Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/df942add-d6be-4a15-ae72-38bdca0242c4/8776bff7-ce67-31ac-ae29-6595f0f94ab2.roa
File:                     8776bff7-ce67-31ac-ae29-6595f0f94ab2.roa (raw, json)
Hash identifier:          XBDTYfkAtGNFaCbB5vLLP5bWsZRbKjmaqNJpZ7OAGaA=
Subject key identifier:   42:3E:C0:09:A3:14:E5:CE:AC:7D:53:A5:82:14:1B:E0:A7:EB:42:BB
Certificate issuer:       /CN=df942add-d6be-4a15-ae72-38bdca0242c4
Certificate serial:       010D0C9F4328584E9A7FB74BC0AC87165CC69588
Authority key identifier: 8F:7E:EE:40:4C:90:3A:63:E5:05:24:16:0C:25:74:CF:A7:A0:E0:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/df942add-d6be-4a15-ae72-38bdca0242c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/df942add-d6be-4a15-ae72-38bdca0242c4/8776bff7-ce67-31ac-ae29-6595f0f94ab2.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     393434
IP address blocks:        2602:fe41::/36 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/df942add-d6be-4a15-ae72-38bdca0242c4/df942add-d6be-4a15-ae72-38bdca0242c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/df942add-d6be-4a15-ae72-38bdca0242c4/df942add-d6be-4a15-ae72-38bdca0242c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/df942add-d6be-4a15-ae72-38bdca0242c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:b7:4b:c0:ac:87:16:5c:c6:95:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df942add-d6be-4a15-ae72-38bdca0242c4
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=7c0e9fdf-3f7a-4923-bbeb-3bdc04d6b8d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:89:15:f0:6d:45:28:15:40:c0:85:56:8f:0a:
                    64:db:26:74:89:0a:45:74:6b:f1:24:e6:3c:6a:d1:
                    ee:d7:9f:fa:42:38:43:3b:5c:2b:a5:0f:d0:46:96:
                    1a:3e:e4:cf:59:31:11:1d:fd:97:08:39:f2:b5:64:
                    a3:45:7a:d2:8e:35:14:8e:a4:ce:ff:d5:1a:06:10:
                    44:c4:c1:b7:32:82:cc:f7:35:b1:fe:1c:09:d4:56:
                    91:87:44:ef:24:c7:c1:4e:e4:4a:ae:6b:25:4e:86:
                    49:f4:17:78:f1:fa:8e:48:57:5a:67:e3:c8:f6:e7:
                    f1:c7:e3:74:46:9d:3c:89:16:17:0d:de:db:5d:e5:
                    48:82:ae:42:72:c2:32:96:da:c6:2e:06:e6:ad:71:
                    03:b0:85:71:67:ae:dc:cd:37:5f:62:bf:95:47:c7:
                    54:79:29:5f:35:ce:2a:53:2a:60:37:ef:c3:e8:7c:
                    de:e2:ef:d8:52:44:a9:79:bb:e8:79:e5:a7:68:f5:
                    da:94:0d:c2:7c:ac:6a:c2:32:c9:93:e0:b8:89:a0:
                    34:16:9c:90:e4:c3:27:fa:e3:c4:bf:22:e0:24:d3:
                    75:6c:72:02:9d:cf:db:dd:d6:d7:db:8c:a7:33:0f:
                    d3:6c:7c:0a:69:40:de:55:96:d0:ec:db:29:8d:07:
                    fc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3E:C0:09:A3:14:E5:CE:AC:7D:53:A5:82:14:1B:E0:A7:EB:42:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/df942add-d6be-4a15-ae72-38bdca0242c4/8776bff7-ce67-31ac-ae29-6595f0f94ab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/df942add-d6be-4a15-ae72-38bdca0242c4/df942add-d6be-4a15-ae72-38bdca0242c4.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7E:EE:40:4C:90:3A:63:E5:05:24:16:0C:25:74:CF:A7:A0:E0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/df942add-d6be-4a15-ae72-38bdca0242c4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe41::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:c1:7d:56:88:c7:91:04:79:ea:22:41:1a:8c:c2:7a:ac:00:
         40:6f:4e:92:c2:d3:6a:63:da:04:79:08:7b:30:bf:0f:c1:d3:
         54:b9:dd:51:ff:2c:be:e7:33:f4:e6:ea:2b:14:fb:63:d2:98:
         a2:b1:ad:b7:cc:97:6d:e5:f7:b2:85:35:7c:ec:b5:ae:92:f7:
         17:52:60:e9:9b:15:44:27:35:1d:17:e9:43:58:2d:ed:c0:77:
         b9:73:90:7f:25:35:dd:05:80:f3:22:fd:55:a6:a9:7c:c7:35:
         dd:e5:03:ad:a4:15:29:de:73:e0:42:64:a2:24:79:43:0e:67:
         8f:ed:2e:aa:aa:c2:de:63:e5:6d:17:db:06:18:d6:73:14:6e:
         79:3f:53:2a:85:88:e0:d9:34:a4:7e:0c:3d:84:b5:9e:03:01:
         49:c5:e8:e8:77:3a:36:15:67:16:b7:61:07:0f:d5:2d:66:29:
         0b:4f:e0:db:ef:67:01:84:97:83:c3:3a:e1:4a:16:e7:7d:1d:
         7a:75:a3:f8:c0:ab:33:a1:60:93:48:35:62:17:4b:34:5c:79:
         17:09:1d:bd:a6:f6:4a:7e:83:6b:88:0c:03:72:79:3c:f8:a2:
         3f:5e:7e:56:8c:26:c0:36:22:11:ff:c0:5b:39:4e:69:12:a1:
         6c:24:3f:ce
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6af7dLwKyHFlzGlYgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGY5NDJhZGQtZDZiZS00YTE1LWFlNzItMzhiZGNhMDI0
MmM0MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk
N2MwZTlmZGYtM2Y3YS00OTIzLWJiZWItM2JkYzA0ZDZiOGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyokV8G1FKBVAwIVWjwpk2yZ0iQpFdGvxJOY8
atHu15/6QjhDO1wrpQ/QRpYaPuTPWTERHf2XCDnytWSjRXrSjjUUjqTO/9UaBhBE
xMG3MoLM9zWx/hwJ1FaRh0TvJMfBTuRKrmslToZJ9Bd48fqOSFdaZ+PI9ufxx+N0
Rp08iRYXDd7bXeVIgq5CcsIyltrGLgbmrXEDsIVxZ67czTdfYr+VR8dUeSlfNc4q
UypgN+/D6Hze4u/YUkSpebvoeeWnaPXalA3CfKxqwjLJk+C4iaA0FpyQ5MMn+uPE
vyLgJNN1bHICnc/b3dbX24ynMw/TbHwKaUDeVZbQ7NspjQf8FQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEI+wAmjFOXOrH1TpYIUG+Cn60K7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZjk0
MmFkZC1kNmJlLTRhMTUtYWU3Mi0zOGJkY2EwMjQyYzQvODc3NmJmZjctY2U2Ny0z
MWFjLWFlMjktNjU5NWYwZjk0YWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZGY5NDJhZGQtZDZiZS00YTE1LWFl
NzItMzhiZGNhMDI0MmM0L2RmOTQyYWRkLWQ2YmUtNGExNS1hZTcyLTM4YmRjYTAy
NDJjNC5jcmwwHwYDVR0jBBgwFoAUj37uQEyQOmPlBSQWDCV0z6eg4KkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZjk0MmFkZC1kNmJlLTRhMTUtYWU3Mi0zOGJk
Y2EwMjQyYzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL+QQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAQ8F9VojHkQR56iJBGozCeqwAQG9OksLTamPaBHkIezC/D8HTVLnd
Uf8svucz9ObqKxT7Y9KYorGtt8yXbeX3soU1fOy1rpL3F1Jg6ZsVRCc1HRfpQ1gt
7cB3uXOQfyU13QWA8yL9VaapfMc13eUDraQVKd5z4EJkoiR5Qw5nj+0uqqrC3mPl
bRfbBhjWcxRueT9TKoWI4Nk0pH4MPYS1ngMBScXo6Hc6NhVnFrdhBw/VLWYpC0/g
2+9nAYSXg8M64UoW530denWj+MCrM6Fgk0g1YhdLNFx5Fwkdvab2Sn6Da4gMA3J5
PPiiP15+VowmwDYiEf/AWzlOaRKhbCQ/zg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:06:33 2026 by rpki-client