Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/9e2cd53b-b97c-377a-b414-b8b607fc4fad.roa
File:                     9e2cd53b-b97c-377a-b414-b8b607fc4fad.roa (raw, json)
Hash identifier:          382HQob2OQ5XUnKTa9znAzIT+9CWiyjCEl499WfyyVo=
Subject key identifier:   70:D1:E6:FD:89:F5:E8:23:E0:D7:CB:6C:46:09:19:2D:FC:DC:55:7B
Certificate issuer:       /CN=0cf53e58-6557-450f-832c-9baa5c99cca4
Certificate serial:       010D0C9F4328584E54B49F5E01D5C15FA5F0BA80
Authority key identifier: 9D:12:7B:B3:E3:C3:F4:64:BC:E1:32:60:ED:35:87:5D:E7:FA:47:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/9e2cd53b-b97c-377a-b414-b8b607fc4fad.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        2607:f250:e000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/0cf53e58-6557-450f-832c-9baa5c99cca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/0cf53e58-6557-450f-832c-9baa5c99cca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:9f:5e:01:d5:c1:5f:a5:f0:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cf53e58-6557-450f-832c-9baa5c99cca4
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=592b9b6c-c1b0-495c-adff-730ea348031f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a9:37:44:43:e8:fe:d9:10:53:cd:7b:80:5f:
                    ea:18:e6:2f:92:d2:42:5d:83:05:34:ce:70:c7:25:
                    23:08:77:06:28:d7:87:4c:e0:e6:38:1f:6b:95:e0:
                    50:a5:e5:f3:29:76:46:fb:ce:cf:44:2f:5e:e0:7b:
                    fa:7b:e2:97:50:dd:12:73:27:5a:e2:a7:6a:b1:4e:
                    78:a5:e0:15:0e:08:5f:86:f4:ea:12:36:bc:62:6f:
                    c7:63:a9:fb:11:03:d6:10:df:7a:55:dc:b3:dd:82:
                    57:cf:be:2f:63:69:6c:bc:a1:9d:58:26:08:ba:08:
                    f3:fc:d1:1f:f7:30:36:c5:df:6e:8a:24:2a:ec:c3:
                    8d:96:9b:e4:2d:e8:be:f3:3b:b5:ff:51:65:7c:1b:
                    12:6b:f1:0b:99:9f:3f:13:cf:bd:57:a6:0f:31:8b:
                    42:c5:d2:f4:7d:1f:78:4a:d9:f7:fa:17:31:fd:d3:
                    9f:82:30:d1:6c:c5:de:d0:28:9b:04:25:bb:bf:a2:
                    3f:2e:b7:40:e7:ee:b9:79:3f:20:3b:d5:4e:05:f3:
                    a9:e9:82:bc:d3:07:10:d2:c3:41:e3:0d:bc:73:4f:
                    74:61:e2:d3:a6:32:2b:b8:9b:93:65:62:81:28:73:
                    2c:b0:4b:61:58:c5:72:1d:dc:a9:e7:bb:88:a7:16:
                    d5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D1:E6:FD:89:F5:E8:23:E0:D7:CB:6C:46:09:19:2D:FC:DC:55:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/9e2cd53b-b97c-377a-b414-b8b607fc4fad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4/0cf53e58-6557-450f-832c-9baa5c99cca4.crl

            X509v3 Authority Key Identifier:
                keyid:9D:12:7B:B3:E3:C3:F4:64:BC:E1:32:60:ED:35:87:5D:E7:FA:47:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0cf53e58-6557-450f-832c-9baa5c99cca4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f250:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:5e:20:f6:d9:ee:f6:6e:36:20:10:f0:8b:2b:32:d4:8e:5e:
         41:c9:0e:bf:16:aa:4c:ec:28:14:f8:6c:dd:93:c6:79:10:98:
         59:cf:c1:62:5a:1b:82:a5:3f:e8:0a:ba:2f:85:3c:63:28:c6:
         4c:cd:d4:0e:9e:82:4b:98:1b:8f:7f:72:f4:f1:d7:12:47:46:
         d1:68:65:e6:39:9f:5e:5c:cd:64:d6:2a:bb:01:2c:ae:29:c1:
         0b:48:c9:1e:3f:d5:ca:eb:b9:a5:26:b4:fe:42:a1:cb:36:f8:
         af:64:3a:0e:16:35:db:d4:92:15:b4:2c:65:cc:f2:69:3a:95:
         e7:39:16:d4:d7:c6:9b:07:f0:93:ca:8b:aa:53:c5:f9:ed:b7:
         6d:9e:b6:b8:b9:b7:84:fa:07:3c:d5:0c:a8:23:a2:03:85:27:
         ae:34:8e:ab:b2:f8:3a:7d:8e:e6:be:11:1b:20:02:9c:3c:09:
         83:fc:3f:93:db:6b:1e:f7:17:03:a5:49:10:8e:cc:7c:2d:ff:
         c9:5b:74:62:62:8d:16:43:be:0c:0b:26:c6:4e:3d:08:29:c3:
         de:70:26:50:14:49:24:21:c4:86:07:ae:3f:19:68:b3:9f:20:
         1c:7f:ae:15:97:9e:fa:f9:43:16:69:9f:51:10:0d:36:5b:65:
         f8:e1:48:80
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5UtJ9eAdXBX6XwuoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGNmNTNlNTgtNjU1Ny00NTBmLTgzMmMtOWJhYTVjOTlj
Y2E0MB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk
NTkyYjliNmMtYzFiMC00OTVjLWFkZmYtNzMwZWEzNDgwMzFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKk3REPo/tkQU817gF/qGOYvktJCXYMFNM5w
xyUjCHcGKNeHTODmOB9rleBQpeXzKXZG+87PRC9e4Hv6e+KXUN0Scyda4qdqsU54
peAVDghfhvTqEja8Ym/HY6n7EQPWEN96Vdyz3YJXz74vY2lsvKGdWCYIugjz/NEf
9zA2xd9uiiQq7MONlpvkLei+8zu1/1FlfBsSa/ELmZ8/E8+9V6YPMYtCxdL0fR94
Stn3+hcx/dOfgjDRbMXe0CibBCW7v6I/LrdA5+65eT8gO9VOBfOp6YK80wcQ0sNB
4w28c090YeLTpjIruJuTZWKBKHMssEthWMVyHdyp57uIpxbVAQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHDR5v2J9egj4NfLbEYJGS383FV7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wY2Y1
M2U1OC02NTU3LTQ1MGYtODMyYy05YmFhNWM5OWNjYTQvOWUyY2Q1M2ItYjk3Yy0z
NzdhLWI0MTQtYjhiNjA3ZmM0ZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGNmNTNlNTgtNjU1Ny00NTBmLTgz
MmMtOWJhYTVjOTljY2E0LzBjZjUzZTU4LTY1NTctNDUwZi04MzJjLTliYWE1Yzk5
Y2NhNC5jcmwwHwYDVR0jBBgwFoAUnRJ7s+PD9GS84TJg7TWHXef6R1kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wY2Y1M2U1OC02NTU3LTQ1MGYtODMyYy05YmFh
NWM5OWNjYTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgfyUOAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACBeIPbZ7vZuNiAQ8IsrMtSOXkHJDr8WqkzsKBT4bN2TxnkQmFnP
wWJaG4KlP+gKui+FPGMoxkzN1A6egkuYG49/cvTx1xJHRtFoZeY5n15czWTWKrsB
LK4pwQtIyR4/1crruaUmtP5Cocs2+K9kOg4WNdvUkhW0LGXM8mk6lec5FtTXxpsH
8JPKi6pTxfntt22etri5t4T6BzzVDKgjogOFJ640jquy+Dp9jua+ERsgApw8CYP8
P5Pbax73FwOlSRCOzHwt/8lbdGJijRZDvgwLJsZOPQgpw95wJlAUSSQhxIYHrj8Z
aLOfIBx/rhWXnvr5QxZpn1EQDTZbZfjhSIA=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:36:35 2026 by rpki-client