Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/1e605cc6-9ec0-36e0-8fd0-dd2740bc1e83.roa
File:                     1e605cc6-9ec0-36e0-8fd0-dd2740bc1e83.roa (raw, json)
Hash identifier:          nQLtTaU0UuU8lOT4Y5Zl6AV6WI5H5Vzxehst2/zfSk4=
Subject key identifier:   75:4E:F6:42:A2:4F:70:10:03:52:D2:97:5C:6D:8C:00:8A:C1:87:AF
Certificate issuer:       /CN=e9e262d0-3a64-402e-81e7-5b0829596494
Certificate serial:       010D0C9F4328584EA7926CECBB00AE11C5B53700
Authority key identifier: D2:1C:79:BE:61:34:D6:A4:48:63:EB:DD:04:A5:92:67:EB:E8:17:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/1e605cc6-9ec0-36e0-8fd0-dd2740bc1e83.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     959
IP address blocks:        2606:6240:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/e9e262d0-3a64-402e-81e7-5b0829596494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/e9e262d0-3a64-402e-81e7-5b0829596494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:92:6c:ec:bb:00:ae:11:c5:b5:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e262d0-3a64-402e-81e7-5b0829596494
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5ab621f8-bff4-4753-9d27-d602b59bc08b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:06:2d:9c:54:1f:7d:91:93:90:9b:8e:99:
                    9f:f2:58:b3:fd:c9:b0:c0:55:bc:7f:a2:78:17:15:
                    c3:4b:8f:27:19:59:6e:5a:53:8c:f9:62:bd:ff:4f:
                    69:ae:74:b3:77:93:3c:78:ac:a4:5c:08:24:85:a6:
                    d1:1e:96:7e:23:a7:b7:bd:4d:75:3d:7b:28:29:95:
                    75:ab:f8:9e:b7:5c:cf:d2:35:41:9d:55:74:18:ee:
                    87:04:71:71:c4:78:98:8a:4e:f8:38:84:8b:1e:a8:
                    19:1d:41:ed:33:86:b9:4c:de:6f:b3:81:48:2b:1a:
                    57:d9:2b:86:ea:67:37:36:00:36:9c:5a:88:d5:de:
                    39:c1:5c:8c:4e:78:72:f6:f2:d1:dd:e8:c2:5f:21:
                    41:56:a9:5a:f8:4f:e2:1f:54:9a:32:c3:2a:2e:ba:
                    1a:d2:05:14:2c:db:b7:94:05:71:2b:e1:27:85:4f:
                    b5:ff:d7:06:c0:62:ed:9e:90:3e:ba:f4:2e:6d:03:
                    e8:b6:3a:5f:f7:d6:9a:38:fa:30:78:b1:82:26:62:
                    3c:54:51:c7:10:7d:1a:1b:10:d6:bc:04:29:a8:2d:
                    a0:ed:75:3a:50:87:63:a2:4a:8e:f7:e5:cf:b2:b8:
                    7c:3c:40:d6:6c:e5:e2:dd:b8:c3:a2:6a:19:6f:82:
                    6f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4E:F6:42:A2:4F:70:10:03:52:D2:97:5C:6D:8C:00:8A:C1:87:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/1e605cc6-9ec0-36e0-8fd0-dd2740bc1e83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494/e9e262d0-3a64-402e-81e7-5b0829596494.crl

            X509v3 Authority Key Identifier:
                keyid:D2:1C:79:BE:61:34:D6:A4:48:63:EB:DD:04:A5:92:67:EB:E8:17:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e9e262d0-3a64-402e-81e7-5b0829596494.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6240:f000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:3c:fd:4b:13:22:ee:5b:9d:47:89:48:a2:31:eb:04:f9:38:
         40:a4:48:ce:0e:1a:d1:1c:55:2c:95:d9:16:e5:14:2a:9d:5a:
         a8:f9:56:ac:7d:c2:d9:03:19:f4:bc:8d:19:e3:77:dd:e9:19:
         44:dd:b0:55:5f:c0:fd:60:1c:e9:20:87:8f:ed:4e:f3:1e:31:
         8b:a8:aa:0d:77:3d:cb:69:9a:64:d8:59:3c:c1:67:f6:72:4e:
         ae:3f:19:ee:26:da:42:f0:af:90:f2:e3:00:55:a6:41:da:0a:
         3f:5c:55:7f:d7:42:d6:03:8b:f1:6b:d4:7b:76:24:a4:5c:62:
         dc:53:79:7e:96:ac:0e:1c:35:50:c6:0a:ae:2c:0a:32:c0:2c:
         b5:d1:09:2c:35:2e:8d:af:2e:24:bb:3b:54:fa:f1:6a:78:18:
         29:0e:1e:7e:3e:19:c7:0d:3b:e3:16:03:47:d2:ff:f1:d8:11:
         f7:fc:1c:80:80:0a:03:db:7a:55:a3:d6:38:5b:f6:6c:be:8e:
         0e:5b:53:46:79:52:3b:fb:f2:2f:6b:e9:ee:53:99:48:79:c3:
         65:9d:44:48:77:63:cb:d3:91:8e:0b:02:bd:09:31:cd:11:8f:
         7b:ae:eb:52:e1:43:23:41:f7:cc:7a:cf:ef:60:58:53:98:b2:
         94:ad:2c:82
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkmzsuwCuEcW1NwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTllMjYyZDAtM2E2NC00MDJlLTgxZTctNWIwODI5NTk2
NDk0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NWFiNjIxZjgtYmZmNC00NzUzLTlkMjctZDYwMmI1OWJjMDhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOUGLZxUH32Rk5Cbjpmf8liz/cmwwFW8f6J4
FxXDS48nGVluWlOM+WK9/09prnSzd5M8eKykXAgkhabRHpZ+I6e3vU11PXsoKZV1
q/iet1zP0jVBnVV0GO6HBHFxxHiYik74OISLHqgZHUHtM4a5TN5vs4FIKxpX2SuG
6mc3NgA2nFqI1d45wVyMTnhy9vLR3ejCXyFBVqla+E/iH1SaMsMqLroa0gUULNu3
lAVxK+EnhU+1/9cGwGLtnpA+uvQubQPotjpf99aaOPoweLGCJmI8VFHHEH0aGxDW
vAQpqC2g7XU6UIdjokqO9+XPsrh8PEDWbOXi3bjDomoZb4JvdwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHVO9kKiT3AQA1LSl1xtjACKwYevMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOWUy
NjJkMC0zYTY0LTQwMmUtODFlNy01YjA4Mjk1OTY0OTQvMWU2MDVjYzYtOWVjMC0z
NmUwLThmZDAtZGQyNzQwYmMxZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTllMjYyZDAtM2E2NC00MDJlLTgx
ZTctNWIwODI5NTk2NDk0L2U5ZTI2MmQwLTNhNjQtNDAyZS04MWU3LTViMDgyOTU5
NjQ5NC5jcmwwHwYDVR0jBBgwFoAU0hx5vmE01qRIY+vdBKWSZ+voF7AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOWUyNjJkMC0zYTY0LTQwMmUtODFlNy01YjA4
Mjk1OTY0OTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZiQPAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF48/UsTIu5bnUeJSKIx6wT5OECkSM4OGtEcVSyV2RblFCqdWqj5
Vqx9wtkDGfS8jRnjd93pGUTdsFVfwP1gHOkgh4/tTvMeMYuoqg13PctpmmTYWTzB
Z/ZyTq4/Ge4m2kLwr5Dy4wBVpkHaCj9cVX/XQtYDi/Fr1Ht2JKRcYtxTeX6WrA4c
NVDGCq4sCjLALLXRCSw1Lo2vLiS7O1T68Wp4GCkOHn4+GccNO+MWA0fS//HYEff8
HICACgPbelWj1jhb9my+jg5bU0Z5Ujv78i9r6e5TmUh5w2WdREh3Y8vTkY4LAr0J
Mc0Rj3uu61LhQyNB98x6z+9gWFOYspStLII=
-----END CERTIFICATE-----
Generated at Wed Jul 29 16:12:19 2026 by rpki-client