Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/307298f7-d8c6-36b2-a709-98bfd0d6750b.roa
File:                     307298f7-d8c6-36b2-a709-98bfd0d6750b.roa (raw, json)
Hash identifier:          obLKQzRcvo2UKmwzA1lVCgJaAfeKCk+YhDB6i8q7bJY=
Subject key identifier:   19:84:B1:CE:7C:00:79:7F:91:DF:D7:5C:E2:C8:0B:19:12:67:BF:87
Certificate issuer:       /CN=04610df8-1b67-4eaf-b73b-95f345a33b02
Certificate serial:       010D0C9F4328584EA7882407E5720622DF43D940
Authority key identifier: E6:EE:9E:CE:B2:EB:DD:AD:29:C1:BD:AC:C7:CD:DF:17:C6:99:5B:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/307298f7-d8c6-36b2-a709-98bfd0d6750b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     18519
IP address blocks:        2605:fac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:24:07:e5:72:06:22:df:43:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04610df8-1b67-4eaf-b73b-95f345a33b02
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=923415fa-a300-4eb4-b6f2-570b89bd6793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ac:70:10:e8:49:3b:91:f8:48:2c:07:3b:e2:
                    da:9c:1e:df:b9:e8:d7:b5:ce:ab:5f:80:fa:d7:32:
                    bb:90:c7:04:1a:86:03:b7:eb:c7:6c:e6:32:73:9a:
                    e2:e2:d3:b0:3f:0c:95:5c:90:ea:e6:c3:af:dd:ef:
                    f3:5c:80:41:47:a4:d3:0a:d7:6d:8b:6c:9b:1b:8e:
                    a0:f4:4a:ee:43:b2:a8:46:22:ca:cf:53:12:9d:c7:
                    f4:ea:42:2f:39:05:e8:f2:86:26:00:6b:22:c0:f8:
                    b4:5c:f7:90:7a:0b:63:b4:91:53:0a:01:26:6e:ad:
                    bc:0a:f9:e9:b1:26:25:1b:72:be:2b:08:93:33:77:
                    a6:38:fa:70:48:76:99:46:84:49:6b:b2:7a:f0:4c:
                    60:6f:2b:97:49:1a:57:a7:06:c5:92:28:38:e8:61:
                    f3:54:ad:7a:47:8e:db:fb:d4:cf:61:d1:3d:07:f9:
                    98:3b:75:47:a7:ea:c8:e6:fc:88:b5:4e:2b:1c:61:
                    69:49:c7:ef:f2:3c:da:92:78:13:01:42:cb:f6:83:
                    a1:c8:ad:22:bd:58:97:e8:7b:7d:70:06:19:5d:17:
                    b3:bf:77:68:0c:f4:18:1c:00:71:22:49:2a:f1:af:
                    21:cb:69:ae:77:1a:14:c3:2a:6d:6c:02:62:b5:91:
                    24:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:84:B1:CE:7C:00:79:7F:91:DF:D7:5C:E2:C8:0B:19:12:67:BF:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/307298f7-d8c6-36b2-a709-98bfd0d6750b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.crl

            X509v3 Authority Key Identifier:
                keyid:E6:EE:9E:CE:B2:EB:DD:AD:29:C1:BD:AC:C7:CD:DF:17:C6:99:5B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:fac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:5b:51:82:69:5b:a0:20:9f:73:18:4f:3d:bf:f0:3c:b8:b4:
         b7:21:f8:e2:04:2e:dc:a9:b2:b9:9c:20:e8:88:44:04:7b:4d:
         0e:f7:17:75:be:2c:15:c7:b7:c9:50:73:d4:62:1a:e9:33:d2:
         5c:38:8e:83:b3:7b:1f:15:ad:da:5b:5b:9c:ee:fc:05:18:4a:
         57:16:9f:94:e8:3e:43:ac:dc:fe:b3:6f:e7:49:cc:11:7c:3d:
         b9:fb:3d:be:d1:2d:d7:26:c9:24:68:ce:05:12:ad:56:51:71:
         ca:38:78:a7:64:28:b3:3b:ee:d5:a1:b2:75:97:19:89:5c:bd:
         1d:5f:92:a8:fc:c7:3b:6a:c4:ed:50:e4:67:6c:9b:04:e9:a3:
         39:b6:b1:24:01:65:00:5d:ce:52:b7:03:f6:af:48:7a:66:b0:
         67:ff:39:6a:06:11:0a:f2:b6:7f:b2:47:c1:1c:e8:3b:f0:ed:
         90:76:71:d9:fa:c9:ad:43:32:d5:fb:d9:c6:56:1b:22:2d:5b:
         ef:74:d7:ab:b4:76:f6:7e:2b:7f:dc:cc:89:0d:e0:86:7c:82:
         f4:63:13:16:33:b6:60:84:87:45:30:94:bd:77:3b:63:ea:60:
         94:3b:16:b1:5d:3f:e5:da:30:28:c9:5a:6a:65:31:17:29:17:
         17:6c:1c:57
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6niCQH5XIGIt9D2UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDQ2MTBkZjgtMWI2Ny00ZWFmLWI3M2ItOTVmMzQ1YTMz
YjAyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OTIzNDE1ZmEtYTMwMC00ZWI0LWI2ZjItNTcwYjg5YmQ2NzkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaxwEOhJO5H4SCwHO+LanB7fuejXtc6rX4D6
1zK7kMcEGoYDt+vHbOYyc5ri4tOwPwyVXJDq5sOv3e/zXIBBR6TTCtdti2ybG46g
9EruQ7KoRiLKz1MSncf06kIvOQXo8oYmAGsiwPi0XPeQegtjtJFTCgEmbq28Cvnp
sSYlG3K+KwiTM3emOPpwSHaZRoRJa7J68ExgbyuXSRpXpwbFkig46GHzVK16R47b
+9TPYdE9B/mYO3VHp+rI5vyItU4rHGFpScfv8jzakngTAULL9oOhyK0ivViX6Ht9
cAYZXRezv3doDPQYHABxIkkq8a8hy2mudxoUwyptbAJitZEkEQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBmEsc58AHl/kd/XXOLICxkSZ7+HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wNDYx
MGRmOC0xYjY3LTRlYWYtYjczYi05NWYzNDVhMzNiMDIvMzA3Mjk4ZjctZDhjNi0z
NmIyLWE3MDktOThiZmQwZDY3NTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDQ2MTBkZjgtMWI2Ny00ZWFmLWI3
M2ItOTVmMzQ1YTMzYjAyLzA0NjEwZGY4LTFiNjctNGVhZi1iNzNiLTk1ZjM0NWEz
M2IwMi5jcmwwHwYDVR0jBBgwFoAU5u6ezrLr3a0pwb2sx83fF8aZW/cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wNDYxMGRmOC0xYjY3LTRlYWYtYjczYi05NWYz
NDVhMzNiMDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgX6wDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAxW1GCaVugIJ9zGE89v/A8uLS3IfjiBC7cqbK5nCDoiEQEe00O9xd1
viwVx7fJUHPUYhrpM9JcOI6Ds3sfFa3aW1uc7vwFGEpXFp+U6D5DrNz+s2/nScwR
fD25+z2+0S3XJskkaM4FEq1WUXHKOHinZCizO+7VobJ1lxmJXL0dX5Ko/Mc7asTt
UORnbJsE6aM5trEkAWUAXc5StwP2r0h6ZrBn/zlqBhEK8rZ/skfBHOg78O2QdnHZ
+smtQzLV+9nGVhsiLVvvdNertHb2fit/3MyJDeCGfIL0YxMWM7ZghIdFMJS9dztj
6mCUOxaxXT/l2jAoyVpqZTEXKRcXbBxX
-----END CERTIFICATE-----
Generated at Thu Jul 30 06:54:02 2026 by rpki-client