Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/1a3be8c0-b1c6-3ba7-a332-9897bf083ede.roa
File:                     1a3be8c0-b1c6-3ba7-a332-9897bf083ede.roa (raw, json)
Hash identifier:          vyfkr8ft6+wmfTfWSnIjw1wWNa4zlEp4wUEs2gJ3/yE=
Subject key identifier:   FC:52:4F:61:50:9F:02:E1:5F:75:1F:A6:7F:4E:B1:FE:BE:EC:B0:9D
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584E6F3EB784B60F19601A0DFB00
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/1a3be8c0-b1c6-3ba7-a332-9897bf083ede.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        2607:dbc0:f010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3e:b7:84:b6:0f:19:60:1a:0d:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=cb6af529-1707-4c47-a107-c7ac0db2a7be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:dd:27:dd:79:4a:d0:c6:7a:d6:22:65:ee:cd:
                    79:76:b8:49:a3:53:8a:aa:ea:f2:70:d4:03:a5:d6:
                    4b:5b:c2:28:90:fc:09:c3:56:8f:37:f3:d0:ec:d3:
                    67:4b:12:a5:40:4b:19:7c:39:fd:e5:bd:fb:0c:af:
                    16:fb:21:a3:e6:ac:0c:ed:d0:74:3f:14:7c:a9:2e:
                    ec:34:af:c0:ff:e1:bb:1b:26:2e:0e:b2:0f:98:88:
                    35:f9:af:c3:0f:fe:73:70:e6:05:40:ae:e5:57:9b:
                    d0:0d:98:f5:27:b1:6b:ef:8b:b0:47:73:8e:6b:55:
                    02:a7:ab:67:99:40:fb:b3:4c:1f:8b:eb:76:02:2e:
                    98:1f:f7:ce:6d:b1:3b:07:85:dd:d5:f9:a8:9e:1a:
                    dc:dd:4e:96:61:3b:8d:97:f0:df:1f:ef:0b:45:a6:
                    2a:ca:b6:51:a9:df:e5:9a:d1:a0:af:bf:20:3f:df:
                    54:74:a8:74:bb:f1:a0:89:74:48:fc:1a:47:8b:6f:
                    d2:71:33:b8:e3:97:05:47:20:74:1d:5d:89:39:e6:
                    f5:5e:10:5d:be:c8:4f:17:36:ec:04:60:ac:fc:07:
                    5b:40:aa:eb:e0:d2:3d:41:78:4c:dd:2a:ba:f7:8a:
                    68:36:9b:66:50:42:95:16:2e:2f:5f:95:6a:52:01:
                    37:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:52:4F:61:50:9F:02:E1:5F:75:1F:A6:7F:4E:B1:FE:BE:EC:B0:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/1a3be8c0-b1c6-3ba7-a332-9897bf083ede.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dbc0:f010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:66:ba:0c:c7:c6:b2:9c:de:34:ab:3b:e4:ff:3b:fc:04:ab:
         23:36:e1:38:d5:26:9e:3b:f1:f1:91:2c:8e:96:ef:fd:a1:d9:
         71:e3:e8:87:64:2f:63:2a:76:74:84:b7:25:d8:a9:5d:d2:fd:
         6d:47:7b:b2:25:72:84:2e:57:68:05:7b:11:6a:26:0e:6f:4b:
         a8:30:45:63:1e:91:23:03:64:2b:ec:cd:d1:29:e8:77:3c:7a:
         02:ac:43:36:30:8f:d0:57:95:d5:f8:69:2e:e1:ac:36:f3:7a:
         cb:03:33:ab:cc:b8:a3:16:88:73:e0:ab:bd:1f:c8:38:3b:3d:
         1d:40:b9:44:b2:c5:79:ab:60:b5:32:b3:e8:17:5b:04:75:db:
         e4:1a:18:68:49:77:d5:d2:86:b8:70:76:b7:e9:fc:e0:14:3e:
         1b:d3:eb:a8:e4:a2:d0:85:58:64:02:9b:ce:d3:fb:40:bb:f7:
         ba:8b:e9:17:ca:48:b0:25:16:e9:bd:e3:f7:0f:b8:a9:f1:dc:
         3c:f9:3b:94:6b:d2:23:ea:60:d3:b4:dd:01:84:6e:f6:f3:3d:
         24:5d:e1:33:9b:3f:e1:48:d7:75:74:0c:55:80:17:bf:be:ae:
         7a:b3:e0:ce:7d:35:36:a3:36:c0:59:5c:47:ba:8c:f4:3e:46:
         15:ea:da:0a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5vPreEtg8ZYBoN+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw
YzRiMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
Y2I2YWY1MjktMTcwNy00YzQ3LWExMDctYzdhYzBkYjJhN2JlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd0n3XlK0MZ61iJl7s15drhJo1OKqurycNQD
pdZLW8IokPwJw1aPN/PQ7NNnSxKlQEsZfDn95b37DK8W+yGj5qwM7dB0PxR8qS7s
NK/A/+G7GyYuDrIPmIg1+a/DD/5zcOYFQK7lV5vQDZj1J7Fr74uwR3OOa1UCp6tn
mUD7s0wfi+t2Ai6YH/fObbE7B4Xd1fmonhrc3U6WYTuNl/DfH+8LRaYqyrZRqd/l
mtGgr78gP99UdKh0u/GgiXRI/BpHi2/ScTO445cFRyB0HV2JOeb1XhBdvshPFzbs
BGCs/AdbQKrr4NI9QXhM3Sq694poNptmUEKVFi4vX5VqUgE33wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPxST2FQnwLhX3Ufpn9Osf6+7LCdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi
NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvMWEzYmU4YzAtYjFjNi0z
YmE3LWEzMzItOTg5N2JmMDgzZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh
Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1
MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4
ODVmNTBjNGIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgfbwPAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGhmugzHxrKc3jSrO+T/O/wEqyM24TjVJp478fGRLI6W7/2h2XHj
6IdkL2MqdnSEtyXYqV3S/W1He7IlcoQuV2gFexFqJg5vS6gwRWMekSMDZCvszdEp
6Hc8egKsQzYwj9BXldX4aS7hrDbzessDM6vMuKMWiHPgq70fyDg7PR1AuUSyxXmr
YLUys+gXWwR12+QaGGhJd9XShrhwdrfp/OAUPhvT66jkotCFWGQCm87T+0C797qL
6RfKSLAlFum94/cPuKnx3Dz5O5Rr0iPqYNO03QGEbvbzPSRd4TObP+FI13V0DFWA
F7++rnqz4M59NTajNsBZXEe6jPQ+RhXq2go=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:16:56 2026 by rpki-client