Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/060550ce-ebfd-323e-b957-e42515f4f7f8.roa
File:                     060550ce-ebfd-323e-b957-e42515f4f7f8.roa (raw, json)
Hash identifier:          KVmk1grg2n8FbgifZGD9X3iA/dGAkfr/6xY7wxRzOho=
Subject key identifier:   83:61:36:4E:5C:73:04:4D:A9:27:5C:F1:E9:8B:D9:28:86:AD:BE:C6
Certificate issuer:       /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial:       010D0C9F4328584EA7926D99A93F1F7443DB9F00
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/060550ce-ebfd-323e-b957-e42515f4f7f8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     1004
IP address blocks:        2602:fba3:401::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:6d:99:a9:3f:1f:74:43:db:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cd026ce9-e0fc-431c-a411-c457977f7b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0f:d5:0e:90:b0:4e:24:e7:cf:ee:de:70:bb:
                    fe:95:20:e8:54:bf:de:b6:6f:29:f4:45:c8:c9:74:
                    14:49:de:7d:7b:c3:55:dc:3c:27:87:22:cc:54:6c:
                    8a:0d:b4:cb:61:fb:52:e2:14:9c:ac:84:86:59:c3:
                    7a:6e:67:bc:7f:e6:70:b5:9d:1d:91:0d:5d:05:e8:
                    83:2c:1e:48:98:f8:fc:62:17:0d:c2:00:bd:28:8a:
                    0b:40:a6:b5:af:c2:1e:b2:1d:c4:7e:35:27:19:b9:
                    13:d7:84:c4:63:ee:c8:86:37:20:01:90:60:23:6d:
                    06:d9:ac:d1:f9:25:90:00:01:98:64:a7:43:3e:61:
                    e4:97:b0:0a:19:97:46:0c:20:e5:b8:1d:23:89:78:
                    2b:0c:53:e8:04:98:16:15:36:e0:0c:ec:26:ca:b0:
                    d8:c0:8d:48:4d:82:81:8d:cb:d1:63:53:71:a5:c3:
                    05:54:87:48:80:ee:89:b0:12:dc:24:06:58:ca:16:
                    ad:84:84:19:13:f1:4e:a4:a4:ee:08:39:37:c3:6c:
                    61:0b:51:3c:f1:ae:34:50:56:68:38:03:4a:93:4e:
                    ea:76:35:75:77:3c:92:ad:11:34:e4:0b:ee:7c:48:
                    00:85:93:7b:3d:7b:62:44:76:d8:b5:90:d3:4b:b5:
                    4b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:61:36:4E:5C:73:04:4D:A9:27:5C:F1:E9:8B:D9:28:86:AD:BE:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/060550ce-ebfd-323e-b957-e42515f4f7f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl

            X509v3 Authority Key Identifier:
                keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba3:401::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:31:50:10:6d:99:5c:95:d7:9d:60:47:e7:1e:57:1d:5f:44:
         4d:24:47:27:bb:21:34:f2:9d:14:20:25:d0:66:65:bc:2b:e0:
         f5:82:c1:86:11:2a:89:3a:7b:6d:35:6c:00:2c:8f:98:f9:98:
         8b:6a:53:9d:a8:c6:1b:6e:22:c2:e2:07:e0:e2:cc:cd:dc:ad:
         1a:58:89:44:5d:5b:b2:7a:bc:1f:dc:68:ce:de:03:21:67:c6:
         e3:24:2f:73:83:87:9e:a9:b9:e1:eb:62:20:9f:f1:4e:76:69:
         ad:e5:2d:de:a2:5f:9b:49:d1:64:d6:42:cb:9e:16:35:4d:da:
         eb:90:96:42:ef:73:be:d1:68:50:0c:25:a5:62:77:76:eb:19:
         04:42:d9:70:8c:04:d0:30:bf:88:97:e9:fa:2a:b1:72:41:21:
         75:92:88:d1:60:42:24:4c:1e:3e:94:0e:4e:ee:2f:a9:86:02:
         f6:c2:ce:e7:30:14:71:44:f4:44:42:d1:3b:ce:e3:15:b9:bf:
         ac:31:c5:c5:2e:59:08:e1:ef:3c:80:df:36:29:cb:db:1d:76:
         d2:17:79:c4:b7:b1:d4:a6:af:32:40:d3:f7:86:b4:d9:29:31:
         0c:d7:8b:35:1e:6a:27:94:2b:72:77:6a:9f:a1:bc:d3:cc:25:
         fa:99:a1:70
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkm2ZqT8fdEPbnwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWFlOTc5NmEtNWYzZC00ZjQ3LWIxMTctNDIzNjBhMjEz
ZTM3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
Y2QwMjZjZTktZTBmYy00MzFjLWE0MTEtYzQ1Nzk3N2Y3YjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA/VDpCwTiTnz+7ecLv+lSDoVL/etm8p9EXI
yXQUSd59e8NV3DwnhyLMVGyKDbTLYftS4hScrISGWcN6bme8f+ZwtZ0dkQ1dBeiD
LB5ImPj8YhcNwgC9KIoLQKa1r8Iesh3EfjUnGbkT14TEY+7IhjcgAZBgI20G2azR
+SWQAAGYZKdDPmHkl7AKGZdGDCDluB0jiXgrDFPoBJgWFTbgDOwmyrDYwI1ITYKB
jcvRY1NxpcMFVIdIgO6JsBLcJAZYyhathIQZE/FOpKTuCDk3w2xhC1E88a40UFZo
OANKk07qdjV1dzySrRE05AvufEgAhZN7PXtiRHbYtZDTS7VLTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFINhNk5ccwRNqSdc8emL2SiGrb7GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5
Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2MGEyMTNlMzcvMDYwNTUwY2UtZWJmZC0z
MjNlLWI5NTctZTQyNTE1ZjRmN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWFlOTc5NmEtNWYzZC00ZjQ3LWIx
MTctNDIzNjBhMjEzZTM3LzFhZTk3OTZhLTVmM2QtNGY0Ny1iMTE3LTQyMzYwYTIx
M2UzNy5jcmwwHwYDVR0jBBgwFoAUTss6/l8FHqwG3VnOR6besyl/QdwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2
MGEyMTNlMzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7owQB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADQxUBBtmVyV151gR+ceVx1fRE0kRye7ITTynRQgJdBmZbwr4PWC
wYYRKok6e201bAAsj5j5mItqU52oxhtuIsLiB+DizM3crRpYiURdW7J6vB/caM7e
AyFnxuMkL3ODh56pueHrYiCf8U52aa3lLd6iX5tJ0WTWQsueFjVN2uuQlkLvc77R
aFAMJaVid3brGQRC2XCMBNAwv4iX6foqsXJBIXWSiNFgQiRMHj6UDk7uL6mGAvbC
zucwFHFE9ERC0TvO4xW5v6wxxcUuWQjh7zyA3zYpy9sddtIXecS3sdSmrzJA0/eG
tNkpMQzXizUeaieUK3J3ap+hvNPMJfqZoXA=
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:00:32 2026 by rpki-client