Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/67c96e42-0f6b-3b2b-93fd-279a3a133246.roa
File:                     67c96e42-0f6b-3b2b-93fd-279a3a133246.roa (raw, json)
Hash identifier:          yVeGIe/E2fqkhhM5TrzOlkDR5HxI9o/Hg4JU9FcJVVQ=
Subject key identifier:   5B:65:FD:B2:B2:D6:B5:21:B5:5A:8A:E1:F4:67:B5:29:8B:49:BC:E2
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584E7204DAE69B5739CEC563AA80
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/67c96e42-0f6b-3b2b-93fd-279a3a133246.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     14618
IP address blocks:        2607:dbc0:c80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:da:e6:9b:57:39:ce:c5:63:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=74b27f4f-a2c3-4890-bb96-79afc45ec6da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:98:cd:77:0f:71:de:16:a1:df:f8:ec:7e:53:
                    e8:69:37:17:79:64:13:03:37:6a:22:4d:31:df:27:
                    8a:43:21:7e:ba:f7:00:8a:54:36:33:e4:cf:64:66:
                    00:e5:6f:f8:86:4b:1f:fd:64:32:1a:b1:8e:6e:b2:
                    d9:0f:a3:ed:ff:5e:a6:86:42:6a:5d:35:e0:ea:1d:
                    83:ce:37:0d:bb:36:8e:86:57:b4:dd:58:06:44:fe:
                    0c:6d:28:53:bf:5a:e7:8b:c5:79:be:e7:19:08:fc:
                    08:ee:c6:4a:40:b3:cd:28:e0:0c:6f:bd:9e:06:99:
                    72:f5:80:77:89:a4:5f:65:f4:24:79:96:87:95:a9:
                    59:6f:86:bc:c3:3f:23:f7:76:92:5a:3a:cc:7a:41:
                    c0:02:ce:85:e4:42:64:75:67:38:e7:02:a1:5f:0b:
                    0f:bc:39:34:4d:a7:51:77:18:ce:6c:78:19:9f:db:
                    b6:5f:35:b0:65:85:d3:f0:eb:27:e6:44:59:c8:fa:
                    f5:fe:8b:81:8c:22:d6:5f:29:11:6c:a6:84:96:2d:
                    dd:fd:5a:95:58:21:39:bb:39:21:20:fb:72:9f:e8:
                    74:7c:ec:bf:3c:5e:02:f9:9f:51:5c:e0:2c:15:07:
                    e6:a3:7e:b5:14:34:91:09:d6:42:77:19:08:a2:94:
                    87:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:65:FD:B2:B2:D6:B5:21:B5:5A:8A:E1:F4:67:B5:29:8B:49:BC:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/67c96e42-0f6b-3b2b-93fd-279a3a133246.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dbc0:c80::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:6d:e9:8e:b5:d6:7d:d3:22:af:29:f6:a5:03:11:01:86:65:
         c5:69:1f:99:9d:e3:11:31:f7:bf:07:d2:f2:28:32:12:ca:a7:
         00:43:9d:6a:76:e1:fd:cc:e9:69:18:79:0a:d7:fa:63:be:b4:
         7d:a0:58:ae:9a:7c:77:3c:c7:79:8f:6c:96:ab:00:c7:0f:5f:
         c9:4c:c3:be:a8:0a:8d:28:04:f0:53:3f:2f:b2:e1:a6:ce:80:
         f2:c6:34:08:32:66:03:8b:cb:67:d9:88:6c:46:13:47:e1:97:
         8d:af:6f:77:93:65:c2:b8:cd:bd:89:33:40:31:7b:32:ca:97:
         21:f5:62:3a:9d:32:64:0d:9f:8c:6a:db:34:25:e7:cc:a1:f0:
         d8:9f:38:d4:b3:af:fc:c8:f9:43:6a:1e:89:0f:43:7d:51:b3:
         6d:57:72:83:7b:2b:c7:5c:6d:25:2a:a4:25:21:46:0a:35:7b:
         94:c7:49:94:11:2a:65:2e:0f:99:08:2a:fd:d2:e0:65:d0:fa:
         41:6c:45:28:a6:eb:de:58:08:f6:27:3c:aa:73:1e:79:0d:4f:
         1b:2f:5f:b8:da:a2:28:03:e9:f7:58:03:6b:e6:30:51:28:ec:
         81:d6:4b:7b:bc:10:c1:07:2d:61:5e:e5:cb:be:08:ce:d6:69:
         ff:07:fc:3b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5yBNrmm1c5zsVjqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw
YzRiMB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk
NzRiMjdmNGYtYTJjMy00ODkwLWJiOTYtNzlhZmM0NWVjNmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5jNdw9x3hah3/jsflPoaTcXeWQTAzdqIk0x
3yeKQyF+uvcAilQ2M+TPZGYA5W/4hksf/WQyGrGObrLZD6Pt/16mhkJqXTXg6h2D
zjcNuzaOhle03VgGRP4MbShTv1rni8V5vucZCPwI7sZKQLPNKOAMb72eBply9YB3
iaRfZfQkeZaHlalZb4a8wz8j93aSWjrMekHAAs6F5EJkdWc45wKhXwsPvDk0TadR
dxjObHgZn9u2XzWwZYXT8Osn5kRZyPr1/ouBjCLWXykRbKaEli3d/VqVWCE5uzkh
IPtyn+h0fOy/PF4C+Z9RXOAsFQfmo361FDSRCdZCdxkIopSHGQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFtl/bKy1rUhtVqK4fRntSmLSbziMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi
NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvNjdjOTZlNDItMGY2Yi0z
YjJiLTkzZmQtMjc5YTNhMTMzMjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh
Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1
MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4
ODVmNTBjNGIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgfbwAyA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG1t6Y611n3TIq8p9qUDEQGGZcVpH5md4xEx978H0vIoMhLKpwBD
nWp24f3M6WkYeQrX+mO+tH2gWK6afHc8x3mPbJarAMcPX8lMw76oCo0oBPBTPy+y
4abOgPLGNAgyZgOLy2fZiGxGE0fhl42vb3eTZcK4zb2JM0AxezLKlyH1YjqdMmQN
n4xq2zQl58yh8NifONSzr/zI+UNqHokPQ31Rs21XcoN7K8dcbSUqpCUhRgo1e5TH
SZQRKmUuD5kIKv3S4GXQ+kFsRSim695YCPYnPKpzHnkNTxsvX7jaoigD6fdYA2vm
MFEo7IHWS3u8EMEHLWFe5cu+CM7Waf8H/Ds=
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:26:18 2026 by rpki-client