Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/d4768484-b745-3f39-a4e8-08939a0ff42d.roa
File:                     d4768484-b745-3f39-a4e8-08939a0ff42d.roa (raw, json)
Hash identifier:          Wo/xXm4wwmhNBVXh2BIGEzTDsPGLzQ9U71bJWTkLZAY=
Subject key identifier:   9D:1E:73:FA:A7:97:B9:52:5E:B0:D0:44:A1:0D:3F:1D:ED:2B:69:1E
Certificate issuer:       /CN=036b2dbb-e7db-4b60-b1d9-949d2edba6fe
Certificate serial:       010D0C9F4328584E296F18B45D14A6A1636E1880
Authority key identifier: 4F:10:4C:3F:94:5F:DB:EB:A3:61:DB:19:DB:7E:DA:ED:96:69:91:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/d4768484-b745-3f39-a4e8-08939a0ff42d.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     400387
IP address blocks:        2607:6340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:18:b4:5d:14:a6:a1:63:6e:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=036b2dbb-e7db-4b60-b1d9-949d2edba6fe
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=fc59b15f-e2a8-496e-af93-856bb2cab76f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f7:85:f5:04:c9:28:86:65:e8:65:db:c3:6a:
                    84:0d:44:a8:65:ca:0c:91:23:e8:f4:d8:ea:cb:40:
                    28:da:b0:2a:59:c3:1d:b6:79:7f:d0:ff:cc:65:7f:
                    38:fb:66:bf:78:7a:63:7e:b3:18:98:47:75:60:e1:
                    31:06:c3:f9:ae:a0:cd:c9:78:21:99:d7:e0:9a:db:
                    ed:ca:e2:65:d5:1d:f5:7b:1e:80:c6:05:77:45:1a:
                    2d:d7:0f:c6:f9:2d:c4:ab:08:4f:c0:4c:17:b5:22:
                    a3:b2:6c:31:3f:de:42:ad:26:24:18:57:16:e1:3d:
                    b8:79:fe:29:fa:69:db:bf:64:56:92:9a:01:54:51:
                    94:0e:7f:60:33:5a:4f:f6:5b:7a:90:de:97:20:96:
                    6c:77:52:8f:39:be:bb:22:f2:84:7b:a1:03:32:f2:
                    b2:41:13:33:4b:bf:51:55:85:c9:2e:07:7a:23:fa:
                    e6:28:7d:47:9d:9b:cd:9e:9a:bc:84:67:0f:1d:cf:
                    ba:a8:29:47:70:33:ee:10:6d:0b:ff:d3:50:63:35:
                    a9:48:ce:df:27:61:b4:9a:00:a8:b9:4c:a1:04:93:
                    c1:1e:11:b9:41:89:a0:4b:f6:4c:17:cf:10:5a:60:
                    aa:a8:a9:5b:4d:a4:91:79:ba:5d:8b:24:84:1a:e3:
                    12:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1E:73:FA:A7:97:B9:52:5E:B0:D0:44:A1:0D:3F:1D:ED:2B:69:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/d4768484-b745-3f39-a4e8-08939a0ff42d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.crl

            X509v3 Authority Key Identifier:
                keyid:4F:10:4C:3F:94:5F:DB:EB:A3:61:DB:19:DB:7E:DA:ED:96:69:91:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:3e:3b:72:ba:aa:04:58:25:be:bf:b2:a7:ac:39:14:9b:b8:
         a8:c2:49:b1:e7:3a:50:f6:e1:3c:11:74:34:a1:81:14:64:df:
         41:cc:d4:d2:0b:6d:e7:b2:8a:83:16:57:ed:03:e0:1c:a0:f6:
         af:a7:ec:de:38:93:a4:14:88:8b:12:61:26:19:c5:39:dd:ce:
         fc:4b:3c:23:92:e0:05:47:20:f7:d2:ee:12:f7:b1:f0:c5:50:
         30:6b:d5:d4:de:1d:b8:06:52:c6:e8:86:a6:48:ff:b6:20:ea:
         0b:61:26:3f:e2:15:b1:4d:de:1f:4c:90:6b:39:99:ab:7f:71:
         01:5e:47:e1:27:28:b7:9e:00:5c:7d:fe:13:eb:34:73:f0:06:
         6c:8d:de:ff:34:b7:61:eb:9a:6d:07:cb:b1:47:42:79:2c:a3:
         f5:87:54:cd:59:a4:a5:1d:67:8d:a2:94:ea:75:4c:22:e2:49:
         5e:3a:e4:17:e6:d9:cc:62:26:65:b8:b3:0c:f9:be:aa:83:d1:
         62:d9:45:5a:34:a0:2b:aa:58:fb:93:4b:65:fc:ab:d2:b3:d7:
         85:25:68:80:6f:ea:04:18:32:91:c5:5a:f4:fb:7c:9a:f9:d0:
         b8:7e:9b:7c:c1:49:51:3b:49:10:45:5d:4a:8c:65:00:f4:7f:
         08:ca:d7:1b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4pbxi0XRSmoWNuGIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM2YjJkYmItZTdkYi00YjYwLWIxZDktOTQ5ZDJlZGJh
NmZlMB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk
ZmM1OWIxNWYtZTJhOC00OTZlLWFmOTMtODU2YmIyY2FiNzZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PeF9QTJKIZl6GXbw2qEDUSoZcoMkSPo9Njq
y0Ao2rAqWcMdtnl/0P/MZX84+2a/eHpjfrMYmEd1YOExBsP5rqDNyXghmdfgmtvt
yuJl1R31ex6AxgV3RRot1w/G+S3EqwhPwEwXtSKjsmwxP95CrSYkGFcW4T24ef4p
+mnbv2RWkpoBVFGUDn9gM1pP9lt6kN6XIJZsd1KPOb67IvKEe6EDMvKyQRMzS79R
VYXJLgd6I/rmKH1HnZvNnpq8hGcPHc+6qClHcDPuEG0L/9NQYzWpSM7fJ2G0mgCo
uUyhBJPBHhG5QYmgS/ZMF88QWmCqqKlbTaSRebpdiySEGuMS/wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJ0ec/qnl7lSXrDQRKENPx3tK2keMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wMzZi
MmRiYi1lN2RiLTRiNjAtYjFkOS05NDlkMmVkYmE2ZmUvZDQ3Njg0ODQtYjc0NS0z
ZjM5LWE0ZTgtMDg5MzlhMGZmNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDM2YjJkYmItZTdkYi00YjYwLWIx
ZDktOTQ5ZDJlZGJhNmZlLzAzNmIyZGJiLWU3ZGItNGI2MC1iMWQ5LTk0OWQyZWRi
YTZmZS5jcmwwHwYDVR0jBBgwFoAUTxBMP5Rf2+ujYdsZ237a7ZZpkekwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wMzZiMmRiYi1lN2RiLTRiNjAtYjFkOS05NDlk
MmVkYmE2ZmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdjQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAZPjtyuqoEWCW+v7KnrDkUm7iowkmx5zpQ9uE8EXQ0oYEUZN9BzNTS
C23nsoqDFlftA+AcoPavp+zeOJOkFIiLEmEmGcU53c78SzwjkuAFRyD30u4S97Hw
xVAwa9XU3h24BlLG6IamSP+2IOoLYSY/4hWxTd4fTJBrOZmrf3EBXkfhJyi3ngBc
ff4T6zRz8AZsjd7/NLdh65ptB8uxR0J5LKP1h1TNWaSlHWeNopTqdUwi4kleOuQX
5tnMYiZluLMM+b6qg9Fi2UVaNKArqlj7k0tl/KvSs9eFJWiAb+oEGDKRxVr0+3ya
+dC4fpt8wUlRO0kQRV1KjGUA9H8Iytcb
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:20:22 2026 by rpki-client