Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/894e068d-7caa-3db7-adf7-8744d6976e60.roa
File:                     894e068d-7caa-3db7-adf7-8744d6976e60.roa (raw, json)
Hash identifier:          PzWn0Ho4VZn6Z9JhR+4YmfdD1QGCjnJTLeSUoP4lPes=
Subject key identifier:   21:0D:F9:59:FD:92:93:40:39:60:AB:97:D7:0A:65:45:D6:C7:E2:EC
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584E9BE534CFE14B56D56EFAB900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/894e068d-7caa-3db7-adf7-8744d6976e60.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     19527
IP address blocks:        2600:1902:520::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:34:cf:e1:4b:56:d5:6e:fa:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=4ba4555f-d72c-4740-a4b9-7f004e24f473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:82:87:f7:b0:ca:9e:09:47:49:04:21:f0:73:
                    00:89:f5:b2:7f:14:64:9d:dc:17:30:f8:8e:6b:60:
                    08:bb:1e:85:79:9e:5c:85:01:23:fd:53:7e:65:10:
                    df:da:b7:de:64:49:7e:c2:c9:46:d7:d7:41:7d:e7:
                    ed:27:65:e6:5b:81:82:99:a5:aa:b6:3b:5b:76:bf:
                    e4:83:a3:cf:a3:db:eb:5f:ab:7f:28:53:4f:63:56:
                    8b:bf:cf:4b:12:41:3c:b7:a9:9b:c2:a7:d7:02:34:
                    98:39:09:1f:62:29:d3:5b:f1:ea:c3:0c:c2:9b:7c:
                    a6:ce:a7:05:f2:c3:15:35:0b:80:67:d9:30:6b:6d:
                    04:49:9c:bc:d0:eb:7d:0e:85:ef:7e:41:a0:ff:a4:
                    66:f7:21:be:2f:dc:dc:e1:d5:ae:a5:91:00:62:c1:
                    46:2d:ef:93:9e:27:ee:2e:06:8f:41:5c:bb:94:94:
                    d1:b4:98:40:74:c7:ff:ff:0d:74:2f:b7:bd:6c:db:
                    60:67:5e:1a:5a:00:75:4d:0a:04:d8:a8:c3:aa:fb:
                    5a:a9:b1:86:c8:e8:87:00:b2:60:3b:fb:b7:38:d1:
                    e1:4c:95:09:d9:05:9c:a3:37:b2:f5:e2:41:da:7c:
                    49:9e:9a:aa:11:f3:ed:84:49:b9:12:b3:ff:3d:73:
                    cc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0D:F9:59:FD:92:93:40:39:60:AB:97:D7:0A:65:45:D6:C7:E2:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/894e068d-7caa-3db7-adf7-8744d6976e60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:520::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:c2:62:f7:26:7c:01:c7:98:2d:be:4d:a6:91:ca:ca:34:3e:
         66:04:ed:ca:e5:3e:0d:b3:ed:e1:78:07:2b:f3:c5:af:db:9c:
         c7:95:14:47:08:50:3f:1f:f5:4d:1d:29:69:51:14:3c:a2:60:
         3e:ed:0c:5e:78:59:f6:49:f2:3c:eb:00:59:c3:b4:8b:9d:99:
         06:67:ed:3b:ad:4b:17:23:9c:74:cf:a3:3f:16:a5:47:d3:25:
         d8:7b:d4:8c:d5:9d:43:82:eb:2b:dc:29:86:a5:98:1a:f4:ed:
         df:93:22:b2:fa:69:1a:77:2c:0f:6e:c8:2b:cc:7d:f9:64:25:
         c7:76:07:b4:06:6a:bc:1a:47:e4:0a:5f:22:fe:a7:ea:24:f9:
         9f:6e:1e:67:82:8b:5d:ee:03:ea:ab:5e:86:14:57:9f:fc:ae:
         36:0d:63:e3:65:6f:be:6d:3b:e1:b9:00:7d:21:de:89:3a:58:
         68:10:a9:2d:8a:fe:37:7b:ff:51:b7:31:b2:3c:9f:fd:e2:72:
         1e:f8:fc:df:38:b8:86:23:33:83:91:31:99:c5:4c:3d:ba:38:
         b2:ca:55:c5:ca:c7:ff:df:9e:0a:6c:b1:78:5a:9f:f2:ab:19:
         2a:aa:59:f4:7a:91:9d:ea:a6:9d:63:5c:15:25:cf:7f:10:c3:
         e7:af:cc:b4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6b5TTP4UtW1W76uQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk
NGJhNDU1NWYtZDcyYy00NzQwLWE0YjktN2YwMDRlMjRmNDczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIKH97DKnglHSQQh8HMAifWyfxRkndwXMPiO
a2AIux6FeZ5chQEj/VN+ZRDf2rfeZEl+wslG19dBfeftJ2XmW4GCmaWqtjtbdr/k
g6PPo9vrX6t/KFNPY1aLv89LEkE8t6mbwqfXAjSYOQkfYinTW/HqwwzCm3ymzqcF
8sMVNQuAZ9kwa20ESZy80Ot9DoXvfkGg/6Rm9yG+L9zc4dWupZEAYsFGLe+Tnifu
LgaPQVy7lJTRtJhAdMf//w10L7e9bNtgZ14aWgB1TQoE2KjDqvtaqbGGyOiHALJg
O/u3ONHhTJUJ2QWcozey9eJB2nxJnpqqEfPthEm5ErP/PXPMkwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCEN+Vn9kpNAOWCrl9cKZUXWx+LsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODk0ZTA2OGQtN2NhYS0z
ZGI3LWFkZjctODc0NGQ2OTc2ZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAgUg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKfCYvcmfAHHmC2+TaaRyso0PmYE7crlPg2z7eF4Byvzxa/bnMeV
FEcIUD8f9U0dKWlRFDyiYD7tDF54WfZJ8jzrAFnDtIudmQZn7TutSxcjnHTPoz8W
pUfTJdh71IzVnUOC6yvcKYalmBr07d+TIrL6aRp3LA9uyCvMfflkJcd2B7QGarwa
R+QKXyL+p+ok+Z9uHmeCi13uA+qrXoYUV5/8rjYNY+Nlb75tO+G5AH0h3ok6WGgQ
qS2K/jd7/1G3MbI8n/3ich74/N84uIYjM4ORMZnFTD26OLLKVcXKx//fngpssXha
n/KrGSqqWfR6kZ3qpp1jXBUlz38Qw+evzLQ=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:33:32 2026 by rpki-client