Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/22b6363d-3f5d-3d91-9652-31215bc9d783.roa
File:                     22b6363d-3f5d-3d91-9652-31215bc9d783.roa (raw, json)
Hash identifier:          ZxmIdOxlSQUbVBZOMjTTxzJe5pNUnJVjc1iNkfYK6GM=
Subject key identifier:   AE:EE:B0:4B:3A:6B:AC:59:C8:B7:B7:86:CE:BA:FA:15:63:0B:20:A9
Certificate issuer:       /CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
Certificate serial:       010D0C9F4328584E66DA0CC12FB6472544D97A80
Authority key identifier: 1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/22b6363d-3f5d-3d91-9652-31215bc9d783.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     397270
IP address blocks:        2602:fea7:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:0c:c1:2f:b6:47:25:44:d9:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=a7b122b4-b3c7-418c-a854-5ef03b675188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c2:b5:bb:20:ac:00:26:5f:9b:76:ab:b4:0a:
                    fd:ad:c5:de:65:74:fa:64:55:70:e0:d8:17:51:2c:
                    2e:69:f2:8f:75:2f:b8:3d:f3:2a:e0:d3:43:cc:e1:
                    82:80:df:ae:51:e5:52:dd:b1:7a:d2:6b:d7:14:4c:
                    53:18:0b:90:86:a2:b7:b1:14:ae:7a:42:1d:58:2a:
                    c1:ab:be:90:39:e6:7e:82:e6:65:fb:f3:5e:ad:ee:
                    26:4d:32:f9:e2:81:69:05:d9:a9:20:97:0b:54:6b:
                    bf:92:b0:11:fa:e3:ad:15:b8:2d:21:5f:44:8e:77:
                    8b:94:c1:8b:27:35:be:61:e8:bd:07:52:35:92:80:
                    f2:9d:30:e8:74:bc:03:e1:34:d2:97:cb:de:42:78:
                    db:2c:01:8f:6f:fb:ff:5e:c1:3d:f6:3e:63:9d:72:
                    a2:61:03:18:32:35:5a:3d:60:d9:9d:72:da:49:66:
                    c8:a4:5a:cd:62:09:72:7b:8c:85:53:21:de:46:b2:
                    44:22:57:c6:92:8b:6a:e9:47:c6:e3:d3:a2:60:df:
                    2a:97:e3:e9:f4:a6:81:c4:00:2b:a9:57:e6:97:5e:
                    25:23:0f:a5:3b:0e:8c:46:c3:fe:b1:6b:47:ac:64:
                    44:e9:6f:b1:b5:43:0f:1d:f6:fe:fe:3d:ec:dd:32:
                    a0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EE:B0:4B:3A:6B:AC:59:C8:B7:B7:86:CE:BA:FA:15:63:0B:20:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/22b6363d-3f5d-3d91-9652-31215bc9d783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl

            X509v3 Authority Key Identifier:
                keyid:1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fea7:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:55:9c:b1:4d:0c:0f:e3:d6:d9:b5:7e:bc:26:41:c4:32:78:
         cf:df:14:84:40:eb:b2:4b:ab:50:d1:4c:28:4b:ce:75:f9:44:
         a1:88:4f:2b:e6:e9:10:6e:34:a3:19:d3:9b:a7:e8:7d:c6:09:
         bd:4b:d7:13:f5:c5:e7:b0:60:51:5d:fe:94:b6:3f:c3:99:25:
         4f:85:67:fc:cf:0a:49:50:55:70:15:df:2b:1d:c8:88:4a:d8:
         ae:f3:e8:fa:b6:df:b5:06:4f:30:cf:d7:ac:c5:7c:19:e5:66:
         20:b6:50:01:a2:62:6a:e6:35:bc:d3:e2:6b:fb:19:c5:0c:85:
         d7:ca:4a:b1:6b:ec:39:57:30:59:77:15:01:cd:da:34:4d:9a:
         9f:9e:59:80:cd:0d:54:36:d6:18:a4:70:0d:51:77:53:3f:55:
         8f:6f:2b:f2:f6:a8:37:39:c9:4c:c4:13:8e:f6:82:a3:6c:57:
         17:74:00:b5:52:39:23:c3:13:b9:5d:4f:3b:a8:4d:97:cf:f9:
         f5:38:25:77:6e:1b:75:d8:2c:4d:1c:f6:81:2c:53:40:f5:a6:
         e7:67:2d:2b:5a:be:11:41:32:57:83:96:54:ae:c4:a5:10:86:
         0a:ea:90:24:16:fa:96:f3:7e:cf:12:f2:0e:9b:82:e2:93:4b:
         e6:b0:57:ed
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5m2gzBL7ZHJUTZeoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5YWM5ZjctZWY0Zi00ZjU2LWJlYzItMjFjOWEyYjI1
YzExMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk
YTdiMTIyYjQtYjNjNy00MThjLWE4NTQtNWVmMDNiNjc1MTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsK1uyCsACZfm3artAr9rcXeZXT6ZFVw4NgX
USwuafKPdS+4PfMq4NNDzOGCgN+uUeVS3bF60mvXFExTGAuQhqK3sRSuekIdWCrB
q76QOeZ+guZl+/Nere4mTTL54oFpBdmpIJcLVGu/krAR+uOtFbgtIV9EjneLlMGL
JzW+Yei9B1I1koDynTDodLwD4TTSl8veQnjbLAGPb/v/XsE99j5jnXKiYQMYMjVa
PWDZnXLaSWbIpFrNYglye4yFUyHeRrJEIlfGkotq6UfG49OiYN8ql+Pp9KaBxAAr
qVfml14lIw+lOw6MRsP+sWtHrGRE6W+xtUMPHfb+/j3s3TKgKwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFK7usEs6a6xZyLe3hs66+hVjCyCpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDlh
YzlmNy1lZjRmLTRmNTYtYmVjMi0yMWM5YTJiMjVjMTEvMjJiNjM2M2QtM2Y1ZC0z
ZDkxLTk2NTItMzEyMTViYzlkNzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5YWM5ZjctZWY0Zi00ZjU2LWJl
YzItMjFjOWEyYjI1YzExLzZkOWFjOWY3LWVmNGYtNGY1Ni1iZWMyLTIxYzlhMmIy
NWMxMS5jcmwwHwYDVR0jBBgwFoAUHHn5hkuePscm3W7MmE2ro4PenJgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDlhYzlmNy1lZjRmLTRmNTYtYmVjMi0yMWM5
YTJiMjVjMTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL+pwEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASlWcsU0MD+PW2bV+vCZBxDJ4z98UhEDrskurUNFMKEvOdflEoYhP
K+bpEG40oxnTm6fofcYJvUvXE/XF57BgUV3+lLY/w5klT4Vn/M8KSVBVcBXfKx3I
iErYrvPo+rbftQZPMM/XrMV8GeVmILZQAaJiauY1vNPia/sZxQyF18pKsWvsOVcw
WXcVAc3aNE2an55ZgM0NVDbWGKRwDVF3Uz9Vj28r8vaoNznJTMQTjvaCo2xXF3QA
tVI5I8MTuV1PO6hNl8/59Tgld24bddgsTRz2gSxTQPWm52ctK1q+EUEyV4OWVK7E
pRCGCuqQJBb6lvN+zxLyDpuC4pNL5rBX7Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:35:53 2026 by rpki-client