Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/833420d9-77fc-37d5-8ecd-825140380577.roa
File:                     833420d9-77fc-37d5-8ecd-825140380577.roa (raw, json)
Hash identifier:          vJNN3npl+fXexU5M1ZnLkuX7Q9K/4Mgb/fKVYMznnTM=
Subject key identifier:   79:F2:E9:A5:45:0E:61:C1:95:A1:3E:AD:03:1F:7F:E0:84:C0:13:A0
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584E9EAFEC1186AE802CD85B1E42
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/833420d9-77fc-37d5-8ecd-825140380577.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     26548
IP address blocks:        2604:7a80:1000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:ec:11:86:ae:80:2c:d8:5b:1e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=a1af6f46-fa93-4ac4-9e5c-7b098dcdff79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4a:17:07:eb:6e:54:6d:32:3e:ce:9e:12:1c:
                    bd:be:5b:d0:41:3b:4a:43:7a:90:40:7a:5d:de:01:
                    a9:c6:1e:f9:0a:ec:6e:6f:b7:ad:6e:cd:3c:e4:ce:
                    94:b6:0b:12:0f:f4:44:cd:dd:0b:f9:31:c4:58:63:
                    5e:dc:99:c3:ec:74:63:d7:f6:f7:87:f9:49:72:0d:
                    ae:ad:a5:b5:82:6a:db:a5:42:61:f2:fb:c5:45:37:
                    ed:64:a2:16:8a:5b:90:dc:3a:14:d3:18:a0:84:94:
                    c7:c3:aa:51:23:c5:4f:1a:00:25:86:31:38:81:52:
                    2d:b7:d2:fe:43:f3:de:97:c3:d4:81:1d:dc:4a:51:
                    b6:94:71:09:44:00:d9:7f:54:43:03:2e:6d:8d:0e:
                    a2:50:92:67:87:4c:55:4b:e8:f8:5f:57:9f:e1:77:
                    c8:b5:ee:e9:01:c3:e9:97:67:ed:43:29:94:d6:cb:
                    50:9b:4b:6a:f8:17:91:b9:33:2d:fd:31:4d:7f:cf:
                    d7:7c:01:7a:aa:83:66:ef:e4:80:b0:1e:a2:c4:af:
                    bc:4a:07:43:2a:e0:43:1d:6d:27:53:28:89:fa:b9:
                    7b:f0:96:c3:21:55:0b:cd:6c:67:89:00:68:71:f4:
                    d9:32:07:b0:fd:bb:4b:c6:85:2f:00:cc:3a:77:75:
                    cc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F2:E9:A5:45:0E:61:C1:95:A1:3E:AD:03:1F:7F:E0:84:C0:13:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/833420d9-77fc-37d5-8ecd-825140380577.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7a80:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ba:4b:16:9e:79:c0:a2:30:24:e3:a8:66:01:da:75:b1:5e:
         4a:94:75:19:ff:13:51:b2:0c:81:47:e2:b8:af:07:aa:26:5a:
         26:4f:f0:50:79:bb:76:c7:e7:ad:dc:7b:1b:5b:bd:76:83:58:
         19:dd:48:7b:64:54:47:fd:8c:4d:57:1e:6a:55:19:b9:48:b7:
         65:58:5d:96:97:a6:4a:b1:ce:ae:3f:16:06:a2:1e:2a:1b:bd:
         3b:e2:c3:b7:ad:ed:8e:53:bc:6d:1e:74:37:4c:60:e1:bd:c6:
         11:04:bc:c4:22:89:f3:fd:77:01:ba:76:35:a5:76:1e:59:32:
         63:61:c3:76:6b:49:f4:49:f9:03:16:0e:54:78:7f:1d:77:23:
         13:e6:0b:e6:d8:04:94:32:d0:84:41:01:de:3d:96:c7:b8:d5:
         00:a8:07:d5:47:ae:ca:e2:b8:c1:92:6e:11:d8:de:61:3f:af:
         ef:d1:42:ad:c6:1b:80:23:0d:41:af:e6:e1:75:8f:78:8d:0c:
         58:db:bf:e7:e5:3a:23:99:61:c8:a5:12:dd:47:f6:ac:37:e7:
         19:7d:07:aa:65:08:84:ea:be:d7:99:ea:e6:ce:d2:04:a8:26:
         35:1a:15:2a:4b:ea:96:79:ce:25:90:fc:2a:e6:81:4e:7c:bf:
         14:b6:5c:29
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6er+wRhq6ALNhbHkIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz
MmIzMB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk
YTFhZjZmNDYtZmE5My00YWM0LTllNWMtN2IwOThkY2RmZjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEoXB+tuVG0yPs6eEhy9vlvQQTtKQ3qQQHpd
3gGpxh75Cuxub7etbs085M6UtgsSD/REzd0L+THEWGNe3JnD7HRj1/b3h/lJcg2u
raW1gmrbpUJh8vvFRTftZKIWiluQ3DoU0xighJTHw6pRI8VPGgAlhjE4gVItt9L+
Q/Pel8PUgR3cSlG2lHEJRADZf1RDAy5tjQ6iUJJnh0xVS+j4X1ef4XfIte7pAcPp
l2ftQymU1stQm0tq+BeRuTMt/TFNf8/XfAF6qoNm7+SAsB6ixK+8SgdDKuBDHW0n
UyiJ+rl78JbDIVULzWxniQBocfTZMgew/btLxoUvAMw6d3XMtwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHny6aVFDmHBlaE+rQMff+CEwBOgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5
YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvODMzNDIwZDktNzdmYy0z
N2Q1LThlY2QtODI1MTQwMzgwNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0
ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx
MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh
ZjhjMTMyYjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgR6gBAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJrpLFp55wKIwJOOoZgHadbFeSpR1Gf8TUbIMgUfiuK8HqiZaJk/w
UHm7dsfnrdx7G1u9doNYGd1Ie2RUR/2MTVcealUZuUi3ZVhdlpemSrHOrj8WBqIe
Khu9O+LDt63tjlO8bR50N0xg4b3GEQS8xCKJ8/13Abp2NaV2HlkyY2HDdmtJ9En5
AxYOVHh/HXcjE+YL5tgElDLQhEEB3j2Wx7jVAKgH1UeuyuK4wZJuEdjeYT+v79FC
rcYbgCMNQa/m4XWPeI0MWNu/5+U6I5lhyKUS3Uf2rDfnGX0HqmUIhOq+15nq5s7S
BKgmNRoVKkvqlnnOJZD8KuaBTny/FLZcKQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:44:44 2026 by rpki-client