Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/43b737f8-5d33-38f5-9659-04f92c5f69ec.roa
File:                     43b737f8-5d33-38f5-9659-04f92c5f69ec.roa (raw, json)
Hash identifier:          +McLH/KSOx+KKz9Wk4r2YaztpQgpTMVZZ7HlKUdF+l0=
Subject key identifier:   CA:8E:18:4A:6E:2D:29:04:FC:DA:78:36:ED:D1:EB:86:EA:B1:B7:96
Certificate issuer:       /CN=a076692a-65ec-4598-b231-91f6d6e63c63
Certificate serial:       010D0C9F4328584EA17A84F69BFBA71D9DB7DE00
Authority key identifier: D6:A5:79:4D:44:9F:D0:0B:B8:6E:CC:C8:49:3C:17:71:0B:4D:F9:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/43b737f8-5d33-38f5-9659-04f92c5f69ec.roa
Signing time:             Sun 26 Jul 2026 21:00:11 +0000
ROA not before:           Sun 26 Jul 2026 21:00:11 +0000
ROA not after:            Sat 24 Oct 2026 21:00:11 +0000
asID:                     401418
IP address blocks:        2602:f7d0::/48 maxlen: 48
                          2602:f7d0:1::/48 maxlen: 48
                          2602:f7d0:2::/48 maxlen: 48
                          2602:f7d0:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/a076692a-65ec-4598-b231-91f6d6e63c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/a076692a-65ec-4598-b231-91f6d6e63c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:7a:84:f6:9b:fb:a7:1d:9d:b7:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a076692a-65ec-4598-b231-91f6d6e63c63
        Validity
            Not Before: Jul 26 21:00:11 2026 GMT
            Not After : Oct 24 21:00:11 2026 GMT
        Subject: CN=f5a5c029-1e5b-4629-ab44-aa2454cbff65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:20:5d:20:7f:a2:17:9e:88:73:de:db:83:04:
                    02:c1:79:01:51:b7:88:db:d4:bc:0a:8c:ed:95:37:
                    cf:bc:bc:43:88:11:9f:ec:7e:38:ae:af:30:30:80:
                    df:9e:fb:65:9c:da:51:ed:74:3f:f1:d4:30:2a:8d:
                    1a:03:b6:e8:98:ac:96:97:ea:8c:56:ed:a3:71:17:
                    ea:9c:a0:e0:4f:00:27:b9:0a:ce:fb:f9:a2:5c:c1:
                    9a:81:df:ec:9c:1f:34:d0:ea:7a:d9:ee:e0:c0:d4:
                    f4:9c:cf:59:6f:60:95:68:6c:a5:d2:67:0d:50:7d:
                    28:4a:57:96:b0:63:94:95:14:18:24:1e:1d:ba:f8:
                    ba:ae:ab:68:66:57:12:24:2d:f6:99:c2:5d:ff:8c:
                    3a:cd:17:e8:e1:9a:42:af:78:90:5d:5d:f6:f2:3e:
                    4a:76:43:b9:8c:51:70:d3:f2:53:4e:18:fb:03:3d:
                    bc:87:43:bd:0d:38:27:f0:b1:55:05:29:cb:f3:5c:
                    03:42:0f:5f:82:2f:5f:91:8a:02:77:cb:f7:84:71:
                    4c:94:5d:54:ee:0c:ae:9e:21:72:c0:56:bd:dc:fb:
                    de:8b:d0:a9:63:75:b9:af:e0:bb:51:50:d7:4f:3e:
                    80:e8:d8:b5:bb:2f:a6:27:34:6f:12:23:82:98:30:
                    a3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8E:18:4A:6E:2D:29:04:FC:DA:78:36:ED:D1:EB:86:EA:B1:B7:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/43b737f8-5d33-38f5-9659-04f92c5f69ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/a076692a-65ec-4598-b231-91f6d6e63c63.crl

            X509v3 Authority Key Identifier:
                keyid:D6:A5:79:4D:44:9F:D0:0B:B8:6E:CC:C8:49:3C:17:71:0B:4D:F9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7d0::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:a6:4f:ca:ba:92:99:c3:9e:93:ca:c2:17:4a:7b:f6:58:48:
         aa:28:9a:79:5e:63:11:39:d8:9d:a6:f8:43:33:43:db:f5:df:
         9e:73:0d:a5:dd:89:9d:ac:6a:70:19:3c:3b:20:4c:6a:4f:95:
         88:32:6d:1b:e8:a5:c9:2f:cb:68:d0:06:8c:21:4f:d7:b5:81:
         ac:fb:06:a1:09:01:c2:83:c4:b9:b0:dc:d8:6f:89:43:86:40:
         24:9b:9f:f0:e1:2a:e0:eb:01:77:da:02:3f:6e:f4:8e:65:41:
         08:5f:6f:f5:44:51:8d:a3:16:8c:48:b2:76:27:f4:e2:04:0c:
         a1:74:f4:97:45:7c:e7:79:f2:8e:b9:ac:2a:1e:ce:e3:6f:66:
         af:4a:bc:ea:24:64:2f:12:45:ba:ba:6b:b3:03:e0:cf:97:7a:
         81:95:83:5a:e9:c2:25:4f:a7:fa:8f:a8:19:7a:66:ed:d6:cd:
         dd:17:9d:42:ce:f5:d7:27:0f:4d:ac:c6:77:4d:ae:dc:93:c2:
         0b:4d:41:db:ca:d2:0a:67:d9:52:ce:39:60:4b:76:7f:2d:fa:
         f6:e8:ac:03:e7:8a:91:9a:bb:d7:b0:08:46:1f:1f:65:f3:1a:
         49:d0:cf:f9:5e:cb:fe:cd:76:fe:aa:ae:60:be:89:82:7e:ae:
         17:58:17:2e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6heoT2m/unHZ233gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTA3NjY5MmEtNjVlYy00NTk4LWIyMzEtOTFmNmQ2ZTYz
YzYzMB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk
ZjVhNWMwMjktMWU1Yi00NjI5LWFiNDQtYWEyNDU0Y2JmZjY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyBdIH+iF56Ic97bgwQCwXkBUbeI29S8Cozt
lTfPvLxDiBGf7H44rq8wMIDfnvtlnNpR7XQ/8dQwKo0aA7bomKyWl+qMVu2jcRfq
nKDgTwAnuQrO+/miXMGagd/snB800Op62e7gwNT0nM9Zb2CVaGyl0mcNUH0oSleW
sGOUlRQYJB4duvi6rqtoZlcSJC32mcJd/4w6zRfo4ZpCr3iQXV328j5KdkO5jFFw
0/JTThj7Az28h0O9DTgn8LFVBSnL81wDQg9fgi9fkYoCd8v3hHFMlF1U7gyuniFy
wFa93Pvei9CpY3W5r+C7UVDXTz6A6Ni1uy+mJzRvEiOCmDCjRQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMqOGEpuLSkE/Np4Nu3R64bqsbeWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMDc2
NjkyYS02NWVjLTQ1OTgtYjIzMS05MWY2ZDZlNjNjNjMvNDNiNzM3ZjgtNWQzMy0z
OGY1LTk2NTktMDRmOTJjNWY2OWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTA3NjY5MmEtNjVlYy00NTk4LWIy
MzEtOTFmNmQ2ZTYzYzYzL2EwNzY2OTJhLTY1ZWMtNDU5OC1iMjMxLTkxZjZkNmU2
M2M2My5jcmwwHwYDVR0jBBgwFoAU1qV5TUSf0Au4bszISTwXcQtN+ZowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMDc2NjkyYS02NWVjLTQ1OTgtYjIzMS05MWY2
ZDZlNjNjNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgL30AAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA+mT8q6kpnDnpPKwhdKe/ZYSKoomnleYxE52J2m+EMzQ9v1355z
DaXdiZ2sanAZPDsgTGpPlYgybRvopckvy2jQBowhT9e1gaz7BqEJAcKDxLmw3Nhv
iUOGQCSbn/DhKuDrAXfaAj9u9I5lQQhfb/VEUY2jFoxIsnYn9OIEDKF09JdFfOd5
8o65rCoezuNvZq9KvOokZC8SRbq6a7MD4M+XeoGVg1rpwiVPp/qPqBl6Zu3Wzd0X
nULO9dcnD02sxndNrtyTwgtNQdvK0gpn2VLOOWBLdn8t+vborAPnipGau9ewCEYf
H2XzGknQz/ley/7Ndv6qrmC+iYJ+rhdYFy4=
-----END CERTIFICATE-----
Generated at Thu Jul 30 07:08:31 2026 by rpki-client