Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3e4179e9-1c2e-325c-bc9b-4b187abb7ebd.roa
File:                     3e4179e9-1c2e-325c-bc9b-4b187abb7ebd.roa (raw, json)
Hash identifier:          GbprgQr66KHetZcQJNg2C6XDN0u5mWf/B/T6qrTJqJg=
Subject key identifier:   5A:EC:65:3A:BD:06:97:83:43:0E:08:44:0C:41:7A:ED:54:D4:82:BF
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EA7887062F5C6418C98751000
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3e4179e9-1c2e-325c-bc9b-4b187abb7ebd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23473
IP address blocks:        2607:f750:6500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:70:62:f5:c6:41:8c:98:75:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d3ea4048-6327-40d4-a9ac-892b76657f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f7:08:59:35:97:b7:87:75:d6:b7:f2:dd:d7:
                    d4:19:ef:9c:22:03:10:60:27:dc:5d:d6:7d:e5:c6:
                    ed:76:2c:0b:31:b6:e4:1a:3a:bc:24:c1:88:63:1d:
                    b7:c3:13:12:47:f0:8c:37:5a:68:f9:34:72:c9:c2:
                    75:a2:fd:d3:81:b5:bc:15:bc:9f:c2:ac:03:54:6a:
                    03:33:cb:6b:99:e4:9c:b6:89:6f:4c:69:8e:5d:bd:
                    b5:8b:7b:dc:c4:8d:85:ce:2e:26:1b:6e:98:84:a9:
                    a9:4f:ca:3b:2b:c1:12:51:23:a9:88:2c:6e:e5:e6:
                    3d:9d:64:90:80:56:31:3f:0b:6f:1c:fb:8f:42:fe:
                    d0:84:30:9e:9d:c0:c1:41:1c:7b:9a:77:f3:49:90:
                    9b:e1:9d:58:6d:5a:4a:c6:51:91:a4:7a:a1:d4:f4:
                    fe:8d:32:ad:df:e1:c1:aa:48:2b:3f:5f:61:c8:2f:
                    ad:84:a4:b9:c2:87:e0:49:ad:41:1e:5a:fe:d1:c3:
                    3d:7c:da:73:94:ad:f1:f0:ce:7a:2d:15:a0:59:b2:
                    2c:b0:eb:68:1d:f4:c7:01:0b:f1:48:1c:b3:bd:da:
                    12:2e:d4:ba:48:b7:40:cd:53:a7:60:ea:7b:e1:02:
                    33:72:9b:24:df:21:59:b5:18:d4:1a:03:7e:c9:9c:
                    0e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EC:65:3A:BD:06:97:83:43:0E:08:44:0C:41:7A:ED:54:D4:82:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3e4179e9-1c2e-325c-bc9b-4b187abb7ebd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:6500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:c4:63:b6:77:b3:68:9d:84:ec:93:a5:b6:3d:63:78:b6:bc:
         a5:c6:1e:61:e5:c1:8f:4e:78:ad:1e:68:99:e1:2b:8b:13:b4:
         ea:92:01:93:fe:67:02:c7:58:50:04:27:69:80:a0:87:48:af:
         08:74:10:88:59:74:a3:fd:51:a6:0e:fd:c4:11:2f:f8:78:84:
         7d:35:1b:31:93:ce:b3:bd:2a:2f:ea:c3:c8:ce:ce:4a:ac:f3:
         82:a2:e5:be:16:a4:ea:f3:3f:ab:c4:b2:d2:69:7b:6a:ab:7b:
         71:c0:92:23:c5:1d:71:d9:3d:fa:de:2d:71:32:23:11:86:0c:
         f1:fa:7c:4f:ff:31:c5:9e:12:96:10:e9:e1:c0:23:47:7e:84:
         1f:da:be:93:ff:bf:fc:e3:d7:5b:72:bb:68:b5:a7:8e:0b:11:
         67:6b:26:fa:9d:a6:92:12:2d:bd:e6:a9:1c:33:2a:f8:35:5a:
         44:3f:b3:11:e4:9e:bf:72:c9:43:be:1c:d2:eb:ee:c5:96:2b:
         a3:50:84:05:f2:79:a9:63:af:61:ce:4a:b3:6e:8d:84:34:51:
         b1:c8:91:67:c4:56:5e:92:a7:55:56:e0:69:fb:1c:97:7c:c7:
         8e:2a:aa:08:44:c4:b6:c9:c6:d4:4a:7c:91:e4:c1:50:c7:ae:
         95:34:af:38
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6niHBi9cZBjJh1EAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZDNlYTQwNDgtNjMyNy00MGQ0LWE5YWMtODkyYjc2NjU3ZjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivcIWTWXt4d11rfy3dfUGe+cIgMQYCfcXdZ9
5cbtdiwLMbbkGjq8JMGIYx23wxMSR/CMN1po+TRyycJ1ov3TgbW8FbyfwqwDVGoD
M8trmeSctolvTGmOXb21i3vcxI2Fzi4mG26YhKmpT8o7K8ESUSOpiCxu5eY9nWSQ
gFYxPwtvHPuPQv7QhDCencDBQRx7mnfzSZCb4Z1YbVpKxlGRpHqh1PT+jTKt3+HB
qkgrP19hyC+thKS5wofgSa1BHlr+0cM9fNpzlK3x8M56LRWgWbIssOtoHfTHAQvx
SByzvdoSLtS6SLdAzVOnYOp74QIzcpsk3yFZtRjUGgN+yZwOKQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFrsZTq9BpeDQw4IRAxBeu1U1IK/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvM2U0MTc5ZTktMWMyZS0z
MjVjLWJjOWItNGIxODdhYmI3ZWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf3UGUw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAAcRjtnezaJ2E7JOltj1jeLa8pcYeYeXBj054rR5omeErixO06pIB
k/5nAsdYUAQnaYCgh0ivCHQQiFl0o/1Rpg79xBEv+HiEfTUbMZPOs70qL+rDyM7O
SqzzgqLlvhak6vM/q8Sy0ml7aqt7ccCSI8Udcdk9+t4tcTIjEYYM8fp8T/8xxZ4S
lhDp4cAjR36EH9q+k/+//OPXW3K7aLWnjgsRZ2sm+p2mkhItveapHDMq+DVaRD+z
EeSev3LJQ74c0uvuxZYro1CEBfJ5qWOvYc5Ks26NhDRRsciRZ8RWXpKnVVbgafsc
l3zHjiqqCETEtsnG1Ep8keTBUMeulTSvOA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:53:25 2026 by rpki-client