Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/a7719717-e276-3bf6-ab9c-91c3f00bc8b6.roa
File:                     a7719717-e276-3bf6-ab9c-91c3f00bc8b6.roa (raw, json)
Hash identifier:          IwpDnk1T+2lY1/sfG9XrfZGvpyhnHroQ1u70Kw8iqcw=
Subject key identifier:   D1:C5:5F:47:99:6D:B3:40:DC:FD:41:45:B3:7A:D4:E0:8F:E8:21:B0
Certificate issuer:       /CN=4eab7524-ab79-46c8-aea6-96b100eb245d
Certificate serial:       010D0C9F4328584EA78F4032E5468F152E25C980
Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/a7719717-e276-3bf6-ab9c-91c3f00bc8b6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     400097
IP address blocks:        2606:3d40:5d00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:40:32:e5:46:8f:15:2e:25:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a4a1f539-86bb-4dbf-809a-d7767f0bd4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:73:d4:2f:f2:ec:80:43:ef:d9:1c:ca:c8:e0:
                    5c:e7:09:c4:64:8d:64:75:e2:bd:13:bf:94:30:1e:
                    16:8d:38:df:16:7b:bb:7c:96:05:9d:ef:ca:0a:79:
                    03:95:d8:cf:ca:03:99:50:8f:8d:e4:c8:fd:01:69:
                    c3:7c:75:a8:bf:09:10:66:37:80:d2:74:d4:97:8a:
                    e4:61:d5:fe:8a:93:90:ba:07:0b:dd:6d:4c:df:86:
                    cc:a4:e2:8b:49:41:54:cd:6e:21:89:5d:c2:07:9d:
                    1f:a4:05:71:5e:64:7f:6c:f3:cf:4e:b1:83:37:7e:
                    70:73:28:8d:1d:7b:a2:79:9a:90:7c:60:39:a8:b1:
                    4d:a8:e0:ba:50:42:0b:3e:50:bc:20:1e:74:08:4d:
                    ba:e9:f6:eb:6a:12:95:d4:8b:a7:90:b1:11:9a:c9:
                    8d:f5:ae:9d:76:6d:4e:c1:c3:1e:83:b1:1f:43:8d:
                    0e:d6:63:45:41:31:6c:7f:95:d2:9a:12:01:f6:df:
                    5e:1e:65:3c:6c:b4:24:2a:3d:f6:e5:0c:95:50:43:
                    1a:fe:9f:a3:18:3d:89:86:5a:8c:15:5c:30:8f:fb:
                    ad:e7:f6:7d:cf:f7:e8:64:a8:01:6d:ed:dd:c5:99:
                    b5:88:3d:96:ce:c8:b1:da:cc:cd:fe:23:f7:ca:8d:
                    20:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C5:5F:47:99:6D:B3:40:DC:FD:41:45:B3:7A:D4:E0:8F:E8:21:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/a7719717-e276-3bf6-ab9c-91c3f00bc8b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl

            X509v3 Authority Key Identifier:
                keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3d40:5d00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ca:ed:09:fc:e2:67:d7:1d:58:11:57:90:9e:27:28:9e:7d:
         07:b7:e0:4f:9c:3a:71:4f:a5:22:c5:9a:8b:a2:12:a7:8f:a4:
         a1:eb:cf:48:b7:f1:33:01:37:a5:79:3a:fd:4f:f3:d6:cb:8b:
         3c:d9:38:97:48:42:28:06:29:66:6f:2c:44:19:32:e8:74:81:
         85:2e:82:aa:b8:7b:4c:72:bd:fd:1b:4e:b4:15:da:63:d1:d6:
         b9:17:0e:89:0d:7d:1b:5d:50:3d:c3:e8:f1:c1:c4:f1:6e:7e:
         2f:28:a5:93:41:38:6e:2d:71:da:31:97:8d:cd:7f:62:83:ce:
         13:1d:6c:9c:a1:97:f2:78:9f:74:58:bd:03:41:86:46:7b:69:
         95:65:ee:3c:62:c2:65:15:4a:1a:db:1d:cf:d2:1e:e9:68:95:
         8d:6f:ff:1a:95:fa:d5:00:7f:a4:46:1a:ca:1b:e1:55:b3:45:
         c7:e3:43:c1:52:fd:68:04:58:13:5b:f6:9b:cd:24:4d:52:6f:
         4e:45:4c:ba:37:61:38:2a:bb:f7:2e:a9:a0:bc:02:cf:dc:de:
         88:a0:7e:01:58:52:3a:7e:56:2a:17:f4:bb:a5:ab:d6:aa:19:
         f4:42:e5:8d:87:0d:aa:0b:6e:f0:30:17:e1:3b:25:ca:01:14:
         f9:6c:6c:57
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nj0Ay5UaPFS4lyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy
NDVkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YTRhMWY1MzktODZiYi00ZGJmLTgwOWEtZDc3NjdmMGJkNGM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnPUL/LsgEPv2RzKyOBc5wnEZI1kdeK9E7+U
MB4WjTjfFnu7fJYFne/KCnkDldjPygOZUI+N5Mj9AWnDfHWovwkQZjeA0nTUl4rk
YdX+ipOQugcL3W1M34bMpOKLSUFUzW4hiV3CB50fpAVxXmR/bPPPTrGDN35wcyiN
HXuieZqQfGA5qLFNqOC6UEILPlC8IB50CE266fbrahKV1IunkLERmsmN9a6ddm1O
wcMeg7EfQ40O1mNFQTFsf5XSmhIB9t9eHmU8bLQkKj325QyVUEMa/p+jGD2JhlqM
FVwwj/ut5/Z9z/foZKgBbe3dxZm1iD2Wzsix2szN/iP3yo0gAwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNHFX0eZbbNA3P1BRbN61OCP6CGwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi
NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvYTc3MTk3MTctZTI3Ni0z
YmY2LWFiOWMtOTFjM2YwMGJjOGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl
YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi
MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx
MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QF0A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABLK7Qn84mfXHVgRV5CeJyiefQe34E+cOnFPpSLFmouiEqePpKHr
z0i38TMBN6V5Ov1P89bLizzZOJdIQigGKWZvLEQZMuh0gYUugqq4e0xyvf0bTrQV
2mPR1rkXDokNfRtdUD3D6PHBxPFufi8opZNBOG4tcdoxl43Nf2KDzhMdbJyhl/J4
n3RYvQNBhkZ7aZVl7jxiwmUVShrbHc/SHulolY1v/xqV+tUAf6RGGsob4VWzRcfj
Q8FS/WgEWBNb9pvNJE1Sb05FTLo3YTgqu/cuqaC8As/c3oigfgFYUjp+VioX9Lul
q9aqGfRC5Y2HDaoLbvAwF+E7JcoBFPlsbFc=
-----END CERTIFICATE-----
Generated at Thu Jul 30 06:50:15 2026 by rpki-client