Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a27d87a0-c5c1-32da-8e7c-8e816d6405b4.roa
File:                     a27d87a0-c5c1-32da-8e7c-8e816d6405b4.roa (raw, json)
Hash identifier:          Fi8eygdDFFMxeSMr8xZYnGxTDIvhlnX+5RtToHZbXHY=
Subject key identifier:   DD:EF:5A:2F:FF:3E:77:A6:0D:4C:B8:B7:BA:B1:AF:F4:F5:F8:BF:C4
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F4328584EA79127C2ED81BCC0A84224A0
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a27d87a0-c5c1-32da-8e7c-8e816d6405b4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19165
IP address blocks:        2604:5500:3000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:27:c2:ed:81:bc:c0:a8:42:24:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2765c422-69ab-4a25-8fd1-940b710c93ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:67:9f:0a:36:30:95:2d:05:01:8f:3c:7f:c2:
                    85:0f:3e:e1:c3:02:b1:3a:f9:fa:8e:11:62:70:59:
                    36:36:e2:44:7d:5f:b8:f0:8c:2d:bd:20:96:3e:bc:
                    97:3c:0c:ab:1c:3e:a3:31:22:ff:aa:b8:dd:cc:ef:
                    2f:98:6a:eb:c7:58:e4:1a:b7:05:93:4c:00:f5:86:
                    33:a2:2e:02:14:52:97:d8:14:58:2e:04:78:69:ce:
                    28:d8:96:17:b2:88:84:1b:bc:e8:72:35:e5:e2:e0:
                    2f:73:22:1b:b0:ed:2b:80:6a:2c:09:07:31:56:af:
                    f1:c8:b2:20:6f:52:a1:2d:39:21:ca:ec:16:d4:45:
                    a3:4c:08:4d:67:a1:41:e5:53:8f:f4:e1:2b:9b:54:
                    91:e8:ee:53:8c:5e:16:0d:2a:d9:fa:77:30:93:fe:
                    68:73:83:87:f0:8d:f6:fd:54:82:26:f4:5b:db:e2:
                    ec:3b:c1:09:56:d2:13:ca:17:ba:93:28:7b:5e:65:
                    14:e1:e5:43:72:a9:19:20:8d:6b:60:fe:c1:46:10:
                    35:33:f6:17:93:78:e8:ee:8c:54:f5:bc:db:ea:f8:
                    9d:34:15:c7:33:cf:c5:00:63:4c:e3:45:af:fa:49:
                    45:ea:6e:b0:15:df:e6:a9:a0:06:9c:24:0b:12:c7:
                    98:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EF:5A:2F:FF:3E:77:A6:0D:4C:B8:B7:BA:B1:AF:F4:F5:F8:BF:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a27d87a0-c5c1-32da-8e7c-8e816d6405b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5500:3000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:98:29:e5:71:eb:e1:7a:98:3c:b0:99:75:1e:aa:58:ef:b8:
         87:27:80:72:eb:44:82:4a:f2:a4:f3:82:32:4c:90:cb:84:05:
         12:57:b5:70:b8:84:45:41:ba:d2:0f:2f:63:a8:c0:1b:31:a0:
         95:55:3e:b6:60:4d:9e:2f:ba:54:a0:79:fa:fe:6c:49:30:25:
         39:07:24:83:57:89:8a:5a:1e:f8:cc:fd:98:f1:ba:98:34:91:
         7a:f5:8a:95:5a:0c:9a:c5:15:3a:5c:8b:c6:ec:96:81:d4:5e:
         20:31:24:fe:b9:c6:06:b3:af:4e:86:59:d9:53:b7:a6:73:4e:
         51:8c:6c:ea:a3:06:e7:70:67:71:43:27:6f:c5:c5:09:4f:31:
         91:70:05:33:ca:7f:af:54:25:93:52:c3:27:84:76:08:60:b5:
         19:ee:37:7c:25:99:6f:de:95:55:0b:e5:eb:60:d8:0d:b5:02:
         bb:f5:1c:4b:af:e2:ab:05:4e:26:53:84:52:03:b2:cf:6b:b5:
         ff:03:6c:50:0d:b8:68:cc:08:ab:80:84:f5:7e:53:22:6f:43:
         75:87:1a:8c:a1:6c:e9:58:fd:41:77:33:da:a2:02:7f:43:94:
         18:da:5f:ce:f0:c8:d6:33:b2:8e:de:04:d8:6b:54:e6:91:ad:
         6b:d2:60:91
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6nkSfC7YG8wKhCJKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2
NDA0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
Mjc2NWM0MjItNjlhYi00YTI1LThmZDEtOTQwYjcxMGM5M2FiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2efCjYwlS0FAY88f8KFDz7hwwKxOvn6jhFi
cFk2NuJEfV+48IwtvSCWPryXPAyrHD6jMSL/qrjdzO8vmGrrx1jkGrcFk0wA9YYz
oi4CFFKX2BRYLgR4ac4o2JYXsoiEG7zocjXl4uAvcyIbsO0rgGosCQcxVq/xyLIg
b1KhLTkhyuwW1EWjTAhNZ6FB5VOP9OErm1SR6O5TjF4WDSrZ+ncwk/5oc4OH8I32
/VSCJvRb2+LsO8EJVtITyhe6kyh7XmUU4eVDcqkZII1rYP7BRhA1M/YXk3jo7oxU
9bzb6vidNBXHM8/FAGNM40Wv+klF6m6wFd/mqaAGnCQLEseYOwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFN3vWi//PnemDUy4t7qxr/T1+L/EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz
YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvYTI3ZDg3YTAtYzVjMS0z
MmRhLThlN2MtOGU4MTZkNjQwNWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm
NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl
NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz
ZjY1ZTY0MDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgRVADAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAiJgp5XHr4XqYPLCZdR6qWO+4hyeAcutEgkrypPOCMkyQy4QFEle1
cLiERUG60g8vY6jAGzGglVU+tmBNni+6VKB5+v5sSTAlOQckg1eJiloe+Mz9mPG6
mDSRevWKlVoMmsUVOlyLxuyWgdReIDEk/rnGBrOvToZZ2VO3pnNOUYxs6qMG53Bn
cUMnb8XFCU8xkXAFM8p/r1Qlk1LDJ4R2CGC1Ge43fCWZb96VVQvl62DYDbUCu/Uc
S6/iqwVOJlOEUgOyz2u1/wNsUA24aMwIq4CE9X5TIm9DdYcajKFs6Vj9QXcz2qIC
f0OUGNpfzvDI1jOyjt4E2GtU5pGta9JgkQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:27:51 2026 by rpki-client