Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/a559c43a-822a-3af3-90a9-ad8afc7a4af5.roa
File:                     a559c43a-822a-3af3-90a9-ad8afc7a4af5.roa (raw, json)
Hash identifier:          iOUIUjmMs9tTkBBzaqsjiZxxr2qW9hdkw4kEeR4N5IU=
Subject key identifier:   81:2B:16:63:9E:1D:82:CD:E6:74:E0:47:61:18:0D:D4:C3:B7:B0:52
Certificate issuer:       /CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27
Certificate serial:       010D0C9F4328584E5B1F113F58BC26210D3F5300
Authority key identifier: A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/a559c43a-822a-3af3-90a9-ad8afc7a4af5.roa
Signing time:             Wed 01 Jul 2026 16:09:40 +0000
ROA not before:           Wed 01 Jul 2026 16:09:40 +0000
ROA not after:            Tue 29 Sep 2026 16:09:22 +0000
asID:                     398378
IP address blocks:        2605:c540:8c00::/42 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:1f:11:3f:58:bc:26:21:0d:3f:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27
        Validity
            Not Before: Jul  1 16:09:40 2026 GMT
            Not After : Sep 29 16:09:22 2026 GMT
        Subject: CN=1c8d7d12-a1f7-478c-aa05-ac45c8ae9af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7b:75:fc:92:9b:5d:2e:ce:79:c8:32:f6:60:
                    70:77:0d:0f:9f:48:58:2c:f9:93:b9:4f:2a:cf:a7:
                    0b:09:06:53:e4:3f:c4:46:a2:4a:fb:02:31:f6:c9:
                    31:96:4c:da:d1:b9:a8:90:e4:7c:14:1e:8e:1b:ce:
                    54:48:1b:d6:1e:53:84:ab:63:2c:11:75:53:ce:e1:
                    d5:50:d4:df:11:c2:77:e1:6c:72:74:ab:f8:5c:8d:
                    99:7e:25:a5:6d:85:50:3f:d2:74:4b:fb:9a:39:f5:
                    51:21:66:0b:d2:3b:7c:aa:83:86:72:6c:bd:65:36:
                    8a:cf:b3:a1:19:4a:7f:bb:22:7d:a9:a5:70:ee:23:
                    06:2e:12:d7:71:2e:3e:38:82:1c:c2:39:3b:78:83:
                    87:47:b1:3d:03:08:9b:f6:a7:4b:46:74:b1:4c:48:
                    11:f9:11:65:58:52:c1:fa:0a:93:f0:e6:fd:16:da:
                    85:a9:ff:9e:46:0d:22:c6:6b:02:04:a9:39:12:e9:
                    0c:fd:50:7d:f2:8c:10:78:6e:91:1b:73:cd:65:01:
                    85:64:9d:59:56:8e:2e:02:cd:af:50:8d:53:7d:12:
                    08:10:79:e3:33:84:17:98:90:ed:23:74:08:19:b2:
                    ed:0b:5b:55:71:7a:16:8d:66:2f:1b:3a:83:68:0e:
                    f8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2B:16:63:9E:1D:82:CD:E6:74:E0:47:61:18:0D:D4:C3:B7:B0:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/a559c43a-822a-3af3-90a9-ad8afc7a4af5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.crl

            X509v3 Authority Key Identifier:
                keyid:A1:2C:DA:96:0B:63:94:15:8D:17:96:2B:73:6A:DF:40:5C:72:A2:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d9ab9a45-2b06-4ca8-bd0f-bbd96acccc27.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c540:8c00::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:2a:25:f6:15:9a:2a:56:cf:bb:d3:ba:17:c6:bd:ee:b0:0a:
         88:6a:a8:1a:fc:c1:9b:9c:4a:8c:d6:22:5f:2b:30:60:e3:81:
         12:d7:69:5b:4d:90:8c:fb:11:37:7f:dd:de:16:bd:32:2f:4b:
         81:b7:6c:ca:08:cd:69:4d:09:a5:72:c0:f9:15:3f:e6:90:1b:
         cd:5f:88:55:bc:c2:15:08:49:3f:53:03:1a:ae:45:4a:bf:96:
         61:12:8b:53:40:ca:58:d1:ae:ce:a7:81:e2:cd:d3:4e:2f:5b:
         39:99:c1:aa:d1:7a:44:58:f7:2a:29:1e:33:dc:27:52:a9:06:
         5c:74:1c:dc:29:6a:c6:b8:b9:ae:0a:19:51:f1:2a:cd:81:be:
         ad:4b:ae:34:5a:81:2e:9b:d0:c7:de:59:24:07:be:75:20:13:
         b1:77:da:7b:00:8a:8c:11:2d:ae:78:fd:ff:54:1f:28:41:42:
         de:ff:86:da:df:50:ff:bf:01:82:1e:c9:13:34:56:5d:d4:17:
         79:e2:19:9c:d2:a2:42:e1:ca:fb:2b:b2:4a:2c:92:05:55:4f:
         de:b7:77:e3:6f:0a:1e:48:c9:f8:72:16:57:3b:24:16:19:01:
         87:7a:53:2a:53:92:c0:a9:ca:9a:7f:de:6d:be:e7:52:34:fb:
         9b:c4:fc:c8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5bHxE/WLwmIQ0/UwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlhYjlhNDUtMmIwNi00Y2E4LWJkMGYtYmJkOTZhY2Nj
YzI3MB4XDTI2MDcwMTE2MDk0MFoXDTI2MDkyOTE2MDkyMlowLzEtMCsGA1UEAxMk
MWM4ZDdkMTItYTFmNy00NzhjLWFhMDUtYWM0NWM4YWU5YWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nt1/JKbXS7Oecgy9mBwdw0Pn0hYLPmTuU8q
z6cLCQZT5D/ERqJK+wIx9skxlkza0bmokOR8FB6OG85USBvWHlOEq2MsEXVTzuHV
UNTfEcJ34WxydKv4XI2ZfiWlbYVQP9J0S/uaOfVRIWYL0jt8qoOGcmy9ZTaKz7Oh
GUp/uyJ9qaVw7iMGLhLXcS4+OIIcwjk7eIOHR7E9Awib9qdLRnSxTEgR+RFlWFLB
+gqT8Ob9FtqFqf+eRg0ixmsCBKk5EukM/VB98owQeG6RG3PNZQGFZJ1ZVo4uAs2v
UI1TfRIIEHnjM4QXmJDtI3QIGbLtC1tVcXoWjWYvGzqDaA74cQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIErFmOeHYLN5nTgR2EYDdTDt7BSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kOWFi
OWE0NS0yYjA2LTRjYTgtYmQwZi1iYmQ5NmFjY2NjMjcvYTU1OWM0M2EtODIyYS0z
YWYzLTkwYTktYWQ4YWZjN2E0YWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDlhYjlhNDUtMmIwNi00Y2E4LWJk
MGYtYmJkOTZhY2NjYzI3L2Q5YWI5YTQ1LTJiMDYtNGNhOC1iZDBmLWJiZDk2YWNj
Y2MyNy5jcmwwHwYDVR0jBBgwFoAUoSzalgtjlBWNF5Yrc2rfQFxyouswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kOWFiOWE0NS0yYjA2LTRjYTgtYmQwZi1iYmQ5
NmFjY2NjMjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgXFQIwA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHYqJfYVmipWz7vTuhfGve6wCohqqBr8wZucSozWIl8rMGDjgRLX
aVtNkIz7ETd/3d4WvTIvS4G3bMoIzWlNCaVywPkVP+aQG81fiFW8whUIST9TAxqu
RUq/lmESi1NAyljRrs6ngeLN004vWzmZwarRekRY9yopHjPcJ1KpBlx0HNwpasa4
ua4KGVHxKs2Bvq1LrjRagS6b0MfeWSQHvnUgE7F32nsAiowRLa54/f9UHyhBQt7/
htrfUP+/AYIeyRM0Vl3UF3niGZzSokLhyvsrskoskgVVT963d+NvCh5IyfhyFlc7
JBYZAYd6UypTksCpypp/3m2+51I0+5vE/Mg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:32 2026 by rpki-client