Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/09c7597f-fdd5-3742-aa9a-6a360b4cab15.roa
File:                     09c7597f-fdd5-3742-aa9a-6a360b4cab15.roa (raw, json)
Hash identifier:          +xjcfbXI5pxGAb5H/kq+XhOgP6lK3ZES9D0fByBAp3s=
Subject key identifier:   63:0E:DD:CF:4B:53:86:99:24:31:F5:91:41:A8:AE:2F:7B:01:2C:1A
Certificate issuer:       /CN=223ca9d9-14f2-4824-b1ba-16bc030ccf15
Certificate serial:       010D0C9F4328584EA7946EECEA4A6789FDFAB800
Authority key identifier: 6A:78:B9:AC:DB:19:7E:87:5D:2E:D8:52:E1:25:FE:21:99:B1:D3:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/09c7597f-fdd5-3742-aa9a-6a360b4cab15.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     399078
IP address blocks:        2606:42c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/223ca9d9-14f2-4824-b1ba-16bc030ccf15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/223ca9d9-14f2-4824-b1ba-16bc030ccf15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:6e:ec:ea:4a:67:89:fd:fa:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=223ca9d9-14f2-4824-b1ba-16bc030ccf15
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=36d13fc4-d847-4dc7-a12d-35228a1ee9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a8:c5:45:78:8d:b6:2b:9e:e6:5e:a4:b1:54:
                    59:e4:af:7b:02:72:e6:06:d4:61:9a:cf:b4:ea:70:
                    0e:59:6c:5d:a1:aa:5f:b0:6a:e5:08:59:39:90:61:
                    ee:c6:14:8f:37:9d:a6:58:e1:6e:0a:7c:ec:6e:8c:
                    fd:42:15:3d:fd:b1:77:25:d6:24:66:e8:43:8b:81:
                    21:47:32:36:53:ee:3d:ba:76:10:0d:e0:50:86:94:
                    b2:09:ff:b0:32:10:29:14:28:0b:f0:bc:cb:dc:d8:
                    30:35:13:6e:ef:96:9a:95:35:ea:7a:37:df:cb:d3:
                    66:a2:6a:46:49:1d:fd:43:b5:02:61:91:4e:75:23:
                    e2:71:ff:c8:f7:61:8e:2e:b7:ca:e6:1b:3a:bf:4a:
                    21:01:23:17:47:31:07:8d:d8:b7:0a:11:49:05:48:
                    cc:6c:56:b2:99:52:0b:bf:34:60:2c:19:63:6c:71:
                    d4:f4:60:a9:d4:62:ee:f8:37:87:e8:39:84:49:ac:
                    09:42:ad:fe:06:53:44:40:02:a5:74:ff:2a:15:68:
                    cf:b0:e5:78:64:11:34:2a:99:8c:6c:e2:06:47:60:
                    c4:a8:c4:2a:e5:fe:ea:c6:71:62:2b:42:45:ab:eb:
                    98:2a:ba:b1:0b:0d:5f:c6:fa:18:af:75:9a:08:7a:
                    49:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0E:DD:CF:4B:53:86:99:24:31:F5:91:41:A8:AE:2F:7B:01:2C:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/09c7597f-fdd5-3742-aa9a-6a360b4cab15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/223ca9d9-14f2-4824-b1ba-16bc030ccf15.crl

            X509v3 Authority Key Identifier:
                keyid:6A:78:B9:AC:DB:19:7E:87:5D:2E:D8:52:E1:25:FE:21:99:B1:D3:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:42c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:84:9f:1e:98:fd:ba:2a:71:21:e3:63:27:1c:fb:60:e1:22:
         9a:e6:c2:75:72:e6:14:60:a5:11:4a:dd:00:b5:2b:8f:51:60:
         70:63:da:ba:1a:6b:37:31:d1:a3:2f:4e:ef:1b:23:d8:6d:7b:
         46:df:56:9b:2f:45:f2:1e:a2:c2:c1:47:b1:05:b5:2e:87:99:
         bb:8c:dd:27:62:e4:12:1e:54:ad:4f:6d:fc:35:3a:b7:15:8e:
         55:14:af:0b:3f:88:1b:56:34:7a:03:4b:ec:89:82:30:c1:32:
         1f:20:c0:6e:01:6b:2d:e6:29:5d:6e:5b:7f:d8:b3:26:7f:78:
         18:7e:a9:28:ba:c5:63:c0:ac:60:9d:dd:b1:42:dc:ba:5c:13:
         8c:be:e4:c4:ad:52:ad:56:84:8c:84:d9:54:24:60:ae:f2:b5:
         78:f7:82:fe:86:f0:0d:df:22:72:8a:18:30:7f:cf:37:8a:d6:
         1c:51:51:c2:ea:a2:06:59:99:be:2b:30:3a:d4:f1:44:18:de:
         69:d0:04:f5:8f:8f:5d:9b:49:14:16:a5:92:2e:c1:da:c2:a0:
         d0:64:59:49:12:c5:b6:69:60:51:1b:05:4e:42:ef:54:7a:27:
         ea:bc:f2:e5:9e:9f:15:46:3c:1d:3e:22:ae:86:f5:d9:90:2d:
         be:66:d5:d7
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nlG7s6kpnif36uAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjIzY2E5ZDktMTRmMi00ODI0LWIxYmEtMTZiYzAzMGNj
ZjE1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MzZkMTNmYzQtZDg0Ny00ZGM3LWExMmQtMzUyMjhhMWVlOWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqjFRXiNtiue5l6ksVRZ5K97AnLmBtRhms+0
6nAOWWxdoapfsGrlCFk5kGHuxhSPN52mWOFuCnzsboz9QhU9/bF3JdYkZuhDi4Eh
RzI2U+49unYQDeBQhpSyCf+wMhApFCgL8LzL3NgwNRNu75aalTXqejffy9NmompG
SR39Q7UCYZFOdSPicf/I92GOLrfK5hs6v0ohASMXRzEHjdi3ChFJBUjMbFaymVIL
vzRgLBljbHHU9GCp1GLu+DeH6DmESawJQq3+BlNEQAKldP8qFWjPsOV4ZBE0KpmM
bOIGR2DEqMQq5f7qxnFiK0JFq+uYKrqxCw1fxvoYr3WaCHpJmQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGMO3c9LU4aZJDH1kUGori97ASwaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMjNj
YTlkOS0xNGYyLTQ4MjQtYjFiYS0xNmJjMDMwY2NmMTUvMDljNzU5N2YtZmRkNS0z
NzQyLWFhOWEtNmEzNjBiNGNhYjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjIzY2E5ZDktMTRmMi00ODI0LWIx
YmEtMTZiYzAzMGNjZjE1LzIyM2NhOWQ5LTE0ZjItNDgyNC1iMWJhLTE2YmMwMzBj
Y2YxNS5jcmwwHwYDVR0jBBgwFoAUani5rNsZfoddLthS4SX+IZmx0+MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMjNjYTlkOS0xNGYyLTQ4MjQtYjFiYS0xNmJj
MDMwY2NmMTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZCwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAYhJ8emP26KnEh42MnHPtg4SKa5sJ1cuYUYKURSt0AtSuPUWBwY9q6
Gms3MdGjL07vGyPYbXtG31abL0XyHqLCwUexBbUuh5m7jN0nYuQSHlStT238NTq3
FY5VFK8LP4gbVjR6A0vsiYIwwTIfIMBuAWst5ildblt/2LMmf3gYfqkousVjwKxg
nd2xQty6XBOMvuTErVKtVoSMhNlUJGCu8rV494L+hvAN3yJyihgwf883itYcUVHC
6qIGWZm+KzA61PFEGN5p0AT1j49dm0kUFqWSLsHawqDQZFlJEsW2aWBRGwVOQu9U
eifqvPLlnp8VRjwdPiKuhvXZkC2+ZtXX
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:36:44 2026 by rpki-client