Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/384920e2-45b6-3a50-85d7-5525abb96d6f.roa
File:                     384920e2-45b6-3a50-85d7-5525abb96d6f.roa (raw, json)
Hash identifier:          aYWN/MwWAmMVnom9quAz4Oxb4AGZktI5xDM9FydSXJU=
Subject key identifier:   0B:20:A1:9A:E9:99:D4:5C:15:15:EA:AF:3B:19:03:45:A2:D8:CA:21
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584F2EED2673541DC3A935327900
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/384920e2-45b6-3a50-85d7-5525abb96d6f.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     11232
IP address blocks:        2604:7a00:e800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:26:73:54:1d:c3:a9:35:32:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=a880094b-9f73-4e70-9fdc-fa4a233dd1ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0b:72:91:90:71:a6:46:3a:aa:81:83:6c:ca:
                    48:33:14:fa:0f:5a:81:38:84:93:a6:1b:94:75:c6:
                    70:c4:57:b7:29:14:36:e0:a9:65:a9:23:c6:ca:a1:
                    8b:c8:e0:f4:12:62:43:0c:d7:11:7d:35:ba:9d:c7:
                    2b:bd:86:bc:8f:58:f6:9a:c9:70:03:53:c2:ce:53:
                    89:9f:bf:e5:61:1f:b3:8f:01:9a:a2:7e:a7:b5:d5:
                    50:50:1a:17:00:35:6f:b0:a3:08:b0:d1:50:c8:e9:
                    29:05:0d:9a:2c:f8:a7:26:31:6e:2f:aa:f1:46:99:
                    13:be:5c:24:01:c0:8f:d5:82:bd:f6:6e:25:5e:6f:
                    37:2a:93:d1:39:93:01:df:91:9b:62:18:27:38:db:
                    0d:7f:28:d2:94:83:2c:5b:70:11:a4:8d:7c:41:78:
                    4a:4f:b1:4c:d7:e5:0a:de:65:2d:e3:cb:e5:85:f5:
                    b2:ef:38:f5:a7:1d:fd:b6:7c:85:37:db:8d:65:ab:
                    dd:c3:fd:f6:e7:b4:76:95:44:55:ad:9b:90:6d:02:
                    06:59:89:3a:9f:69:a4:a8:20:d2:ba:a6:d5:72:35:
                    49:cf:99:7f:58:29:53:12:dc:8e:b7:41:aa:49:0f:
                    c8:fb:be:cf:4c:29:9c:3b:82:6a:7f:56:ac:c7:f9:
                    d8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:20:A1:9A:E9:99:D4:5C:15:15:EA:AF:3B:19:03:45:A2:D8:CA:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/384920e2-45b6-3a50-85d7-5525abb96d6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7a00:e800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:4e:36:72:a0:3c:ff:0f:89:df:e7:db:16:5e:84:e7:99:ec:
         a1:5d:ba:03:4a:28:09:f1:82:2a:ee:82:60:62:6e:1d:4a:50:
         b4:0d:7a:ff:56:84:ed:08:9f:5b:21:a4:74:83:53:89:32:ab:
         65:53:4e:c0:45:10:34:76:c6:e1:93:bd:17:75:cf:0a:01:a9:
         8a:8c:ef:39:36:8f:e0:ff:03:31:81:c7:5d:66:f6:ed:33:84:
         6e:d7:c5:27:81:e4:b1:41:28:2a:29:ae:a4:5c:6e:69:04:b1:
         f8:05:35:b8:9c:e4:8a:78:bd:d4:67:ca:93:55:09:07:92:37:
         65:2b:b2:34:65:33:68:b7:e0:28:5a:00:74:28:35:5d:ff:93:
         07:30:34:5f:ec:96:7f:c9:ca:21:ab:af:2a:84:6e:a1:2b:d1:
         7a:8a:e1:4c:91:db:18:31:60:b0:56:33:8b:51:fe:8b:91:c3:
         bd:7f:cc:09:a2:44:0c:78:bf:8e:38:9d:13:9f:b1:92:d8:8f:
         be:e3:b9:95:f4:fe:a5:1b:e4:81:aa:87:22:3d:86:1a:a0:32:
         c5:39:bd:35:2e:b1:d7:b5:77:fb:36:df:41:e3:27:59:2e:05:
         15:8f:a4:b1:6b:28:2e:16:43:0d:24:e8:fb:c1:28:b0:1d:29:
         24:12:10:2f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8u7SZzVB3DqTUyeQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk
YTg4MDA5NGItOWY3My00ZTcwLTlmZGMtZmE0YTIzM2RkMWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwtykZBxpkY6qoGDbMpIMxT6D1qBOISTphuU
dcZwxFe3KRQ24KllqSPGyqGLyOD0EmJDDNcRfTW6nccrvYa8j1j2mslwA1PCzlOJ
n7/lYR+zjwGaon6ntdVQUBoXADVvsKMIsNFQyOkpBQ2aLPinJjFuL6rxRpkTvlwk
AcCP1YK99m4lXm83KpPROZMB35GbYhgnONsNfyjSlIMsW3ARpI18QXhKT7FM1+UK
3mUt48vlhfWy7zj1px39tnyFN9uNZavdw/3257R2lURVrZuQbQIGWYk6n2mkqCDS
uqbVcjVJz5l/WClTEtyOt0GqSQ/I+77PTCmcO4Jqf1asx/nYWwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAsgoZrpmdRcFRXqrzsZA0Wi2MohMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvMzg0OTIwZTItNDViNi0z
YTUwLTg1ZDctNTUyNWFiYjk2ZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJgR6AOgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEARk42cqA8/w+J3+fbFl6E55nsoV26A0ooCfGCKu6CYGJuHUpQtA16
/1aE7QifWyGkdINTiTKrZVNOwEUQNHbG4ZO9F3XPCgGpiozvOTaP4P8DMYHHXWb2
7TOEbtfFJ4HksUEoKimupFxuaQSx+AU1uJzkini91GfKk1UJB5I3ZSuyNGUzaLfg
KFoAdCg1Xf+TBzA0X+yWf8nKIauvKoRuoSvReorhTJHbGDFgsFYzi1H+i5HDvX/M
CaJEDHi/jjidE5+xktiPvuO5lfT+pRvkgaqHIj2GGqAyxTm9NS6x17V3+zbfQeMn
WS4FFY+ksWsoLhZDDSTo+8EosB0pJBIQLw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 13:10:13 2026 by rpki-client