Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/29eacb2e-b566-3e8a-a848-698c8483bf5a.roa
File:                     29eacb2e-b566-3e8a-a848-698c8483bf5a.roa (raw, json)
Hash identifier:          QL/f/IcIrsagaUR2cZyM9a7LfMEfYQyfjCHEXQodnOM=
Subject key identifier:   D4:63:96:6B:E5:F6:A0:EC:EB:CB:37:AC:00:59:EE:23:42:4C:34:9C
Certificate issuer:       /CN=c28b7c13-301c-47fc-b39b-2201e763c4dd
Certificate serial:       010D0C9F4328584E4AEF467B8ED054240A8CAA00
Authority key identifier: E4:00:44:49:6A:F4:E0:C2:47:22:B9:1B:EC:F8:50:C2:2B:7B:AC:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/29eacb2e-b566-3e8a-a848-698c8483bf5a.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     30256
IP address blocks:        2620:21:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:46:7b:8e:d0:54:24:0a:8c:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c28b7c13-301c-47fc-b39b-2201e763c4dd
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=003da1d8-a650-4a2e-8954-d42f8c4d9498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:12:25:8a:a6:ed:62:6b:4e:d4:f6:af:32:88:
                    e9:b6:ba:ab:cd:8c:01:a6:fe:02:a0:10:c9:3c:c5:
                    30:28:84:5c:ce:9e:65:c9:44:0a:fc:bb:81:fd:45:
                    73:0f:b2:fc:a4:84:13:11:af:fa:0a:4e:68:d0:09:
                    41:5e:53:11:f2:54:47:7f:b2:f7:01:b5:1a:8e:e7:
                    be:85:72:3f:36:65:f4:b3:50:9b:82:84:e1:95:e2:
                    ae:53:87:bf:9b:d5:84:ea:46:4d:76:1d:93:e4:29:
                    c4:62:a2:f6:29:39:8f:41:d5:d5:da:ce:4d:c7:8f:
                    81:63:0a:d7:d2:39:6f:8e:65:ee:c4:eb:93:f5:3f:
                    1f:e3:bb:7b:cb:75:8a:9e:22:5e:61:4d:da:72:1e:
                    36:88:71:7e:46:94:a8:b8:14:fc:eb:d0:4e:04:43:
                    93:43:e2:6f:4c:4d:28:91:28:e7:b0:d7:b8:62:de:
                    22:bd:c1:5c:1b:2e:49:ea:9b:ce:c2:dd:88:9a:b7:
                    da:98:f5:6f:92:b4:c0:e7:96:7e:3c:ad:27:d4:de:
                    29:e7:1c:4f:f9:ff:87:b9:a5:2c:d4:36:18:42:6c:
                    05:0f:a8:ea:7a:3d:65:ca:db:05:e2:f4:23:9e:c0:
                    f5:b4:34:4b:32:54:5a:4b:f1:69:c8:35:ed:07:ed:
                    a8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:63:96:6B:E5:F6:A0:EC:EB:CB:37:AC:00:59:EE:23:42:4C:34:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/29eacb2e-b566-3e8a-a848-698c8483bf5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.crl

            X509v3 Authority Key Identifier:
                keyid:E4:00:44:49:6A:F4:E0:C2:47:22:B9:1B:EC:F8:50:C2:2B:7B:AC:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:21:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ce:4b:c1:90:9b:f6:9f:f3:d0:87:bd:9f:ec:6a:d6:5e:7b:
         99:ea:d0:7d:38:84:d6:34:ae:65:db:24:98:1d:c6:df:ce:25:
         0a:a8:9e:06:c5:c0:51:b0:6f:10:2b:0d:57:6f:8c:10:c0:a0:
         25:2b:99:70:d9:86:6c:e6:ac:e9:eb:aa:31:aa:39:04:59:0a:
         f3:43:33:f1:d1:94:eb:38:c1:72:3c:a4:48:6a:fd:42:8e:e8:
         bc:1f:b3:da:96:85:e2:c2:66:4a:1c:3e:2b:d5:1e:4e:45:e7:
         0c:f5:44:d0:d8:7a:95:0d:08:0d:8b:60:e8:8b:c6:5c:10:14:
         da:8c:a4:da:fb:00:bc:2e:76:b0:d7:29:25:c7:8e:bb:bb:7d:
         17:ff:21:da:f1:8f:1c:12:83:e4:f6:51:3b:b1:0b:f8:6d:2b:
         a5:9e:05:44:a9:c1:f0:c7:87:d6:ae:59:43:b2:35:ca:d6:cc:
         2e:7f:ef:c3:63:3b:d1:ad:18:b6:31:f6:d1:1b:68:c9:9e:5d:
         24:ab:79:9b:ce:3b:49:e7:ce:41:9d:32:5a:b3:a3:d3:37:6b:
         31:5e:30:61:3d:78:db:07:bf:c6:30:5b:2e:a8:14:eb:3b:16:
         fc:2c:68:15:d6:88:ae:97:65:e5:1d:2b:27:f1:fd:ce:6e:67:
         8b:eb:c0:e1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5K70Z7jtBUJAqMqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzI4YjdjMTMtMzAxYy00N2ZjLWIzOWItMjIwMWU3NjNj
NGRkMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk
MDAzZGExZDgtYTY1MC00YTJlLTg5NTQtZDQyZjhjNGQ5NDk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihIliqbtYmtO1PavMojptrqrzYwBpv4CoBDJ
PMUwKIRczp5lyUQK/LuB/UVzD7L8pIQTEa/6Ck5o0AlBXlMR8lRHf7L3AbUajue+
hXI/NmX0s1CbgoThleKuU4e/m9WE6kZNdh2T5CnEYqL2KTmPQdXV2s5Nx4+BYwrX
0jlvjmXuxOuT9T8f47t7y3WKniJeYU3ach42iHF+RpSouBT869BOBEOTQ+JvTE0o
kSjnsNe4Yt4ivcFcGy5J6pvOwt2ImrfamPVvkrTA55Z+PK0n1N4p5xxP+f+HuaUs
1DYYQmwFD6jqej1lytsF4vQjnsD1tDRLMlRaS/FpyDXtB+2oYQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNRjlmvl9qDs68s3rABZ7iNCTDScMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMjhi
N2MxMy0zMDFjLTQ3ZmMtYjM5Yi0yMjAxZTc2M2M0ZGQvMjllYWNiMmUtYjU2Ni0z
ZThhLWE4NDgtNjk4Yzg0ODNiZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzI4YjdjMTMtMzAxYy00N2ZjLWIz
OWItMjIwMWU3NjNjNGRkL2MyOGI3YzEzLTMwMWMtNDdmYy1iMzliLTIyMDFlNzYz
YzRkZC5jcmwwHwYDVR0jBBgwFoAU5ABESWr04MJHIrkb7PhQwit7rIowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jMjhiN2MxMy0zMDFjLTQ3ZmMtYjM5Yi0yMjAx
ZTc2M2M0ZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAIcAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHXOS8GQm/af89CHvZ/satZee5nq0H04hNY0rmXbJJgdxt/OJQqo
ngbFwFGwbxArDVdvjBDAoCUrmXDZhmzmrOnrqjGqOQRZCvNDM/HRlOs4wXI8pEhq
/UKO6Lwfs9qWheLCZkocPivVHk5F5wz1RNDYepUNCA2LYOiLxlwQFNqMpNr7ALwu
drDXKSXHjru7fRf/IdrxjxwSg+T2UTuxC/htK6WeBUSpwfDHh9auWUOyNcrWzC5/
78NjO9GtGLYx9tEbaMmeXSSreZvOO0nnzkGdMlqzo9M3azFeMGE9eNsHv8YwWy6o
FOs7FvwsaBXWiK6XZeUdKyfx/c5uZ4vrwOE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:42:15 2026 by rpki-client