Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/d3a76661-1e45-3e55-9e95-a97eb46572ad.roa
File:                     d3a76661-1e45-3e55-9e95-a97eb46572ad.roa (raw, json)
Hash identifier:          wIhP79JT0eTld6KIqAgYzB+YVz7u3osdBg/AnPdScT8=
Subject key identifier:   3B:62:A8:8C:B6:DA:F3:D9:93:5D:2E:48:F7:47:FD:B9:8C:FC:29:BF
Certificate issuer:       /CN=a8825ed0-210f-48ae-8970-c92773afbb48
Certificate serial:       010D0C9F4328584E964FA0ECEBE21BE50E3A9D48
Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/d3a76661-1e45-3e55-9e95-a97eb46572ad.roa
Signing time:             Wed 22 Jul 2026 21:00:11 +0000
ROA not before:           Wed 22 Jul 2026 21:00:11 +0000
ROA not after:            Tue 20 Oct 2026 21:00:11 +0000
asID:                     14618
IP address blocks:        2604:e700::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:96:4f:a0:ec:eb:e2:1b:e5:0e:3a:9d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48
        Validity
            Not Before: Jul 22 21:00:11 2026 GMT
            Not After : Oct 20 21:00:11 2026 GMT
        Subject: CN=b7d3e002-3c8a-4f86-ac5d-89576915b45a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:70:ed:5b:ad:2b:c4:4d:ce:67:5a:8a:c7:54:
                    36:09:e2:ea:f4:25:ae:7d:cc:7c:14:53:74:ff:8a:
                    6d:16:62:4e:1a:4c:27:4c:bf:b0:f0:71:30:66:04:
                    7d:8b:3c:a1:b7:db:f5:b0:f3:99:98:67:b1:a9:33:
                    ec:09:1c:32:d0:a0:1b:bd:c4:97:44:4c:4b:54:da:
                    48:83:64:eb:f6:fb:78:25:da:03:1b:d1:56:2a:ca:
                    97:bf:51:15:65:c8:8f:6c:c6:d7:97:ac:93:ab:19:
                    1a:cf:15:c8:93:b2:57:d3:d0:86:55:9b:e1:f7:f2:
                    77:47:26:8c:61:46:1c:f2:5c:fe:5a:b1:60:e1:c7:
                    33:f3:a2:e5:fe:0e:ab:0f:84:81:67:7b:93:71:61:
                    2b:55:6d:00:2c:f1:3e:82:f8:5c:27:81:d1:e9:7e:
                    61:93:58:80:9e:1b:ba:90:e8:dd:16:a4:2a:d9:16:
                    cb:4a:56:cf:37:de:3b:47:ae:f8:10:fc:cd:2d:42:
                    7b:f7:98:cc:8f:50:78:5d:f3:e8:1a:e8:f7:3c:d0:
                    14:4f:3d:a8:d4:73:80:ae:8e:bc:05:75:2f:46:3a:
                    72:f6:18:48:52:de:90:23:d0:64:c6:28:b3:1c:c7:
                    fa:db:a2:74:25:78:c4:9d:a4:3e:cf:1e:68:5c:4d:
                    74:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:62:A8:8C:B6:DA:F3:D9:93:5D:2E:48:F7:47:FD:B9:8C:FC:29:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/d3a76661-1e45-3e55-9e95-a97eb46572ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl

            X509v3 Authority Key Identifier:
                keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e700::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:c2:16:4f:c9:d2:4a:ad:24:30:40:93:73:d4:17:18:95:a3:
         44:5d:e3:06:a6:60:a4:0a:11:47:81:88:87:a7:20:dc:53:6a:
         2a:e6:41:eb:5b:06:b7:c1:84:05:5d:af:20:a5:81:ed:f9:ab:
         a4:47:46:69:58:60:1d:98:30:b9:b3:b7:d6:1b:27:4f:00:9e:
         30:6d:fe:bf:1d:21:10:2a:bd:23:97:13:3b:89:2d:31:2d:77:
         a5:e3:3b:22:6e:f9:a6:43:8f:a5:de:c0:05:e6:7a:d1:00:16:
         03:ee:6b:42:11:f5:da:b2:d6:17:62:00:fb:d1:db:ad:6e:6f:
         fd:61:87:cc:40:05:40:bb:9f:c5:05:6a:32:fc:4a:9f:75:31:
         02:dd:87:ad:46:f5:4f:05:50:e4:cd:c8:aa:e6:a3:83:e3:6b:
         60:b2:89:6d:ac:a6:f9:5c:2c:18:77:5b:8d:61:c9:d6:25:48:
         3b:12:9b:ff:94:71:70:8b:35:87:25:18:25:fc:24:bf:39:f3:
         9f:01:c8:d8:13:f0:75:1a:80:18:9e:fe:3f:51:fb:89:dc:da:
         b1:9e:f4:37:2d:1e:3c:8a:69:d0:c1:db:df:ad:8c:17:57:3e:
         da:4b:80:2b:fb:73:ae:99:e2:7c:33:c7:ff:d0:4f:9f:fe:de:
         61:db:98:86
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6WT6Ds6+Ib5Q46nUgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTg4MjVlZDAtMjEwZi00OGFlLTg5NzAtYzkyNzczYWZi
YjQ4MB4XDTI2MDcyMjIxMDAxMVoXDTI2MTAyMDIxMDAxMVowLzEtMCsGA1UEAxMk
YjdkM2UwMDItM2M4YS00Zjg2LWFjNWQtODk1NzY5MTViNDVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3DtW60rxE3OZ1qKx1Q2CeLq9CWufcx8FFN0
/4ptFmJOGkwnTL+w8HEwZgR9izyht9v1sPOZmGexqTPsCRwy0KAbvcSXRExLVNpI
g2Tr9vt4JdoDG9FWKsqXv1EVZciPbMbXl6yTqxkazxXIk7JX09CGVZvh9/J3RyaM
YUYc8lz+WrFg4ccz86Ll/g6rD4SBZ3uTcWErVW0ALPE+gvhcJ4HR6X5hk1iAnhu6
kOjdFqQq2RbLSlbPN947R674EPzNLUJ795jMj1B4XfPoGuj3PNAUTz2o1HOAro68
BXUvRjpy9hhIUt6QI9BkxiizHMf626J0JXjEnaQ+zx5oXE10pQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDtiqIy22vPZk10uSPdH/bmM/Cm/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODgy
NWVkMC0yMTBmLTQ4YWUtODk3MC1jOTI3NzNhZmJiNDgvZDNhNzY2NjEtMWU0NS0z
ZTU1LTllOTUtYTk3ZWI0NjU3MmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTg4MjVlZDAtMjEwZi00OGFlLTg5
NzAtYzkyNzczYWZiYjQ4L2E4ODI1ZWQwLTIxMGYtNDhhZS04OTcwLWM5Mjc3M2Fm
YmI0OC5jcmwwHwYDVR0jBBgwFoAUuwWm2x54AOi+CyBW1ajduRjiP2UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODgyNWVkMC0yMTBmLTQ4YWUtODk3MC1jOTI3
NzNhZmJiNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgTnAAAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEHCFk/J0kqtJDBAk3PUFxiVo0Rd4wamYKQKEUeBiIenINxTairm
QetbBrfBhAVdryClge35q6RHRmlYYB2YMLmzt9YbJ08AnjBt/r8dIRAqvSOXEzuJ
LTEtd6XjOyJu+aZDj6XewAXmetEAFgPua0IR9dqy1hdiAPvR261ub/1hh8xABUC7
n8UFajL8Sp91MQLdh61G9U8FUOTNyKrmo4Pja2CyiW2spvlcLBh3W41hydYlSDsS
m/+UcXCLNYclGCX8JL85858ByNgT8HUagBie/j9R+4nc2rGe9DctHjyKadDB29+t
jBdXPtpLgCv7c66Z4nwzx//QT5/+3mHbmIY=
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:57 2026 by rpki-client