Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/e79010f1-e45f-3297-b37c-c24e052529e1.roa
File:                     e79010f1-e45f-3297-b37c-c24e052529e1.roa (raw, json)
Hash identifier:          YMd/ieWSh8jfxQaRpjJlJpHjHZomOvKqL6UYqZuoHro=
Subject key identifier:   8A:E1:34:AA:A9:A7:76:F4:DA:D7:0C:42:B4:21:30:33:2F:04:73:7A
Certificate issuer:       /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Certificate serial:       010D0C9F4328584E94EA526245DC08B453775720
Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/e79010f1-e45f-3297-b37c-c24e052529e1.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     23428
IP address blocks:        2602:fb68:c0::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:52:62:45:dc:08:b4:53:77:57:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=a8f67e57-bea2-4fe3-8cfd-4165d990dfeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:77:eb:6f:3c:48:34:81:6f:ca:81:68:76:3f:
                    d9:00:14:31:24:7b:54:1a:4a:8f:be:d0:2e:5e:1c:
                    18:23:fb:c6:2a:a6:34:9b:24:e6:1b:26:63:d7:d5:
                    c5:38:f2:ca:05:b7:a3:37:e7:83:2d:c7:57:c3:06:
                    9c:95:e0:e7:f4:b9:ce:df:ef:fa:31:ba:58:72:86:
                    c1:14:d3:0c:95:c5:34:96:81:f7:cc:be:59:5a:9b:
                    a3:7b:2f:76:17:87:30:b6:12:53:f3:55:1f:34:6a:
                    1a:1f:a1:f6:48:21:d4:78:bd:57:7a:01:69:a3:b0:
                    55:d1:e0:1e:df:67:ab:32:7b:10:aa:c2:72:51:ba:
                    1f:b4:36:d4:b2:95:02:d0:2b:86:3b:3d:6b:83:b5:
                    55:e1:2c:83:a4:e2:a6:7b:14:3d:5e:71:03:2f:fd:
                    8a:00:26:ad:f8:e6:94:a2:de:1f:31:56:9d:ee:1a:
                    40:9d:ce:b9:51:28:e2:68:4a:29:97:2a:60:d9:e5:
                    45:be:21:a6:a0:12:f8:fb:81:e0:c6:6f:e3:b2:7b:
                    3b:c5:d3:2e:56:6e:4d:bd:b8:5b:a8:01:f2:df:21:
                    e2:c3:82:77:65:89:c9:41:68:67:29:f2:e4:47:83:
                    c2:fb:bb:e6:1c:7a:3d:c4:a1:2c:37:42:20:c7:85:
                    5f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E1:34:AA:A9:A7:76:F4:DA:D7:0C:42:B4:21:30:33:2F:04:73:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/e79010f1-e45f-3297-b37c-c24e052529e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl

            X509v3 Authority Key Identifier:
                keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb68:c0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:53:96:e9:84:66:8b:83:99:e4:8d:4e:49:8b:9c:8d:2b:63:
         7a:25:bb:28:5e:be:2e:a7:cf:07:62:f0:ec:ec:91:7b:38:9f:
         10:88:b2:2b:37:05:f9:a8:0b:4f:1e:30:f0:11:93:b4:a0:aa:
         c2:56:90:df:a9:b2:a0:14:14:48:48:03:9c:78:d0:36:46:f5:
         89:1c:56:92:99:e2:5b:a2:c6:55:86:29:b7:3e:f7:93:62:0b:
         94:44:1c:1b:be:8c:a2:65:a4:68:dc:ee:62:a4:49:16:8a:c6:
         7b:b7:fe:17:51:76:1a:97:dc:88:59:68:f3:86:3d:58:af:d3:
         ba:96:8c:59:a8:e6:d7:2d:33:bd:da:4e:09:94:ad:ea:00:d5:
         c3:97:d6:57:7c:1a:09:da:29:79:97:72:cb:dc:55:91:f5:60:
         67:b6:ab:cb:76:98:34:50:41:22:86:12:bb:c3:50:bd:78:35:
         01:a2:0c:af:c9:1b:32:40:a3:f5:a6:95:5d:6e:8d:b5:07:92:
         7e:99:09:16:57:0a:b0:60:aa:0a:9b:e7:94:b9:2a:7b:0a:4b:
         85:8f:56:62:37:1d:dd:df:b3:50:37:bb:87:9c:6a:ea:e5:79:
         aa:d4:06:42:77:cf:96:82:8d:43:1d:4e:ab:3e:ff:34:fd:e8:
         53:48:cf:d9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6U6lJiRdwItFN3VyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl
NTRkMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk
YThmNjdlNTctYmVhMi00ZmUzLThjZmQtNDE2NWQ5OTBkZmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHfrbzxINIFvyoFodj/ZABQxJHtUGkqPvtAu
XhwYI/vGKqY0myTmGyZj19XFOPLKBbejN+eDLcdXwwacleDn9LnO3+/6MbpYcobB
FNMMlcU0loH3zL5ZWpujey92F4cwthJT81UfNGoaH6H2SCHUeL1XegFpo7BV0eAe
32erMnsQqsJyUboftDbUspUC0CuGOz1rg7VV4SyDpOKmexQ9XnEDL/2KACat+OaU
ot4fMVad7hpAnc65USjiaEoplypg2eVFviGmoBL4+4Hgxm/jsns7xdMuVm5Nvbhb
qAHy3yHiw4J3ZYnJQWhnKfLkR4PC+7vmHHo9xKEsN0Igx4VfqQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIrhNKqpp3b02tcMQrQhMDMvBHN6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw
NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvZTc5MDEwZjEtZTQ1Zi0z
Mjk3LWIzN2MtYzI0ZTA1MjUyOWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli
MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj
ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk
MjkxY2U1NGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL7aADA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABZTlumEZouDmeSNTkmLnI0rY3oluyhevi6nzwdi8OzskXs4nxCI
sis3BfmoC08eMPARk7SgqsJWkN+psqAUFEhIA5x40DZG9YkcVpKZ4luixlWGKbc+
95NiC5REHBu+jKJlpGjc7mKkSRaKxnu3/hdRdhqX3IhZaPOGPViv07qWjFmo5tct
M73aTgmUreoA1cOX1ld8GgnaKXmXcsvcVZH1YGe2q8t2mDRQQSKGErvDUL14NQGi
DK/JGzJAo/WmlV1ujbUHkn6ZCRZXCrBgqgqb55S5KnsKS4WPVmI3Hd3fs1A3u4ec
aurlearUBkJ3z5aCjUMdTqs+/zT96FNIz9k=
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:05 2026 by rpki-client