Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b0fc81a9-69c9-3960-ba86-48a8f60e43c9.roa
File:                     b0fc81a9-69c9-3960-ba86-48a8f60e43c9.roa (raw, json)
Hash identifier:          larr9NOW4rULEROFPUPrS3xw93l4CtwHsI+H7yckqds=
Subject key identifier:   95:68:22:C3:0F:2B:72:97:5A:A5:64:2C:60:0E:44:76:48:AC:48:1D
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E3B94712749291F1F45C1F600
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b0fc81a9-69c9-3960-ba86-48a8f60e43c9.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     22616
IP address blocks:        2605:4300:2900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:71:27:49:29:1f:1f:45:c1:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=038c2433-51fd-48c0-bc6d-be74128c9338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:91:bd:a5:1c:06:41:4a:2c:32:e0:28:d6:fa:
                    b7:99:65:ad:d6:7e:17:be:74:f7:da:9f:5f:4a:11:
                    0a:82:f0:53:21:0a:47:5e:b0:b5:0d:1e:d2:1d:61:
                    bb:9c:61:90:5d:46:1b:fd:d0:90:14:ab:7c:da:8e:
                    54:83:b7:66:1a:65:d2:23:e6:db:0f:84:15:29:aa:
                    a5:c1:35:a8:87:27:e8:7e:87:86:01:a6:e3:8b:c1:
                    df:b4:ae:70:55:9b:a4:f8:1e:58:ef:5e:70:17:61:
                    5b:db:19:02:60:b6:68:f3:a0:7b:c9:4d:b8:bd:4b:
                    fe:14:45:c7:a3:70:db:9d:4f:fe:ab:ce:1f:03:b6:
                    02:dc:27:ca:60:82:48:5f:c5:fa:cf:e1:10:c2:49:
                    d5:78:f7:3b:a1:ee:ae:5f:73:da:c2:0b:a9:b9:0f:
                    e9:79:41:c1:27:8c:4f:29:00:af:0a:d1:52:3e:0e:
                    5d:a8:10:a8:21:be:cd:39:5f:2c:52:84:02:21:04:
                    0c:5c:4e:b1:34:43:7a:19:64:e0:1f:c2:79:d4:72:
                    ab:fc:8d:97:42:b5:8f:52:84:a8:15:9c:58:2b:28:
                    ae:0a:91:65:12:c3:7c:62:ba:c8:2a:24:c7:2a:0a:
                    a3:aa:03:2d:02:0c:ea:01:42:b1:db:33:74:a5:92:
                    71:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:68:22:C3:0F:2B:72:97:5A:A5:64:2C:60:0E:44:76:48:AC:48:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b0fc81a9-69c9-3960-ba86-48a8f60e43c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:d2:2a:44:83:56:da:56:2c:84:55:b1:bd:23:4f:13:37:36:
         2e:b9:17:3a:39:9e:fd:d3:21:2a:d9:a7:00:f2:17:28:68:7a:
         49:db:43:2e:a8:f2:82:b2:ce:7a:44:38:31:c0:70:95:5b:f5:
         c7:34:96:ff:a4:40:21:28:9e:7b:38:9b:8c:32:ed:58:5d:cf:
         15:0d:e1:45:9e:e6:fe:b5:dc:d8:e3:cf:cc:64:47:93:68:6c:
         13:20:61:53:27:43:4b:b9:32:16:bc:57:52:a9:83:ee:bc:52:
         96:55:81:da:07:d0:2c:e3:ba:8f:44:90:9d:36:a0:3c:58:a1:
         0d:e4:68:a8:80:80:ef:66:5d:5f:ff:be:bb:34:31:14:59:27:
         ce:52:e9:c4:f2:75:0b:2a:2f:2c:80:6d:c0:a9:f9:fe:6d:bb:
         f1:92:1a:e6:49:85:62:7c:2d:87:1c:18:06:45:ea:90:9b:12:
         8b:76:02:79:73:f6:35:1a:ee:19:a6:b3:16:f8:ef:6f:55:55:
         a1:40:f5:92:1c:81:80:30:bc:1b:60:7e:d4:43:9e:cb:be:a6:
         b1:d2:b5:75:ea:07:f1:44:a7:3b:45:32:1f:a2:aa:8c:b3:f6:
         f0:b2:a7:86:5f:3e:be:f1:b5:5c:f6:e5:5e:16:60:7c:91:0e:
         68:b9:d6:b4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE47lHEnSSkfH0XB9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MDYyMDA5MDAxM1oXDTI2MDkxODA5MDAxM1owLzEtMCsGA1UEAxMk
MDM4YzI0MzMtNTFmZC00OGMwLWJjNmQtYmU3NDEyOGM5MzM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5G9pRwGQUosMuAo1vq3mWWt1n4XvnT32p9f
ShEKgvBTIQpHXrC1DR7SHWG7nGGQXUYb/dCQFKt82o5Ug7dmGmXSI+bbD4QVKaql
wTWohyfofoeGAabji8HftK5wVZuk+B5Y715wF2Fb2xkCYLZo86B7yU24vUv+FEXH
o3DbnU/+q84fA7YC3CfKYIJIX8X6z+EQwknVePc7oe6uX3PawgupuQ/peUHBJ4xP
KQCvCtFSPg5dqBCoIb7NOV8sUoQCIQQMXE6xNEN6GWTgH8J51HKr/I2XQrWPUoSo
FZxYKyiuCpFlEsN8YrrIKiTHKgqjqgMtAgzqAUKx2zN0pZJx3wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJVoIsMPK3KXWqVkLGAORHZIrEgdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYjBmYzgxYTktNjljOS0z
OTYwLWJhODYtNDhhOGY2MGU0M2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgVDACkw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAn9IqRINW2lYshFWxvSNPEzc2LrkXOjme/dMhKtmnAPIXKGh6SdtD
LqjygrLOekQ4McBwlVv1xzSW/6RAISieezibjDLtWF3PFQ3hRZ7m/rXc2OPPzGRH
k2hsEyBhUydDS7kyFrxXUqmD7rxSllWB2gfQLOO6j0SQnTagPFihDeRoqICA72Zd
X/++uzQxFFknzlLpxPJ1CyovLIBtwKn5/m278ZIa5kmFYnwthxwYBkXqkJsSi3YC
eXP2NRruGaazFvjvb1VVoUD1khyBgDC8G2B+1EOey76msdK1deoH8USnO0UyH6Kq
jLP28LKnhl8+vvG1XPblXhZgfJEOaLnWtA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:39:28 2026 by rpki-client