gf
24HOLNCH4RnVUiOGo+Mk1B9CuwyFRUx0gxq4+Mduh5I4CBmgPyVeQE9yIWQlzdEI
8yQ5dPWdK7tjrRHr+wSA7VmlitRuxUnXY+oozJVCZQ1g2Wf1sdsk5jP5tiaeXnEl
I9hGaN8emSky0GHn4nphTlXfn0Qg0mpJj14k+DpBEtbdk9DnqBo0I2tHkgmXM7I8
3DjKSf83PwkPUCU+52aVeZWLnVS0dl4d8EvxNh6AF/FAtswkO0aGGB0vl2JYqLG5
zl58j2tyhxrq63lk7oOgFfnd+kMfc0IzYqRVKMbANH9SFh0SKwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDk+HEJ2NeqdORNPCZ9xOGCjcAUbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2
NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvNjI3NWVkMWUtNGFmZS0z
YWVhLWE4NjYtYjQzM2FmZjc5M2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh
MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz
ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj
NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABRwEg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACWwOL55ISsLMHa8Ymw74BLZYBR2+FNlrQrTdRbcWBVo1M5pKvzK
/flrJva8WL693V6aI6JppplCKsGrxKzJFiV5E1w2BpoIl+DMueNjgzOF/g0ho2kY
5GrvhGAQHOTRZnWfIXTk6+2o8oodCX2VVbI1f7KCJiNzxTT2B+f+aF7zWcKgI3Mt
toDmQrZlAwJ6JradX/A5Gilk6MLpB+bZNyanEksfPJo2gPfeBULea8iWRDThnUvP
87MRVVy/kEn4NeWEgMUXtq8ZHebS/S1NantTqRBb/gLDUgK6G68xXdMw10w5A7MX
aAUrHYpk7QHHJiRy3ZjtRvpF/B50zoArFGA=
-----END CERTIFICATE-----
Generated at Tue Oct 13 22:41:27 2026 by rpki-client