Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/072f8713-d6b1-3633-b393-407d3f1fb9e4.roa
File:                     072f8713-d6b1-3633-b393-407d3f1fb9e4.roa (raw, json)
Hash identifier:          vWhetAwhNJ2yZ0HQEpN1WHo9Zhg24/o7+Zj8fzbCvAc=
Subject key identifier:   88:47:04:CC:15:83:CC:34:C1:89:B8:CC:97:EA:7D:D1:0E:E4:E3:8C
Certificate issuer:       /CN=badf1586-901d-41a7-b0f3-521998d53931
Certificate serial:       010D0C9F4328584EA7945A7AEE0D6FFB255D25C0
Authority key identifier: 17:DD:BE:D5:1B:27:91:56:B0:48:C7:7E:3D:0E:D9:4F:FA:37:AB:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/072f8713-d6b1-3633-b393-407d3f1fb9e4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401661
IP address blocks:        2604:be0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:5a:7a:ee:0d:6f:fb:25:5d:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=badf1586-901d-41a7-b0f3-521998d53931
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=06ed3794-2202-41a0-a380-2bc41142db98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0a:57:05:20:eb:2b:d9:f0:47:fe:5c:f6:d5:
                    f1:2a:2a:28:e8:a9:8e:16:da:3f:48:4d:68:06:76:
                    0a:e4:da:94:57:04:b1:be:7b:12:03:57:2c:d1:7b:
                    46:10:4d:75:f3:56:0c:42:0a:72:f4:8b:83:9d:0d:
                    6b:1a:ca:46:5a:cd:06:00:be:46:3d:7a:4f:00:99:
                    f0:68:84:cd:97:85:4a:ab:0d:64:81:e1:23:05:ff:
                    b6:f8:27:34:1b:39:02:bb:cd:36:82:56:3c:1b:4d:
                    87:e9:bd:66:8b:26:61:6d:5c:21:a6:71:d4:b8:8d:
                    43:17:d9:86:02:a3:fb:99:98:fa:de:b9:b2:88:f8:
                    58:ca:ce:48:21:ee:d1:67:4c:88:06:f7:f8:81:ea:
                    56:8b:55:f2:95:86:15:90:fc:71:e6:4c:39:55:f6:
                    5a:e6:0c:77:23:53:aa:fd:d5:56:be:90:c4:ae:b6:
                    14:e2:17:2b:90:ff:39:db:1f:c7:98:75:59:45:fa:
                    4f:f1:43:b3:4c:a4:be:2d:ae:00:08:1e:79:bc:99:
                    0e:c1:71:25:d0:6b:5f:d1:64:0d:a3:24:c0:01:50:
                    13:9e:a2:7a:99:f3:e6:3d:a0:71:fc:f0:03:db:6d:
                    46:93:2f:28:09:ca:e3:1f:04:a6:dd:ff:18:a5:36:
                    94:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:47:04:CC:15:83:CC:34:C1:89:B8:CC:97:EA:7D:D1:0E:E4:E3:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/072f8713-d6b1-3633-b393-407d3f1fb9e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.crl

            X509v3 Authority Key Identifier:
                keyid:17:DD:BE:D5:1B:27:91:56:B0:48:C7:7E:3D:0E:D9:4F:FA:37:AB:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:be0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:00:34:45:f7:20:95:2e:1c:04:3b:a4:bc:81:20:ec:20:75:
         98:c3:20:93:fd:02:ad:21:48:97:08:9a:7b:ce:c6:a0:0d:61:
         f4:99:04:a3:28:61:66:45:93:4e:17:48:37:cd:7e:10:75:62:
         12:7e:00:02:c5:34:1a:fd:f4:be:0e:20:13:d5:a1:a5:cd:78:
         80:65:fc:d2:57:9a:3e:0d:1b:fd:08:e9:b1:54:05:1c:44:24:
         df:8e:da:19:84:9c:c7:fb:5f:5a:70:e5:bb:0f:a7:6f:bc:6c:
         e4:3d:ef:1c:11:5f:9e:1e:04:eb:7a:1f:6a:7a:ea:a8:5e:3d:
         cf:8d:a9:2f:eb:50:85:dd:a4:1d:7b:69:e0:ad:9b:f1:1d:e7:
         9f:8e:49:1d:e1:9f:e1:fb:cf:6e:76:e3:4c:6c:b6:a2:c1:04:
         ea:f1:e9:f7:f4:ce:c2:b1:25:69:ed:e5:bf:d7:af:0b:45:97:
         c2:37:3a:3c:ce:f3:84:de:d9:56:46:7b:16:45:33:06:81:d4:
         1e:9c:b0:7b:43:16:1f:8f:88:6d:71:30:01:b9:83:f5:42:c0:
         33:a9:42:60:09:cf:37:c1:9c:7c:2b:f6:06:6d:5c:53:e8:b3:
         df:5c:b3:26:f8:22:e8:1f:3b:2d:3b:45:ba:fc:27:46:28:51:
         2f:00:89:a5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nlFp67g1v+yVdJcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmFkZjE1ODYtOTAxZC00MWE3LWIwZjMtNTIxOTk4ZDUz
OTMxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MDZlZDM3OTQtMjIwMi00MWEwLWEzODAtMmJjNDExNDJkYjk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQpXBSDrK9nwR/5c9tXxKioo6KmOFto/SE1o
BnYK5NqUVwSxvnsSA1cs0XtGEE1181YMQgpy9IuDnQ1rGspGWs0GAL5GPXpPAJnw
aITNl4VKqw1kgeEjBf+2+Cc0GzkCu802glY8G02H6b1miyZhbVwhpnHUuI1DF9mG
AqP7mZj63rmyiPhYys5IIe7RZ0yIBvf4gepWi1XylYYVkPxx5kw5VfZa5gx3I1Oq
/dVWvpDErrYU4hcrkP852x/HmHVZRfpP8UOzTKS+La4ACB55vJkOwXEl0Gtf0WQN
oyTAAVATnqJ6mfPmPaBx/PAD221Gky8oCcrjHwSm3f8YpTaUPQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIhHBMwVg8w0wYm4zJfqfdEO5OOMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYWRm
MTU4Ni05MDFkLTQxYTctYjBmMy01MjE5OThkNTM5MzEvMDcyZjg3MTMtZDZiMS0z
NjMzLWIzOTMtNDA3ZDNmMWZiOWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmFkZjE1ODYtOTAxZC00MWE3LWIw
ZjMtNTIxOTk4ZDUzOTMxL2JhZGYxNTg2LTkwMWQtNDFhNy1iMGYzLTUyMTk5OGQ1
MzkzMS5jcmwwHwYDVR0jBBgwFoAUF92+1RsnkVawSMd+PQ7ZT/o3q54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYWRmMTU4Ni05MDFkLTQxYTctYjBmMy01MjE5
OThkNTM5MzEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQL4DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCBADRF9yCVLhwEO6S8gSDsIHWYwyCT/QKtIUiXCJp7zsagDWH0mQSj
KGFmRZNOF0g3zX4QdWISfgACxTQa/fS+DiAT1aGlzXiAZfzSV5o+DRv9COmxVAUc
RCTfjtoZhJzH+19acOW7D6dvvGzkPe8cEV+eHgTreh9qeuqoXj3Pjakv61CF3aQd
e2ngrZvxHeefjkkd4Z/h+89uduNMbLaiwQTq8en39M7CsSVp7eW/168LRZfCNzo8
zvOE3tlWRnsWRTMGgdQenLB7QxYfj4htcTABuYP1QsAzqUJgCc83wZx8K/YGbVxT
6LPfXLMm+CLoHzstO0W6/CdGKFEvAIml
-----END CERTIFICATE-----
Generated at Wed Jul 29 16:36:45 2026 by rpki-client