Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/a0aed2cf-81a0-3fc0-85fd-f145b0a7dd1d.roa
File:                     a0aed2cf-81a0-3fc0-85fd-f145b0a7dd1d.roa (raw, json)
Hash identifier:          bwVlAcGh6JW3DFizqjUJ6s8pmFWpadN9R3AXOPjp6XQ=
Subject key identifier:   2A:39:B4:60:23:3F:79:12:20:24:15:C3:AE:2C:E9:16:89:BF:39:EF
Certificate issuer:       /CN=60e6a30d-f63a-493d-8227-28d94c142383
Certificate serial:       010D0C9F4328584E86F4E9D188B95729768D3080
Authority key identifier: 3F:20:A7:2E:30:3C:A4:E2:90:3E:56:0F:0E:3B:5B:9E:DE:5D:FF:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/a0aed2cf-81a0-3fc0-85fd-f145b0a7dd1d.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     19163
IP address blocks:        2607:b340::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:e9:d1:88:b9:57:29:76:8d:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e6a30d-f63a-493d-8227-28d94c142383
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=fa9a226d-d87d-4944-96e7-ba9bd589f60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8a:7a:48:15:23:f5:f5:76:61:87:fa:0a:a8:
                    6f:cf:f4:69:57:48:0e:6b:54:c6:72:b1:9c:c1:d6:
                    96:b2:08:79:96:54:73:9b:ba:07:12:4f:66:a3:19:
                    24:74:8b:13:ad:92:48:33:79:33:ca:3e:96:95:d1:
                    f3:2e:e5:de:db:b9:82:70:ae:a9:10:d5:e4:32:3f:
                    97:d7:4d:15:24:73:ae:38:39:ff:0a:20:e8:7b:2e:
                    1e:7d:b7:e0:4f:4c:34:3b:31:c5:d9:1c:0c:a4:1a:
                    0e:97:e2:63:c1:46:29:53:ab:9b:3f:54:cc:98:6a:
                    1b:3c:d5:31:b0:4f:2b:d3:44:aa:f7:a7:0c:3f:a9:
                    29:48:29:b6:8e:43:f3:42:1d:91:63:5d:28:ab:1e:
                    8e:2d:c9:5f:67:2f:42:ff:bb:d7:09:8b:a2:d3:5e:
                    1c:d8:36:f1:f1:1f:81:9c:f0:9b:be:e7:81:c1:c6:
                    a8:8f:33:80:9a:ae:98:87:99:d3:ef:91:6d:d3:ad:
                    6a:2e:83:2c:2b:8c:cd:8d:69:df:3a:86:46:a8:71:
                    28:03:83:49:7b:69:6d:ad:41:13:39:07:ba:e9:17:
                    2d:08:50:c5:7d:0a:62:bf:94:13:a1:46:2e:30:fe:
                    35:8f:37:0c:53:73:d2:45:a5:63:c7:3c:89:87:e8:
                    9d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:39:B4:60:23:3F:79:12:20:24:15:C3:AE:2C:E9:16:89:BF:39:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/a0aed2cf-81a0-3fc0-85fd-f145b0a7dd1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383/60e6a30d-f63a-493d-8227-28d94c142383.crl

            X509v3 Authority Key Identifier:
                keyid:3F:20:A7:2E:30:3C:A4:E2:90:3E:56:0F:0E:3B:5B:9E:DE:5D:FF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60e6a30d-f63a-493d-8227-28d94c142383.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f3:e4:88:72:7e:05:6e:67:76:87:e7:e7:66:16:fe:70:a8:
         5f:fa:7a:0f:09:14:dc:1c:5a:46:52:73:8a:32:0c:8d:ff:b9:
         ae:0b:47:d4:20:1b:df:2a:e6:3b:0e:65:9c:3c:42:f9:1b:05:
         88:b5:e0:7c:6f:88:01:8b:9d:68:cd:7b:1f:8f:f5:fb:7e:f5:
         e3:d3:ee:6e:7e:d9:71:84:80:1d:6a:4f:6f:74:f0:78:43:a0:
         60:e1:11:01:a6:d1:0a:da:53:d4:aa:cd:0d:d9:5f:87:35:7c:
         ac:b1:e6:78:0b:51:b7:60:5a:7c:c3:d6:dd:06:17:d4:c1:9a:
         01:b9:29:5f:9e:0c:3b:e6:e2:7c:ba:96:46:3b:22:9c:c5:bc:
         63:74:96:9b:77:38:4e:0a:bf:b6:b3:fa:4c:3e:0f:bd:76:37:
         bc:22:03:17:d9:f1:ac:30:a4:fb:69:e5:aa:3e:78:ff:a5:6b:
         79:e7:30:7c:e3:6f:10:68:8d:90:e0:4f:45:16:9c:9d:56:99:
         1f:45:07:69:01:41:5a:f9:82:1b:f9:dd:e4:64:89:b4:8d:73:
         5e:f0:f6:a8:00:7c:9f:3f:55:cf:44:61:d9:27:db:ab:9c:33:
         79:4a:af:49:99:b9:b6:e3:43:b2:3d:07:a2:b5:b9:0b:1b:0b:
         ea:c3:7f:9c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6G9OnRiLlXKXaNMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBlNmEzMGQtZjYzYS00OTNkLTgyMjctMjhkOTRjMTQy
MzgzMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk
ZmE5YTIyNmQtZDg3ZC00OTQ0LTk2ZTctYmE5YmQ1ODlmNjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ip6SBUj9fV2YYf6Cqhvz/RpV0gOa1TGcrGc
wdaWsgh5llRzm7oHEk9moxkkdIsTrZJIM3kzyj6WldHzLuXe27mCcK6pENXkMj+X
100VJHOuODn/CiDoey4efbfgT0w0OzHF2RwMpBoOl+JjwUYpU6ubP1TMmGobPNUx
sE8r00Sq96cMP6kpSCm2jkPzQh2RY10oqx6OLclfZy9C/7vXCYui014c2Dbx8R+B
nPCbvueBwcaojzOAmq6Yh5nT75Ft061qLoMsK4zNjWnfOoZGqHEoA4NJe2ltrUET
OQe66RctCFDFfQpiv5QToUYuMP41jzcMU3PSRaVjxzyJh+id6QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCo5tGAjP3kSICQVw64s6RaJvznvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MGU2
YTMwZC1mNjNhLTQ5M2QtODIyNy0yOGQ5NGMxNDIzODMvYTBhZWQyY2YtODFhMC0z
ZmMwLTg1ZmQtZjE0NWIwYTdkZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjBlNmEzMGQtZjYzYS00OTNkLTgy
MjctMjhkOTRjMTQyMzgzLzYwZTZhMzBkLWY2M2EtNDkzZC04MjI3LTI4ZDk0YzE0
MjM4My5jcmwwHwYDVR0jBBgwFoAUPyCnLjA8pOKQPlYPDjtbnt5d/0MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82MGU2YTMwZC1mNjNhLTQ5M2QtODIyNy0yOGQ5
NGMxNDIzODMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgezQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAL8+SIcn4Fbmd2h+fnZhb+cKhf+noPCRTcHFpGUnOKMgyN/7muC0fU
IBvfKuY7DmWcPEL5GwWIteB8b4gBi51ozXsfj/X7fvXj0+5uftlxhIAdak9vdPB4
Q6Bg4REBptEK2lPUqs0N2V+HNXysseZ4C1G3YFp8w9bdBhfUwZoBuSlfngw75uJ8
upZGOyKcxbxjdJabdzhOCr+2s/pMPg+9dje8IgMX2fGsMKT7aeWqPnj/pWt55zB8
428QaI2Q4E9FFpydVpkfRQdpAUFa+YIb+d3kZIm0jXNe8PaoAHyfP1XPRGHZJ9ur
nDN5Sq9Jmbm240OyPQeitbkLGwvqw3+c
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:13:53 2026 by rpki-client