Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/bda09709-cca1-3c5a-acd1-e46d5667e970.roa
File:                     bda09709-cca1-3c5a-acd1-e46d5667e970.roa (raw, json)
Hash identifier:          +04FeAv/psdEi72gbNvYbjiltITkd0QD5BRtq3bx2V0=
Subject key identifier:   3F:8F:46:C3:5E:AD:1E:EF:36:8A:2D:66:23:00:8D:A7:12:6A:AD:59
Certificate issuer:       /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial:       010D0C9F4328584E54B4EB07CB8273B05E0180C0
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/bda09709-cca1-3c5a-acd1-e46d5667e970.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     401921
IP address blocks:        2602:fbd0:c0::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:eb:07:cb:82:73:b0:5e:01:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=e4a9b790-0ae7-4131-bc0b-d59acbc70f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:38:d8:c4:79:38:95:f8:de:84:5e:2d:01:67:
                    d1:86:aa:0b:59:76:92:89:0e:96:36:52:2e:36:ca:
                    a5:56:3c:de:2f:f5:71:6e:75:4e:28:ca:2a:63:30:
                    f2:4e:e9:6d:0f:03:15:11:57:19:ef:f3:9e:65:36:
                    95:cd:5b:0f:e5:85:fc:d8:70:3f:f6:06:b8:6a:d7:
                    5c:74:36:ff:86:37:55:96:5b:b4:42:ff:ac:7a:85:
                    cf:58:ea:d3:90:d3:1c:ec:14:7d:3a:23:2b:ef:12:
                    18:5d:97:b1:9c:65:7c:32:6f:5c:77:ff:4f:51:27:
                    92:da:a2:99:57:c7:35:e6:92:a6:b4:b1:1d:aa:7c:
                    a3:f4:0f:08:1f:03:8c:d0:5c:a9:3c:54:9f:99:82:
                    65:b1:b8:78:f6:58:e9:8e:d9:14:60:82:18:cc:b6:
                    f1:d7:52:eb:f5:98:5a:10:80:02:1a:9b:12:33:f3:
                    97:1d:a0:7c:8c:b5:23:24:be:7c:b9:14:d7:a0:fa:
                    04:6f:4a:a2:55:9c:3b:5d:fc:a7:de:74:64:20:62:
                    cf:80:a8:48:f4:e3:12:fe:33:c8:cf:e8:8b:32:3a:
                    cc:14:90:f3:ad:20:e8:a0:b5:57:aa:30:73:90:92:
                    fb:e6:29:1f:28:bf:6f:6c:8b:79:a5:8d:58:76:2e:
                    dc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:8F:46:C3:5E:AD:1E:EF:36:8A:2D:66:23:00:8D:A7:12:6A:AD:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/bda09709-cca1-3c5a-acd1-e46d5667e970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl

            X509v3 Authority Key Identifier:
                keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbd0:c0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:a6:2e:e3:d9:1c:04:5c:2c:2a:6f:4b:c1:28:ab:35:d5:6d:
         c3:8f:d5:89:68:ed:bf:03:cf:49:6e:55:20:1c:06:c4:65:68:
         bc:6e:dd:a8:2c:74:38:c0:17:e1:22:ae:99:9d:38:49:13:36:
         ee:11:d3:30:94:80:03:44:b1:36:a8:18:84:72:15:fd:01:b7:
         f7:c3:36:83:10:5e:d5:7e:d4:1f:0b:19:6d:29:4d:ab:61:28:
         b5:f7:78:a6:69:36:ff:78:ed:3d:88:50:da:52:fe:db:4c:1d:
         f1:da:1f:1f:94:82:79:d1:fa:fb:bb:d8:81:7d:08:02:ae:9d:
         d5:0f:c6:91:81:61:ec:9e:b2:fe:09:b9:c4:7a:c2:1f:61:17:
         3e:d3:ed:34:8f:12:fa:2f:0b:25:10:81:4b:11:60:c6:45:33:
         d1:8b:bc:8a:98:1e:ec:32:90:7b:cd:c6:8a:65:03:bf:fa:59:
         d4:c2:a2:e4:85:b6:b1:e2:9c:47:be:54:48:ff:10:ba:07:36:
         4d:ea:36:67:f0:d1:87:ba:a6:25:1a:10:3b:88:51:dd:59:8c:
         60:16:53:4f:8b:37:e6:c0:e0:f4:cf:42:b1:79:ca:bd:1c:91:
         a4:83:3d:fc:b8:57:2a:16:e3:46:cf:b5:25:b7:4a:65:4a:f8:
         1f:ee:22:4d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5UtOsHy4JzsF4BgMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz
Y2ZlMB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk
ZTRhOWI3OTAtMGFlNy00MTMxLWJjMGItZDU5YWNiYzcwZjhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzjYxHk4lfjehF4tAWfRhqoLWXaSiQ6WNlIu
NsqlVjzeL/VxbnVOKMoqYzDyTultDwMVEVcZ7/OeZTaVzVsP5YX82HA/9ga4atdc
dDb/hjdVllu0Qv+seoXPWOrTkNMc7BR9OiMr7xIYXZexnGV8Mm9cd/9PUSeS2qKZ
V8c15pKmtLEdqnyj9A8IHwOM0FypPFSfmYJlsbh49ljpjtkUYIIYzLbx11Lr9Zha
EIACGpsSM/OXHaB8jLUjJL58uRTXoPoEb0qiVZw7Xfyn3nRkIGLPgKhI9OMS/jPI
z+iLMjrMFJDzrSDooLVXqjBzkJL75ikfKL9vbIt5pY1Ydi7cgQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD+PRsNerR7vNootZiMAjacSaq1ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4
ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvYmRhMDk3MDktY2NhMS0z
YzVhLWFjZDEtZTQ2ZDU2NjdlOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj
M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5
M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4
MDlmOTNjZmUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL70ADA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJymLuPZHARcLCpvS8EoqzXVbcOP1Ylo7b8Dz0luVSAcBsRlaLxu
3agsdDjAF+EirpmdOEkTNu4R0zCUgANEsTaoGIRyFf0Bt/fDNoMQXtV+1B8LGW0p
TathKLX3eKZpNv947T2IUNpS/ttMHfHaHx+UgnnR+vu72IF9CAKundUPxpGBYeye
sv4JucR6wh9hFz7T7TSPEvovCyUQgUsRYMZFM9GLvIqYHuwykHvNxoplA7/6WdTC
ouSFtrHinEe+VEj/ELoHNk3qNmfw0Ye6piUaEDuIUd1ZjGAWU0+LN+bA4PTPQrF5
yr0ckaSDPfy4VyoW40bPtSW3SmVK+B/uIk0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:47:25 2026 by rpki-client