Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/a6b09397-d770-3282-8e4f-62270dbc7da9.roa
File:                     a6b09397-d770-3282-8e4f-62270dbc7da9.roa (raw, json)
Hash identifier:          eyulHKvp9i7jC3ewaYDVi0jPBRkfVpd+o51DFYVdbK4=
Subject key identifier:   0B:B9:61:E6:84:79:82:6D:CB:E5:FB:C8:D8:6C:1D:6F:50:AF:D4:31
Certificate issuer:       /CN=97e93673-5d19-4ff2-8250-f1094f4e12c9
Certificate serial:       010D0C9F4328584E7E94E18FB4B3DA366D053460
Authority key identifier: 59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/a6b09397-d770-3282-8e4f-62270dbc7da9.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        2602:f74b:10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:e1:8f:b4:b3:da:36:6d:05:34:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97e93673-5d19-4ff2-8250-f1094f4e12c9
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=fcd1cc87-dd7f-455c-896b-66bf25cc8fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:44:e1:d0:e2:41:ed:12:8e:88:8a:d8:6b:
                    79:75:90:63:f6:29:fb:63:d8:0a:64:d4:ff:f9:a1:
                    46:13:cb:6e:5e:a7:dd:83:df:d5:a0:f5:07:1b:cb:
                    6e:09:dc:2e:8f:85:14:a5:f7:cb:dc:99:38:b9:f9:
                    d2:fd:0b:af:c7:39:49:06:31:fb:61:72:d8:e9:4e:
                    4b:82:95:4d:ea:fc:51:b2:32:b1:4c:2c:a9:b5:32:
                    30:cc:bc:fb:45:34:ab:61:40:dc:35:84:82:ef:0b:
                    28:36:fc:b1:4a:f3:72:e3:63:1b:a5:29:a9:f1:75:
                    30:58:6b:45:82:fd:b3:d7:e6:46:89:48:c2:d2:7a:
                    b5:e5:2a:dd:9c:f4:20:11:31:ea:e5:10:34:fa:f1:
                    df:88:8f:13:da:56:98:44:8d:0f:23:ba:d0:6e:9a:
                    e6:24:47:4e:ec:95:e0:1d:d4:77:95:85:c1:3e:73:
                    aa:fa:f8:bb:fc:4c:8d:ba:a2:35:68:2d:ae:6f:8e:
                    ac:b1:ae:f5:28:43:1d:21:bc:e3:61:5b:6e:21:c2:
                    dd:13:e0:d9:e1:f6:95:02:01:dc:f5:9e:2f:fa:a3:
                    91:d0:f2:f6:46:5f:a8:df:52:ed:e3:ef:8f:a3:fc:
                    19:cb:62:47:9b:85:2c:eb:57:36:75:f0:0b:91:a3:
                    89:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B9:61:E6:84:79:82:6D:CB:E5:FB:C8:D8:6C:1D:6F:50:AF:D4:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/a6b09397-d770-3282-8e4f-62270dbc7da9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9/97e93673-5d19-4ff2-8250-f1094f4e12c9.crl

            X509v3 Authority Key Identifier:
                keyid:59:A7:65:FA:2D:3E:59:26:BD:68:1C:C1:CC:86:BD:6E:8B:E6:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/97e93673-5d19-4ff2-8250-f1094f4e12c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f74b:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:02:be:76:99:b2:ce:26:02:0c:8f:ef:dd:2b:9d:ae:10:e1:
         5f:72:4e:97:c9:85:76:78:76:b8:30:ba:e5:2c:d1:21:57:eb:
         6d:7d:7a:eb:bc:d0:2f:a2:3c:ae:60:f8:2e:68:f1:38:1f:dc:
         69:07:f1:67:87:4d:a3:00:7c:fd:77:ba:65:b9:fe:70:1d:b4:
         d7:19:a3:41:69:5a:64:d6:ca:84:64:52:cf:ea:7f:d7:b3:2c:
         aa:90:eb:64:39:fb:a7:a2:84:14:88:82:72:dc:6f:6a:17:4a:
         15:75:fd:22:b2:95:e8:cf:fe:2a:14:59:9b:b7:95:cc:15:76:
         ac:f4:29:02:0d:16:3d:9f:77:a2:ea:b8:9b:93:81:4e:df:40:
         22:13:f0:43:3b:7e:66:1b:d2:9f:8f:df:27:08:56:e2:ab:11:
         d3:5d:2d:0a:7e:9c:e5:a3:44:46:48:13:c7:c7:e0:74:76:99:
         45:23:95:5f:58:58:6e:67:13:1e:57:0f:22:42:4d:34:00:bf:
         a9:b0:38:2b:4e:6e:1a:7a:e7:0d:16:f2:94:38:41:c6:83:4e:
         d1:6c:18:2b:8c:c8:9c:16:83:7d:1f:39:b2:f6:0c:43:08:5e:
         be:4e:b7:ca:66:c3:f5:f2:3a:6e:74:46:8a:d9:99:08:61:2d:
         29:41:13:72
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5+lOGPtLPaNm0FNGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTdlOTM2NzMtNWQxOS00ZmYyLTgyNTAtZjEwOTRmNGUx
MmM5MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk
ZmNkMWNjODctZGQ3Zi00NTVjLTg5NmItNjZiZjI1Y2M4ZmJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsblE4dDiQe0SjoiK2Gt5dZBj9in7Y9gKZNT/
+aFGE8tuXqfdg9/VoPUHG8tuCdwuj4UUpffL3Jk4ufnS/QuvxzlJBjH7YXLY6U5L
gpVN6vxRsjKxTCyptTIwzLz7RTSrYUDcNYSC7wsoNvyxSvNy42MbpSmp8XUwWGtF
gv2z1+ZGiUjC0nq15SrdnPQgETHq5RA0+vHfiI8T2laYRI0PI7rQbprmJEdO7JXg
HdR3lYXBPnOq+vi7/EyNuqI1aC2ub46ssa71KEMdIbzjYVtuIcLdE+DZ4faVAgHc
9Z4v+qOR0PL2Rl+o31Lt4++Po/wZy2JHm4Us61c2dfALkaOJHQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAu5YeaEeYJty+X7yNhsHW9Qr9QxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85N2U5
MzY3My01ZDE5LTRmZjItODI1MC1mMTA5NGY0ZTEyYzkvYTZiMDkzOTctZDc3MC0z
MjgyLThlNGYtNjIyNzBkYmM3ZGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTdlOTM2NzMtNWQxOS00ZmYyLTgy
NTAtZjEwOTRmNGUxMmM5Lzk3ZTkzNjczLTVkMTktNGZmMi04MjUwLWYxMDk0ZjRl
MTJjOS5jcmwwHwYDVR0jBBgwFoAUWadl+i0+WSa9aBzBzIa9bovmt/MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85N2U5MzY3My01ZDE5LTRmZjItODI1MC1mMTA5
NGY0ZTEyYzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL3SwAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKUCvnaZss4mAgyP790rna4Q4V9yTpfJhXZ4drgwuuUs0SFX6219
euu80C+iPK5g+C5o8Tgf3GkH8WeHTaMAfP13umW5/nAdtNcZo0FpWmTWyoRkUs/q
f9ezLKqQ62Q5+6eihBSIgnLcb2oXShV1/SKylejP/ioUWZu3lcwVdqz0KQINFj2f
d6LquJuTgU7fQCIT8EM7fmYb0p+P3ycIVuKrEdNdLQp+nOWjREZIE8fH4HR2mUUj
lV9YWG5nEx5XDyJCTTQAv6mwOCtObhp65w0W8pQ4QcaDTtFsGCuMyJwWg30fObL2
DEMIXr5Ot8pmw/XyOm50RorZmQhhLSlBE3I=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:32:45 2026 by rpki-client