Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a86368d0-d991-3082-9c0f-93fb84950372.roa
File:                     a86368d0-d991-3082-9c0f-93fb84950372.roa (raw, json)
Hash identifier:          9wRtf6lPl8VjpP6O0fOC2NzzNLrLX1BzFCLna70e/UA=
Subject key identifier:   B3:16:15:A9:C8:9D:63:67:7B:23:17:8F:DE:09:1E:27:9B:F4:1E:24
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584D95EFF3FC7625FE365392EE80
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a86368d0-d991-3082-9c0f-93fb84950372.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     11055
IP address blocks:        2604:7a00:ffe0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:f3:fc:76:25:fe:36:53:92:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=93cb8faa-54a8-4fb0-a816-1d52a891dea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fb:1d:d7:a5:6e:71:93:16:18:cf:0c:00:41:
                    24:d0:0d:a9:be:b6:03:d3:63:cc:d1:d3:6a:5e:38:
                    8b:3f:33:3e:12:c4:dc:43:4c:44:50:bb:e7:3d:bf:
                    22:79:3d:a9:c3:79:e6:9c:45:d6:2d:cb:be:27:4f:
                    f4:06:be:f1:c6:12:02:44:13:6e:e1:db:ba:99:ab:
                    4c:73:38:d8:17:6b:b9:f3:5e:ee:b4:df:39:a9:56:
                    f8:47:54:7d:3c:b7:5a:bd:09:22:b4:ee:5c:4c:0e:
                    7f:ea:12:65:57:b9:85:06:8e:ab:d6:8e:13:08:8c:
                    be:cc:6a:2c:9f:7e:21:da:ea:6b:cb:69:77:95:00:
                    d1:0d:9f:38:66:9f:f2:42:71:5d:ff:98:40:8d:af:
                    47:bc:31:72:2f:a3:c9:c4:d1:d6:93:e4:73:73:ab:
                    da:4d:5d:55:39:69:29:1c:49:57:e1:67:52:6b:0d:
                    ea:6a:b5:80:3c:85:59:a3:a2:6e:4f:06:cb:69:97:
                    05:e3:2b:20:28:d6:ac:91:8c:23:1c:66:45:d2:84:
                    56:5c:41:a7:93:12:9b:04:a1:19:04:c7:8f:2c:ec:
                    1e:b1:67:50:87:3a:6a:78:bd:b5:ff:5c:7d:f8:92:
                    36:5c:a1:c2:81:e9:60:9b:9f:40:b4:85:7c:29:a3:
                    8d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:16:15:A9:C8:9D:63:67:7B:23:17:8F:DE:09:1E:27:9B:F4:1E:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a86368d0-d991-3082-9c0f-93fb84950372.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7a00:ffe0::/43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:66:03:74:ff:6d:19:8d:d6:21:7d:b3:11:36:c5:2e:b6:c0:
         44:ea:23:44:06:09:b4:22:04:e9:7f:f8:fa:77:11:a4:61:f6:
         ff:e8:37:64:17:e4:14:9c:e7:73:b8:d9:aa:df:64:ab:4f:8b:
         74:7e:e3:0b:1c:60:16:65:46:2c:dd:38:21:3d:54:00:87:39:
         c1:b2:05:ff:69:4c:47:1f:f7:74:a4:5c:ed:30:a2:5b:85:50:
         44:6a:76:ff:05:07:9a:b5:33:f9:c6:6d:ec:97:ad:e5:41:8d:
         36:63:3b:77:81:7f:43:1c:7d:ea:6c:78:40:6c:ac:a0:2b:6c:
         5d:ca:23:b8:3a:73:fd:0c:34:1e:6c:e2:6c:a7:22:2d:ca:8a:
         8a:57:61:67:fa:da:96:af:3e:de:78:94:28:87:db:6d:d5:cc:
         3a:de:fa:3b:8b:9d:86:fd:f4:91:97:51:67:ed:19:cc:4f:13:
         10:03:2b:10:70:a3:a3:39:62:f7:8c:fc:4c:76:b1:19:f0:87:
         7c:2f:8b:9d:d3:f8:30:1f:4d:33:5d:49:5d:b4:9e:0c:78:56:
         3a:2c:f0:a0:3c:96:3a:8f:cb:f0:f1:52:c5:1c:e8:02:04:cb:
         7c:b7:12:81:8c:ef:97:32:3b:71:b5:d0:cd:06:13:8c:66:68:
         41:25:fd:05
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2V7/P8diX+NlOS7oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk
OTNjYjhmYWEtNTRhOC00ZmIwLWE4MTYtMWQ1MmE4OTFkZWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/sd16VucZMWGM8MAEEk0A2pvrYD02PM0dNq
XjiLPzM+EsTcQ0xEULvnPb8ieT2pw3nmnEXWLcu+J0/0Br7xxhICRBNu4du6matM
czjYF2u5817utN85qVb4R1R9PLdavQkitO5cTA5/6hJlV7mFBo6r1o4TCIy+zGos
n34h2upry2l3lQDRDZ84Zp/yQnFd/5hAja9HvDFyL6PJxNHWk+Rzc6vaTV1VOWkp
HElX4WdSaw3qarWAPIVZo6JuTwbLaZcF4ysgKNaskYwjHGZF0oRWXEGnkxKbBKEZ
BMePLOwesWdQhzpqeL21/1x9+JI2XKHCgelgm59AtIV8KaON9QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLMWFanInWNneyMXj94JHieb9B4kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvYTg2MzY4ZDAtZDk5MS0z
MDgyLTljMGYtOTNmYjg0OTUwMzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcFJgR6AP/g
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAJmA3T/bRmN1iF9sxE2xS62wETqI0QGCbQiBOl/+Pp3EaRh9v/o
N2QX5BSc53O42arfZKtPi3R+4wscYBZlRizdOCE9VACHOcGyBf9pTEcf93SkXO0w
oluFUERqdv8FB5q1M/nGbeyXreVBjTZjO3eBf0McfepseEBsrKArbF3KI7g6c/0M
NB5s4mynIi3KiopXYWf62pavPt54lCiH223VzDre+juLnYb99JGXUWftGcxPExAD
KxBwo6M5YveM/Ex2sRnwh3wvi53T+DAfTTNdSV20ngx4Vjos8KA8ljqPy/DxUsUc
6AIEy3y3EoGM75cyO3G10M0GE4xmaEEl/QU=
-----END CERTIFICATE-----
Generated at Wed May 13 10:52:03 2026 by rpki-client