Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/8e38af23-8759-37a2-8925-b153597bacf4.roa
File:                     8e38af23-8759-37a2-8925-b153597bacf4.roa (raw, json)
Hash identifier:          /rROEWriL3Bh0HpLMZiYGMndTwJNZ488G3w6OykcwIw=
Subject key identifier:   B2:7D:B9:FC:6D:D7:97:F7:C8:C8:BB:33:5C:C8:02:3F:CD:B6:D3:C5
Certificate issuer:       /CN=457522b0-cf44-4757-ac16-6215c2516e52
Certificate serial:       010D0C9F4328584E3B948BB27EFDE25F26629040
Authority key identifier: 90:D3:82:56:32:E3:87:FD:7A:E2:9F:B6:CD:23:DB:D6:F6:3A:F8:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/8e38af23-8759-37a2-8925-b153597bacf4.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     401890
IP address blocks:        2604:1a20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:8b:b2:7e:fd:e2:5f:26:62:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457522b0-cf44-4757-ac16-6215c2516e52
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=bd816a2d-e1be-4608-bb9e-1d3372610f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:61:b8:7c:34:92:3f:c4:dc:36:ac:4c:a7:7e:
                    4e:92:14:a1:c2:1f:56:38:ac:de:08:36:77:8c:83:
                    cb:eb:a2:35:bf:e7:0f:58:26:98:83:7a:94:85:99:
                    6c:8b:a9:19:cb:46:82:c9:10:27:20:26:a8:78:4a:
                    41:4b:f4:79:58:54:98:19:39:0f:a9:00:2b:ba:8d:
                    c7:23:cc:49:15:16:f7:df:0b:b9:69:aa:a4:73:5c:
                    6e:e1:bd:52:26:f2:37:86:22:ab:df:c4:cb:6d:5d:
                    cc:48:63:5a:21:3d:8d:d0:d0:30:bb:74:7e:13:8c:
                    b9:27:ba:37:de:2b:4f:d8:12:4d:12:c1:7f:e9:2e:
                    ff:32:6e:d1:40:f8:5d:42:ac:c6:5b:eb:d8:6f:82:
                    e4:ad:57:82:29:fb:3c:8d:fc:b6:f9:ca:91:a5:2b:
                    3e:04:63:9f:21:a2:78:56:b2:df:c7:ca:ad:5a:dd:
                    20:3c:e9:05:a0:cd:87:18:45:8b:59:f4:c8:8b:df:
                    6e:f0:66:59:7a:fd:03:03:7d:5e:91:04:17:79:69:
                    96:5b:61:59:4f:b4:be:2b:27:ae:ff:6f:fe:31:87:
                    80:0d:99:c2:d4:a9:4a:ea:89:c1:60:1c:30:33:19:
                    ed:8e:1f:15:a8:1a:d0:b6:e6:6b:b6:b7:94:73:20:
                    e6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7D:B9:FC:6D:D7:97:F7:C8:C8:BB:33:5C:C8:02:3F:CD:B6:D3:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/8e38af23-8759-37a2-8925-b153597bacf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.crl

            X509v3 Authority Key Identifier:
                keyid:90:D3:82:56:32:E3:87:FD:7A:E2:9F:B6:CD:23:DB:D6:F6:3A:F8:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1a20::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:da:3f:40:7b:ba:9f:c4:dd:02:a9:ea:69:07:63:7f:e3:03:
         b5:c4:59:19:b3:ff:ee:a2:06:c3:5a:fd:9d:51:b9:6a:12:43:
         ec:50:d8:8f:65:63:06:e6:f3:9c:a0:61:50:39:7c:0f:c6:b2:
         11:35:f0:c6:e3:ba:21:ff:80:1b:5c:47:2b:1c:b6:60:38:dc:
         be:14:9f:a9:b0:b4:ef:2c:8b:eb:f2:0f:62:a9:b6:30:ca:69:
         63:8a:71:ab:a8:e7:1d:1d:67:80:82:34:b9:5d:2e:87:67:82:
         dc:d5:50:d8:c8:89:4a:f9:99:f9:4a:92:22:57:ee:ae:4d:b9:
         ab:76:3c:d2:6a:7e:34:db:4b:8b:ea:eb:3c:5f:1a:db:a9:e8:
         7d:cb:ab:7a:2c:f7:51:ce:ed:5b:34:c3:60:30:68:08:7c:f1:
         68:4e:43:59:8b:17:a5:37:f8:95:0b:13:f8:78:5d:cd:d2:88:
         0c:de:59:86:dc:68:b8:45:70:06:11:e5:16:f7:73:a0:3f:09:
         9e:d6:41:ec:3d:83:22:a0:87:e4:ba:39:07:df:d5:68:52:17:
         5a:8c:74:33:0b:66:57:03:80:a8:4a:d0:60:ca:09:9b:79:7e:
         0e:ca:00:8e:35:44:18:f0:f9:b3:5d:97:dc:da:d8:5c:ef:66:
         93:1e:18:1e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE47lIuyfv3iXyZikEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU3NTIyYjAtY2Y0NC00NzU3LWFjMTYtNjIxNWMyNTE2
ZTUyMB4XDTI2MDYyMDA5MDAxM1oXDTI2MDkxODA5MDAxM1owLzEtMCsGA1UEAxMk
YmQ4MTZhMmQtZTFiZS00NjA4LWJiOWUtMWQzMzcyNjEwZjZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGG4fDSSP8TcNqxMp35OkhShwh9WOKzeCDZ3
jIPL66I1v+cPWCaYg3qUhZlsi6kZy0aCyRAnICaoeEpBS/R5WFSYGTkPqQAruo3H
I8xJFRb33wu5aaqkc1xu4b1SJvI3hiKr38TLbV3MSGNaIT2N0NAwu3R+E4y5J7o3
3itP2BJNEsF/6S7/Mm7RQPhdQqzGW+vYb4LkrVeCKfs8jfy2+cqRpSs+BGOfIaJ4
VrLfx8qtWt0gPOkFoM2HGEWLWfTIi99u8GZZev0DA31ekQQXeWmWW2FZT7S+Kyeu
/2/+MYeADZnC1KlK6onBYBwwMxntjh8VqBrQtuZrtreUcyDmRQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLJ9ufxt15f3yMi7M1zIAj/NttPFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80NTc1
MjJiMC1jZjQ0LTQ3NTctYWMxNi02MjE1YzI1MTZlNTIvOGUzOGFmMjMtODc1OS0z
N2EyLTg5MjUtYjE1MzU5N2JhY2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDU3NTIyYjAtY2Y0NC00NzU3LWFj
MTYtNjIxNWMyNTE2ZTUyLzQ1NzUyMmIwLWNmNDQtNDc1Ny1hYzE2LTYyMTVjMjUx
NmU1Mi5jcmwwHwYDVR0jBBgwFoAUkNOCVjLjh/164p+2zSPb1vY6+FkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC80NTc1MjJiMC1jZjQ0LTQ3NTctYWMxNi02MjE1
YzI1MTZlNTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQaIDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAl2j9Ae7qfxN0CqeppB2N/4wO1xFkZs//uogbDWv2dUblqEkPsUNiP
ZWMG5vOcoGFQOXwPxrIRNfDG47oh/4AbXEcrHLZgONy+FJ+psLTvLIvr8g9iqbYw
ymljinGrqOcdHWeAgjS5XS6HZ4Lc1VDYyIlK+Zn5SpIiV+6uTbmrdjzSan4020uL
6us8Xxrbqeh9y6t6LPdRzu1bNMNgMGgIfPFoTkNZixelN/iVCxP4eF3N0ogM3lmG
3Gi4RXAGEeUW93OgPwme1kHsPYMioIfkujkH39VoUhdajHQzC2ZXA4CoStBgygmb
eX4OygCONUQY8PmzXZfc2thc72aTHhge
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:28:15 2026 by rpki-client