Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa
File:                     30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa (raw, json)
Hash identifier:          QN0fjyz0takLpXS7QGwNPdFYBj77KPustL8HIN2bRz8=
Subject key identifier:   A8:32:51:1A:79:ED:C7:43:A2:74:4D:9D:A7:CB:60:37:ED:6C:A9:00
Certificate issuer:       /CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16
Certificate serial:       010D0C9F4328584EA78FFAD01311B45A59B2A800
Authority key identifier: 04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33501
IP address blocks:        2607:19c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:fa:d0:13:11:b4:5a:59:b2:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c0344f5e-065b-48f3-ad02-c4397896e54b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:00:bb:2d:29:f0:4c:cc:87:fd:f4:cc:96:
                    c1:30:6b:ff:14:c9:ac:bd:e9:4d:a6:a0:b1:b6:e2:
                    c9:54:a7:8e:e8:c6:92:01:c3:a7:7f:ba:5f:a1:73:
                    a0:9f:e1:5e:04:98:1b:d8:bf:ca:a6:2b:ba:1b:00:
                    53:b5:d4:2f:11:0b:7c:0b:d0:5f:f6:5c:2d:56:d5:
                    db:84:74:2b:fe:8e:0f:04:9f:15:1d:9f:ee:39:53:
                    6c:88:c9:e1:1b:5a:aa:50:36:fa:70:06:72:6e:ba:
                    fc:65:9d:a4:f5:f3:ff:e1:de:51:14:59:e3:cc:a6:
                    68:24:a1:f3:b3:7d:52:70:be:7a:49:95:9b:8c:48:
                    4a:f6:ce:43:90:c8:2e:72:15:6a:86:d4:55:88:a9:
                    a7:31:2e:41:30:ea:4a:d2:e1:51:07:34:fb:54:1c:
                    43:34:9c:b6:ce:eb:a6:a5:8e:cf:e3:98:21:29:2a:
                    5c:61:e0:1a:f6:04:37:34:04:5b:0a:79:0d:83:4f:
                    37:c6:b4:7d:a8:6f:38:f4:6e:40:59:54:e6:ec:a5:
                    4a:a2:4a:f4:90:f2:45:31:10:1f:e5:3d:70:4f:3a:
                    d1:fa:f8:b8:cf:35:a7:6a:a4:5b:f4:68:2c:04:e7:
                    2e:f1:bc:2b:ac:c0:26:19:e1:aa:a1:4b:15:0d:28:
                    fc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:32:51:1A:79:ED:C7:43:A2:74:4D:9D:A7:CB:60:37:ED:6C:A9:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/30a4a3af-0d7c-3196-8c2b-1ff6e8fe81e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.crl

            X509v3 Authority Key Identifier:
                keyid:04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:19c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:5e:6c:3e:17:69:d1:7c:b2:f8:2e:69:5a:40:96:ca:c3:cd:
         67:7c:e4:48:54:3a:a1:73:f7:54:a5:24:36:d2:9e:f2:e5:c5:
         b2:b3:00:ac:9a:28:3d:14:79:b7:26:de:d3:85:44:5d:88:16:
         0a:c3:69:c9:bb:68:e4:6d:bf:fd:aa:1a:43:c9:cc:38:e4:08:
         3b:9a:c9:89:1f:a2:fe:67:e5:ff:7d:f9:e6:04:25:97:b1:b4:
         6a:65:90:6d:b6:cc:d0:72:f9:cb:ea:8d:d4:aa:bc:01:38:83:
         63:21:29:11:4f:32:04:5f:11:94:58:7a:3b:82:46:82:c1:75:
         bc:71:1b:b4:e3:08:65:45:b7:aa:b6:11:80:2a:d5:96:88:b5:
         07:2a:6f:53:b6:e4:4d:45:00:aa:f7:5e:a5:61:f8:11:04:4a:
         25:74:49:77:6f:69:e3:e1:ae:55:77:5f:ce:43:21:1e:55:2b:
         62:fc:8c:d2:40:ef:d8:e5:40:d7:ed:37:e1:53:ee:af:04:b6:
         d6:51:f2:e8:2b:d3:b7:79:10:ad:af:1b:f3:12:5c:3c:ef:a3:
         0c:ab:ce:77:fa:49:ac:30:3d:6b:9b:1e:cf:da:0a:08:1a:2a:
         4c:fb:5f:56:f1:a8:54:9a:f1:bb:a7:21:3c:28:f5:2c:d2:82:
         8a:7c:c3:5e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nj/rQExG0WlmyqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjkzYmY3NzItYjFjMi00ZjJmLTk3NmMtNTI4YjZmMWQ4
ZTE2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YzAzNDRmNWUtMDY1Yi00OGYzLWFkMDItYzQzOTc4OTZlNTRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ4Auy0p8EzMh/30zJbBMGv/FMmsvelNpqCx
tuLJVKeO6MaSAcOnf7pfoXOgn+FeBJgb2L/Kpiu6GwBTtdQvEQt8C9Bf9lwtVtXb
hHQr/o4PBJ8VHZ/uOVNsiMnhG1qqUDb6cAZybrr8ZZ2k9fP/4d5RFFnjzKZoJKHz
s31ScL56SZWbjEhK9s5DkMguchVqhtRViKmnMS5BMOpK0uFRBzT7VBxDNJy2zuum
pY7P45ghKSpcYeAa9gQ3NARbCnkNg083xrR9qG849G5AWVTm7KVKokr0kPJFMRAf
5T1wTzrR+vi4zzWnaqRb9GgsBOcu8bwrrMAmGeGqoUsVDSj8SwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKgyURp57cdDonRNnafLYDftbKkAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82OTNi
Zjc3Mi1iMWMyLTRmMmYtOTc2Yy01MjhiNmYxZDhlMTYvMzBhNGEzYWYtMGQ3Yy0z
MTk2LThjMmItMWZmNmU4ZmU4MWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjkzYmY3NzItYjFjMi00ZjJmLTk3
NmMtNTI4YjZmMWQ4ZTE2LzY5M2JmNzcyLWIxYzItNGYyZi05NzZjLTUyOGI2ZjFk
OGUxNi5jcmwwHwYDVR0jBBgwFoAUBDuRJkNa5T25ITW/GMY20NqdQacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82OTNiZjc3Mi1iMWMyLTRmMmYtOTc2Yy01Mjhi
NmYxZDhlMTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcZwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBUXmw+F2nRfLL4LmlaQJbKw81nfORIVDqhc/dUpSQ20p7y5cWyswCs
mig9FHm3Jt7ThURdiBYKw2nJu2jkbb/9qhpDycw45Ag7msmJH6L+Z+X/ffnmBCWX
sbRqZZBttszQcvnL6o3UqrwBOINjISkRTzIEXxGUWHo7gkaCwXW8cRu04whlRbeq
thGAKtWWiLUHKm9TtuRNRQCq916lYfgRBEoldEl3b2nj4a5Vd1/OQyEeVSti/IzS
QO/Y5UDX7TfhU+6vBLbWUfLoK9O3eRCtrxvzElw876MMq853+kmsMD1rmx7P2goI
GipM+19W8ahUmvG7pyE8KPUs0oKKfMNe
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:43:46 2026 by rpki-client