Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/b53d04a4-1c2c-3221-894a-2b746de6eaf3.roa
File:                     b53d04a4-1c2c-3221-894a-2b746de6eaf3.roa (raw, json)
Hash identifier:          PZv9ZcncxdKtk9yVCk9pW+76rnNN1RGMNHoweEKKvC8=
Subject key identifier:   2E:4C:F2:C6:ED:F9:8D:58:0E:D7:48:18:A2:18:DD:62:61:2C:F0:AF
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584E709F739700A419552DBB5C00
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/b53d04a4-1c2c-3221-894a-2b746de6eaf3.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     16509
IP address blocks:        2607:dbc0:830::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:73:97:00:a4:19:55:2d:bb:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=f37f0198-339e-41e1-87f7-91db9451a91b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:51:a6:e2:0b:da:09:2d:d4:0c:3c:f9:83:f4:
                    61:b1:c0:2a:d5:e1:78:fa:28:a5:85:ee:30:16:ea:
                    00:78:b1:ab:df:20:38:0f:fc:3d:8d:af:b5:cd:21:
                    09:63:a8:2e:0c:21:a2:eb:c9:3c:f3:1c:56:d7:d1:
                    53:b4:7d:8c:73:5f:28:0a:bb:6d:43:8e:28:28:41:
                    d4:82:ef:7c:2c:41:07:e5:64:cb:2b:dc:08:fd:60:
                    36:5f:7b:a3:1c:d1:b9:68:64:f8:5d:69:96:b2:dc:
                    ed:99:7e:8c:87:3a:58:ce:c9:dd:5c:33:24:c2:6d:
                    94:98:0b:9f:64:5a:d4:79:89:96:7d:55:7f:d5:a0:
                    8c:4b:8d:19:8b:b0:c2:1d:90:f5:49:99:5b:c3:7d:
                    d2:d3:7a:58:ad:46:25:ba:34:98:39:8d:60:71:c4:
                    d0:a9:38:86:b8:1c:17:d0:36:a3:9a:53:4c:1f:33:
                    09:d9:84:b0:eb:85:e9:ab:88:c7:74:c1:63:c3:bb:
                    c6:7b:12:1c:6e:f7:d1:e8:15:2f:b3:f3:4c:9a:ec:
                    99:6a:69:dc:3e:97:43:d4:ee:ba:0a:61:93:22:5a:
                    d6:4c:84:c8:8b:e1:a8:fc:3b:4f:a3:c6:ba:71:46:
                    f6:76:ba:47:85:81:23:d3:dc:67:69:5b:55:10:c0:
                    63:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4C:F2:C6:ED:F9:8D:58:0E:D7:48:18:A2:18:DD:62:61:2C:F0:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/b53d04a4-1c2c-3221-894a-2b746de6eaf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dbc0:830::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:46:d7:b8:23:46:c1:06:ba:63:90:a2:45:98:8e:19:1c:e5:
         f2:85:31:a3:8d:a0:16:6a:a0:0f:6a:10:44:c0:bd:c6:bc:ad:
         0c:73:a1:c4:c0:49:ed:f9:0a:82:b4:ee:7b:0f:1a:5a:35:7b:
         b8:35:5f:d7:52:8b:5b:77:0b:b1:cc:9a:bb:47:e3:7e:de:26:
         3c:4c:0c:cc:0b:73:d2:59:98:8d:80:c6:5f:44:de:17:b7:fd:
         05:8f:de:53:29:a5:fe:da:75:58:de:91:ee:e1:bc:e0:2d:3b:
         ee:eb:b1:8a:dc:09:a4:5c:2d:5a:03:8a:1f:32:02:ba:83:60:
         aa:20:a4:06:5d:eb:0b:5c:b4:bf:74:44:ff:0c:a3:79:b7:b8:
         90:02:86:60:1d:a9:6f:b9:72:b2:4c:4e:77:b2:ba:1f:34:c7:
         29:75:0b:98:e1:e7:83:a0:ca:8c:70:95:fb:ef:94:05:c7:77:
         e6:07:6b:d9:72:c8:91:d6:23:dd:00:d3:09:65:26:bf:6c:7a:
         ca:c0:56:be:62:5c:6a:d6:fb:31:c0:d2:ef:c9:8c:8d:25:2b:
         0a:61:46:ec:b8:76:d5:23:5f:75:44:b9:88:5a:c5:b7:51:f8:
         bc:98:6d:d6:af:ad:dc:14:b4:7b:11:03:49:60:2e:e8:ee:4a:
         13:04:00:91
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5wn3OXAKQZVS27XAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw
YzRiMB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk
ZjM3ZjAxOTgtMzM5ZS00MWUxLTg3ZjctOTFkYjk0NTFhOTFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFGm4gvaCS3UDDz5g/RhscAq1eF4+iilhe4w
FuoAeLGr3yA4D/w9ja+1zSEJY6guDCGi68k88xxW19FTtH2Mc18oCrttQ44oKEHU
gu98LEEH5WTLK9wI/WA2X3ujHNG5aGT4XWmWstztmX6MhzpYzsndXDMkwm2UmAuf
ZFrUeYmWfVV/1aCMS40Zi7DCHZD1SZlbw33S03pYrUYlujSYOY1gccTQqTiGuBwX
0DajmlNMHzMJ2YSw64Xpq4jHdMFjw7vGexIcbvfR6BUvs/NMmuyZamncPpdD1O66
CmGTIlrWTITIi+Go/DtPo8a6cUb2drpHhYEj09xnaVtVEMBj+wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC5M8sbt+Y1YDtdIGKIY3WJhLPCvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi
NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvYjUzZDA0YTQtMWMyYy0z
MjIxLTg5NGEtMmI3NDZkZTZlYWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh
Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1
MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4
ODVmNTBjNGIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgfbwAgw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABZG17gjRsEGumOQokWYjhkc5fKFMaONoBZqoA9qEETAvca8rQxz
ocTASe35CoK07nsPGlo1e7g1X9dSi1t3C7HMmrtH437eJjxMDMwLc9JZmI2Axl9E
3he3/QWP3lMppf7adVjeke7hvOAtO+7rsYrcCaRcLVoDih8yArqDYKogpAZd6wtc
tL90RP8Mo3m3uJAChmAdqW+5crJMTneyuh80xyl1C5jh54OgyoxwlfvvlAXHd+YH
a9lyyJHWI90A0wllJr9sesrAVr5iXGrW+zHA0u/JjI0lKwphRuy4dtUjX3VEuYha
xbdR+LyYbdavrdwUtHsRA0lgLujuShMEAJE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:17:55 2026 by rpki-client