Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/706a9542-5b90-3186-b2aa-86e2e6a16930.roa
File:                     706a9542-5b90-3186-b2aa-86e2e6a16930.roa (raw, json)
Hash identifier:          PghDRxz544uig4KlX9F3USeeRW1xi/NQOJR4Zge2oUQ=
Subject key identifier:   32:91:09:77:49:D9:3C:B1:99:FF:0D:04:37:13:DD:C2:FA:DE:B7:43
Certificate issuer:       /CN=c1428d99-ad23-4d58-b5f4-17da4a50d59a
Certificate serial:       010D0C9F4328584E7E94E5390A1A0230E80D9780
Authority key identifier: 3D:27:AE:90:5A:81:00:51:55:1E:44:B7:E5:3D:AD:8B:B5:6D:7E:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/706a9542-5b90-3186-b2aa-86e2e6a16930.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     198949
IP address blocks:        2606:2b00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:e5:39:0a:1a:02:30:e8:0d:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1428d99-ad23-4d58-b5f4-17da4a50d59a
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=f4bfdaf8-8a24-4b2b-9df1-6149ccc099dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:67:81:f6:73:5e:f5:6c:9d:27:04:f8:0e:9b:
                    c6:b9:b1:90:25:ae:81:9a:43:ea:b5:f9:f4:c5:96:
                    68:ae:59:f9:69:ca:78:26:55:91:db:00:65:1a:e9:
                    80:76:3e:e2:5a:c1:ff:38:70:a9:0f:a6:54:c7:68:
                    ec:50:a9:2f:fa:2f:9a:5b:ab:2a:aa:91:59:c7:cf:
                    5d:2b:dc:96:63:0f:96:63:37:61:54:aa:fb:0f:a7:
                    50:fe:35:26:63:18:0c:2b:99:9a:ab:ae:dc:92:dc:
                    81:6d:35:1c:5d:58:1a:9f:b4:d2:34:e4:25:45:fe:
                    41:4d:8a:11:85:6f:41:f0:17:4a:b0:07:da:88:3e:
                    5e:3e:12:f1:ad:f6:69:c7:dc:36:37:93:bf:27:e8:
                    11:51:c0:e2:53:bc:2f:70:77:e3:3f:cc:08:0b:d5:
                    da:cd:f5:b1:61:f0:a6:2d:02:64:11:f7:a0:e9:84:
                    ac:82:d1:41:6d:84:f5:68:e0:f2:d8:c6:04:8b:4a:
                    bb:6a:69:98:08:4d:72:d2:5a:bc:a2:07:48:ff:c9:
                    0f:94:d9:ac:d0:4a:39:d1:56:9e:cc:67:cc:7a:0e:
                    ce:31:f7:8f:5a:41:ac:f4:0a:88:ae:ac:14:09:a4:
                    68:93:49:78:d5:1f:71:77:f2:0d:7e:d4:fa:6e:bd:
                    47:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:91:09:77:49:D9:3C:B1:99:FF:0D:04:37:13:DD:C2:FA:DE:B7:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/706a9542-5b90-3186-b2aa-86e2e6a16930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.crl

            X509v3 Authority Key Identifier:
                keyid:3D:27:AE:90:5A:81:00:51:55:1E:44:B7:E5:3D:AD:8B:B5:6D:7E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2b00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:20:e4:9a:d6:26:d9:67:ea:75:70:94:d5:33:35:2d:55:b0:
         01:da:1a:37:1d:e4:f0:b5:b3:c0:41:b1:37:b5:25:c7:65:a5:
         d3:95:db:25:e0:81:70:5f:03:0f:f6:37:b1:3e:a9:2e:d3:c9:
         6d:3e:bd:5d:6f:6d:e6:3f:a4:d9:a8:e4:eb:34:f1:e0:59:df:
         2c:90:18:21:6e:ae:b6:70:54:d3:dd:88:b8:fd:4f:bd:53:5e:
         a5:8f:4b:90:a6:06:99:42:3a:d9:96:c7:ec:56:68:36:a3:66:
         79:29:5e:47:13:2b:f2:c3:20:4b:d6:c0:3c:e2:01:2f:b4:91:
         2b:a7:71:ee:35:94:fb:1f:4c:57:28:38:65:64:e1:ac:25:f6:
         09:f9:98:8d:79:6f:66:c2:3d:86:9e:e5:57:99:3f:23:05:2c:
         ae:d2:5a:a7:dc:d7:8b:86:a0:7c:fa:f2:e5:3a:20:db:f3:49:
         22:6c:47:4e:07:75:03:cd:fe:f0:ae:66:fa:61:b2:0a:1d:04:
         69:bd:9e:d0:df:6b:99:f3:c4:41:40:67:e0:d4:19:9f:3b:fe:
         c9:c7:1f:df:fe:1d:5e:bc:45:9c:3d:67:e2:47:d8:b6:fc:02:
         2f:65:82:e5:9f:53:3b:7a:46:2f:55:9f:b5:48:b9:d1:1f:88:
         a7:a9:59:3c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5+lOU5ChoCMOgNl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzE0MjhkOTktYWQyMy00ZDU4LWI1ZjQtMTdkYTRhNTBk
NTlhMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk
ZjRiZmRhZjgtOGEyNC00YjJiLTlkZjEtNjE0OWNjYzA5OWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2eB9nNe9WydJwT4DpvGubGQJa6BmkPqtfn0
xZZorln5acp4JlWR2wBlGumAdj7iWsH/OHCpD6ZUx2jsUKkv+i+aW6sqqpFZx89d
K9yWYw+WYzdhVKr7D6dQ/jUmYxgMK5maq67cktyBbTUcXVgan7TSNOQlRf5BTYoR
hW9B8BdKsAfaiD5ePhLxrfZpx9w2N5O/J+gRUcDiU7wvcHfjP8wIC9XazfWxYfCm
LQJkEfeg6YSsgtFBbYT1aODy2MYEi0q7ammYCE1y0lq8ogdI/8kPlNms0Eo50Vae
zGfMeg7OMfePWkGs9AqIrqwUCaRok0l41R9xd/INftT6br1HHQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDKRCXdJ2Tyxmf8NBDcT3cL63rdDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMTQy
OGQ5OS1hZDIzLTRkNTgtYjVmNC0xN2RhNGE1MGQ1OWEvNzA2YTk1NDItNWI5MC0z
MTg2LWIyYWEtODZlMmU2YTE2OTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzE0MjhkOTktYWQyMy00ZDU4LWI1
ZjQtMTdkYTRhNTBkNTlhL2MxNDI4ZDk5LWFkMjMtNGQ1OC1iNWY0LTE3ZGE0YTUw
ZDU5YS5jcmwwHwYDVR0jBBgwFoAUPSeukFqBAFFVHkS35T2ti7Vtfo4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jMTQyOGQ5OS1hZDIzLTRkNTgtYjVmNC0xN2Rh
NGE1MGQ1OWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYrADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC6IOSa1ibZZ+p1cJTVMzUtVbAB2ho3HeTwtbPAQbE3tSXHZaXTldsl
4IFwXwMP9jexPqku08ltPr1db23mP6TZqOTrNPHgWd8skBghbq62cFTT3Yi4/U+9
U16lj0uQpgaZQjrZlsfsVmg2o2Z5KV5HEyvywyBL1sA84gEvtJErp3HuNZT7H0xX
KDhlZOGsJfYJ+ZiNeW9mwj2GnuVXmT8jBSyu0lqn3NeLhqB8+vLlOiDb80kibEdO
B3UDzf7wrmb6YbIKHQRpvZ7Q32uZ88RBQGfg1BmfO/7Jxx/f/h1evEWcPWfiR9i2
/AIvZYLln1M7ekYvVZ+1SLnRH4inqVk8
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:59:50 2026 by rpki-client