Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/8447c4a2-c4ab-3b5e-9bc5-2908a1e396e8.roa
File:                     8447c4a2-c4ab-3b5e-9bc5-2908a1e396e8.roa (raw, json)
Hash identifier:          IuuhavbAfRm7MWhq69DM+MbEN1SyWlaOwzaOwz6VllU=
Subject key identifier:   B5:27:DE:C1:88:F0:71:EC:9E:F4:78:F2:AA:46:5A:2A:CF:0F:8F:99
Certificate issuer:       /CN=75d2cba5-acec-4ba8-ade7-0f83a6aefd59
Certificate serial:       010D0C9F4328584E1E4452F090B07AAAE2A5A310
Authority key identifier: 0B:42:83:AD:39:29:A6:89:DF:8C:7F:D7:13:47:46:6F:8F:CB:EF:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/8447c4a2-c4ab-3b5e-9bc5-2908a1e396e8.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     23077
IP address blocks:        2602:f9aa::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:52:f0:90:b0:7a:aa:e2:a5:a3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d2cba5-acec-4ba8-ade7-0f83a6aefd59
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=78adc27a-84fe-4a48-acfa-86f6e6e29125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:af:e0:fd:b6:54:c1:d5:f0:36:28:68:85:3d:
                    38:62:cb:3d:bf:64:9d:47:13:1a:c1:0d:62:68:78:
                    95:cd:be:92:e6:ad:cd:f9:b4:8f:eb:d4:da:e6:0d:
                    b8:05:b4:54:5a:43:50:7e:77:48:56:ed:69:da:16:
                    6d:63:0f:c2:cd:d3:37:98:57:2f:fe:3e:76:1d:1e:
                    ab:b5:40:94:78:6e:b6:f8:d9:23:c0:ae:9d:17:54:
                    d4:75:94:1f:06:d6:05:a1:7e:8b:00:cf:f0:6a:b6:
                    38:cc:c1:90:3b:8f:7d:34:38:cd:fe:e4:4a:e8:50:
                    da:2e:c3:39:24:44:01:9f:cf:04:28:81:5c:a1:c1:
                    c5:5f:f2:4c:fa:7f:7e:1b:ff:3d:3d:0b:9a:33:a2:
                    f4:31:d7:47:78:e9:5c:12:44:df:ab:ec:7a:d0:82:
                    75:4f:14:42:f0:f7:6a:66:c5:68:ab:42:6e:1e:2a:
                    4c:96:e4:d5:f4:d8:db:c6:81:90:f9:26:b4:a1:8f:
                    c1:b5:3d:3d:66:38:43:92:dd:95:b5:c8:cd:62:22:
                    58:db:82:3b:d0:6a:3d:98:a7:7f:07:8b:2b:3d:c2:
                    b3:ad:54:99:e8:25:c2:5d:32:53:1c:56:cd:06:81:
                    25:15:2e:fc:2c:b3:6a:e6:e8:db:13:fd:41:ec:5c:
                    76:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:27:DE:C1:88:F0:71:EC:9E:F4:78:F2:AA:46:5A:2A:CF:0F:8F:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/8447c4a2-c4ab-3b5e-9bc5-2908a1e396e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.crl

            X509v3 Authority Key Identifier:
                keyid:0B:42:83:AD:39:29:A6:89:DF:8C:7F:D7:13:47:46:6F:8F:CB:EF:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9aa::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:1b:b9:03:2f:95:51:c3:41:29:54:4e:5a:f8:67:81:91:4f:
         16:12:09:61:10:cc:eb:ea:38:8d:90:ac:e7:9a:74:62:ca:3d:
         b3:d5:db:89:16:8c:95:5a:4c:08:d5:cd:f0:84:c0:58:ab:e0:
         23:0f:bd:e8:72:19:df:87:6f:66:cb:12:96:2f:db:24:1b:95:
         fc:66:9b:0f:b9:52:79:84:a0:f3:b3:85:86:74:db:d2:17:06:
         06:06:64:d3:3c:08:fc:00:68:22:8c:5e:54:e7:f4:ae:38:6d:
         6a:00:bf:5b:27:dc:cf:78:d0:57:53:21:94:9e:25:10:71:ca:
         ef:ae:6f:8b:6d:26:06:7c:6b:85:84:f2:77:fa:33:36:ca:92:
         0c:9f:c7:f3:c7:5f:de:9f:7b:2c:65:be:1d:53:02:54:2d:50:
         84:be:9d:88:be:11:7d:36:13:b8:32:01:e6:82:0f:d5:c4:d6:
         fb:68:7c:71:dc:33:b0:d9:eb:24:40:19:34:86:c9:19:d9:b1:
         b6:47:0d:58:d3:1b:35:d3:be:4e:b2:16:ba:ab:2e:73:58:01:
         8c:43:f2:02:b3:4a:a3:b8:a5:fe:9f:d3:d7:73:72:8e:dc:8c:
         06:cb:14:54:82:ef:9d:30:0b:ef:ec:ab:06:ef:ab:24:af:b3:
         a2:42:3f:6c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4eRFLwkLB6quKloxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVkMmNiYTUtYWNlYy00YmE4LWFkZTctMGY4M2E2YWVm
ZDU5MB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk
NzhhZGMyN2EtODRmZS00YTQ4LWFjZmEtODZmNmU2ZTI5MTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla/g/bZUwdXwNihohT04Yss9v2SdRxMawQ1i
aHiVzb6S5q3N+bSP69Ta5g24BbRUWkNQfndIVu1p2hZtYw/CzdM3mFcv/j52HR6r
tUCUeG62+NkjwK6dF1TUdZQfBtYFoX6LAM/warY4zMGQO499NDjN/uRK6FDaLsM5
JEQBn88EKIFcocHFX/JM+n9+G/89PQuaM6L0MddHeOlcEkTfq+x60IJ1TxRC8Pdq
ZsVoq0JuHipMluTV9NjbxoGQ+Sa0oY/BtT09ZjhDkt2VtcjNYiJY24I70Go9mKd/
B4srPcKzrVSZ6CXCXTJTHFbNBoElFS78LLNq5ujbE/1B7Fx2PQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLUn3sGI8HHsnvR48qpGWirPD4+ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83NWQy
Y2JhNS1hY2VjLTRiYTgtYWRlNy0wZjgzYTZhZWZkNTkvODQ0N2M0YTItYzRhYi0z
YjVlLTliYzUtMjkwOGExZTM5NmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzVkMmNiYTUtYWNlYy00YmE4LWFk
ZTctMGY4M2E2YWVmZDU5Lzc1ZDJjYmE1LWFjZWMtNGJhOC1hZGU3LTBmODNhNmFl
ZmQ1OS5jcmwwHwYDVR0jBBgwFoAUC0KDrTkpponfjH/XE0dGb4/L7/UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83NWQyY2JhNS1hY2VjLTRiYTgtYWRlNy0wZjgz
YTZhZWZkNTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5qgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAdBu5Ay+VUcNBKVROWvhngZFPFhIJYRDM6+o4jZCs55p0Yso9s9Xb
iRaMlVpMCNXN8ITAWKvgIw+96HIZ34dvZssSli/bJBuV/GabD7lSeYSg87OFhnTb
0hcGBgZk0zwI/ABoIoxeVOf0rjhtagC/Wyfcz3jQV1MhlJ4lEHHK765vi20mBnxr
hYTyd/ozNsqSDJ/H88df3p97LGW+HVMCVC1QhL6diL4RfTYTuDIB5oIP1cTW+2h8
cdwzsNnrJEAZNIbJGdmxtkcNWNMbNdO+TrIWuqsuc1gBjEPyArNKo7il/p/T13Ny
jtyMBssUVILvnTAL7+yrBu+rJK+zokI/bA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:35:51 2026 by rpki-client