Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/dad3a400-0e8e-36d0-8c10-a806d8dab007.roa
File:                     dad3a400-0e8e-36d0-8c10-a806d8dab007.roa (raw, json)
Hash identifier:          lLAZ4BhfmuiAG9nTab/Jvr8kqqVzk4BqE02hQJ1xmdE=
Subject key identifier:   58:AA:61:B1:32:5B:FD:F8:BE:AF:0E:3E:10:00:C2:40:08:D2:4C:5E
Certificate issuer:       /CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e
Certificate serial:       010D0C9F4328584EA7941421CF613A7C0079DA00
Authority key identifier: 8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/dad3a400-0e8e-36d0-8c10-a806d8dab007.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     209261
IP address blocks:        2606:fdc0::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:14:21:cf:61:3a:7c:00:79:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7ff5cc-e8ae-40f8-bcb9-390810eb821e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b217bd1d-c768-4049-b966-72006abbbd00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b9:e1:a5:d1:ec:64:12:5c:bf:e7:1f:69:e3:
                    08:a3:18:77:c6:46:31:2d:da:24:89:48:34:52:6c:
                    b3:8a:ca:0f:9d:03:10:ea:d5:cd:c3:61:79:64:90:
                    02:b2:77:bc:f9:71:53:38:2f:bb:fc:e8:9f:16:40:
                    83:45:b8:83:33:88:54:d9:41:d8:57:15:4e:ec:11:
                    d6:70:c4:2d:c4:7c:71:46:5e:1a:f7:bf:7c:dc:83:
                    d7:b5:3d:9e:69:8c:2c:6c:b1:7f:ee:7a:37:42:1d:
                    bc:03:cb:c5:b6:8e:13:46:99:0a:88:9f:47:38:ba:
                    d4:08:ce:5c:f2:8e:8a:6b:00:69:69:ea:cd:c5:3d:
                    01:7d:8d:48:71:fa:80:63:39:01:24:e9:f1:de:3b:
                    33:7a:b6:c5:e7:27:28:f0:0d:4c:eb:f3:35:e4:cb:
                    6f:d7:1f:25:4f:4d:16:bc:d0:84:05:6d:15:84:f7:
                    d0:1b:9c:3e:89:bc:c1:42:d5:81:16:c6:c7:d3:2e:
                    0d:bd:67:2a:6d:39:d8:db:e9:1d:58:28:4c:e1:97:
                    92:4e:e3:52:17:c9:62:e5:8e:de:14:a0:87:ae:45:
                    d8:92:ea:03:b5:72:b6:ad:a2:2f:13:2a:54:7a:93:
                    3e:cf:77:a5:bd:a0:27:b8:f5:61:eb:c5:1a:a1:7d:
                    ee:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AA:61:B1:32:5B:FD:F8:BE:AF:0E:3E:10:00:C2:40:08:D2:4C:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/dad3a400-0e8e-36d0-8c10-a806d8dab007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.crl

            X509v3 Authority Key Identifier:
                keyid:8D:CA:88:55:22:9C:3A:1D:A0:17:3F:5E:36:B1:D2:A7:0D:2F:60:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1a7ff5cc-e8ae-40f8-bcb9-390810eb821e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fdc0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ae:d8:7b:43:61:3d:f5:25:63:13:e7:46:e9:6c:33:39:33:
         a8:45:d0:8b:a0:42:35:21:51:06:01:37:e1:ec:4c:67:01:83:
         75:9b:cf:97:d8:c1:b3:c2:b3:e7:d9:0b:b7:14:98:7b:41:41:
         a8:d2:65:2c:6e:33:1a:24:c3:51:51:43:7f:ab:cc:2a:f1:bd:
         7e:23:86:d9:a6:4c:d8:50:b5:e6:d5:cc:d7:2e:a5:37:88:19:
         3d:5f:4f:40:eb:c7:8e:4f:5c:eb:04:f3:a0:59:c5:ff:00:c9:
         03:38:cc:b7:22:f6:11:b4:6e:ef:89:42:47:1a:86:86:b0:5d:
         82:47:b3:49:cf:4b:7b:11:9e:bc:2d:b5:30:65:e5:7d:21:02:
         60:e6:6f:bc:ab:28:82:eb:79:3e:1f:57:1a:41:a1:a1:4b:7a:
         d0:99:f9:e8:90:4b:fc:38:6c:84:a8:6e:dd:77:4b:4e:08:b7:
         83:e6:2b:b4:ca:39:a1:59:83:cf:78:27:15:9c:f2:9d:6c:e2:
         e2:04:4c:11:df:07:5e:e6:87:30:30:9d:ff:fc:38:d4:b5:33:
         d3:d0:47:6a:75:c4:84:65:45:40:a2:4f:21:b1:67:0a:d2:20:
         b7:ff:59:6d:8f:a5:ae:18:97:28:3c:c3:37:5b:1d:42:50:9d:
         08:2f:2f:d4
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6nlBQhz2E6fAB52gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWE3ZmY1Y2MtZThhZS00MGY4LWJjYjktMzkwODEwZWI4
MjFlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YjIxN2JkMWQtYzc2OC00MDQ5LWI5NjYtNzIwMDZhYmJiZDAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7nhpdHsZBJcv+cfaeMIoxh3xkYxLdokiUg0
UmyzisoPnQMQ6tXNw2F5ZJACsne8+XFTOC+7/OifFkCDRbiDM4hU2UHYVxVO7BHW
cMQtxHxxRl4a97983IPXtT2eaYwsbLF/7no3Qh28A8vFto4TRpkKiJ9HOLrUCM5c
8o6KawBpaerNxT0BfY1IcfqAYzkBJOnx3jszerbF5yco8A1M6/M15Mtv1x8lT00W
vNCEBW0VhPfQG5w+ibzBQtWBFsbH0y4NvWcqbTnY2+kdWChM4ZeSTuNSF8li5Y7e
FKCHrkXYkuoDtXK2raIvEypUepM+z3elvaAnuPVh68UaoX3u2wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFiqYbEyW/34vq8OPhAAwkAI0kxeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdm
ZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4MTBlYjgyMWUvZGFkM2E0MDAtMGU4ZS0z
NmQwLThjMTAtYTgwNmQ4ZGFiMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWE3ZmY1Y2MtZThhZS00MGY4LWJj
YjktMzkwODEwZWI4MjFlLzFhN2ZmNWNjLWU4YWUtNDBmOC1iY2I5LTM5MDgxMGVi
ODIxZS5jcmwwHwYDVR0jBBgwFoAUjcqIVSKcOh2gFz9eNrHSpw0vYCYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xYTdmZjVjYy1lOGFlLTQwZjgtYmNiOS0zOTA4
MTBlYjgyMWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgb9wAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAUq7Ye0NhPfUlYxPnRulsMzkzqEXQi6BCNSFRBgE34exMZwGDdZvP
l9jBs8Kz59kLtxSYe0FBqNJlLG4zGiTDUVFDf6vMKvG9fiOG2aZM2FC15tXM1y6l
N4gZPV9PQOvHjk9c6wTzoFnF/wDJAzjMtyL2EbRu74lCRxqGhrBdgkezSc9LexGe
vC21MGXlfSECYOZvvKsogut5Ph9XGkGhoUt60Jn56JBL/DhshKhu3XdLTgi3g+Yr
tMo5oVmDz3gnFZzynWzi4gRMEd8HXuaHMDCd//w41LUz09BHanXEhGVFQKJPIbFn
CtIgt/9ZbY+lrhiXKDzDN1sdQlCdCC8v1A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:30:14 2026 by rpki-client