Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/a26963c2-c1dd-33b2-942d-0b6b92224b05.roa
File:                     a26963c2-c1dd-33b2-942d-0b6b92224b05.roa (raw, json)
Hash identifier:          7iYK9SSDRVFX0/Y23uv7RXCKyuXZsSG0HYaTKHUxY2s=
Subject key identifier:   75:F8:6A:06:EA:25:27:9F:4C:BB:55:EF:B3:86:E5:49:38:A6:8B:4E
Certificate issuer:       /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial:       010D0C9F4328584F2EED13F74C00CC5F8FC81AB0
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/a26963c2-c1dd-33b2-942d-0b6b92224b05.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        2631:2000::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:13:f7:4c:00:cc:5f:8f:c8:1a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=3d6d785d-22e9-4b4d-8870-271795157a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:69:bf:11:bc:48:92:1c:a5:96:ab:90:ae:1e:
                    25:ef:b2:1b:5f:65:0e:7c:ee:d5:51:88:a2:a6:be:
                    b4:2b:02:ae:97:18:f5:be:f1:41:47:96:ab:a0:58:
                    8b:20:e1:89:d2:30:95:69:09:6b:44:f8:de:f8:33:
                    bc:df:b4:f4:93:ec:04:35:c0:33:37:4e:cd:95:23:
                    7e:23:e4:ee:65:9b:cb:33:55:09:b6:2a:9b:2b:01:
                    1d:d4:65:fa:26:7e:08:c4:d8:8a:0a:49:5c:50:46:
                    b7:39:33:0a:c5:4c:61:29:58:01:de:5b:db:a1:ca:
                    25:dc:33:9b:24:c0:9d:40:f3:b1:1d:df:fa:b6:24:
                    8b:db:6e:aa:e0:49:63:5a:79:1b:4e:ac:ed:e5:98:
                    90:3b:58:24:e4:88:5b:6d:57:ac:24:b1:7f:59:d3:
                    b0:33:e2:92:82:d8:4a:33:79:bb:d2:2e:76:00:bb:
                    3e:b5:a5:13:29:3e:c6:32:00:46:3a:37:06:73:71:
                    c8:34:38:6f:a5:3d:92:75:ee:c9:ae:ac:e6:de:d2:
                    26:38:e6:01:da:9f:30:7a:b8:6d:96:75:e8:ac:a8:
                    0d:18:d7:7e:aa:9a:f2:19:77:b2:91:b0:7d:f1:90:
                    1a:3a:d4:24:7c:3b:74:54:c6:30:18:73:6d:83:4d:
                    ed:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F8:6A:06:EA:25:27:9F:4C:BB:55:EF:B3:86:E5:49:38:A6:8B:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/a26963c2-c1dd-33b2-942d-0b6b92224b05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl

            X509v3 Authority Key Identifier:
                keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2631:2000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:ba:ed:51:d9:c1:f9:e8:13:82:c1:4c:bc:fe:28:e5:07:94:
         3e:1c:a9:92:af:3b:5c:63:fa:6c:31:65:41:af:93:32:e6:02:
         92:9b:b3:56:a3:cf:c7:66:cd:6a:6a:39:a5:64:80:3c:75:98:
         d4:10:59:e6:a6:1b:05:72:19:ac:ec:87:ef:49:88:69:7a:b4:
         2b:57:1d:bb:82:62:74:ed:6f:aa:0f:02:07:cc:af:48:77:b4:
         12:9a:dd:5a:bb:43:74:4e:75:48:80:6d:d0:79:99:0a:57:b9:
         9a:56:b8:9a:f7:af:20:64:b6:8b:ba:db:ff:52:86:f4:25:bc:
         98:e3:19:ff:56:6b:f1:20:30:0f:b0:1a:16:ea:1a:9a:6d:a2:
         d9:d3:ef:7e:1e:ab:92:1f:5f:a8:7b:97:4a:07:90:1e:66:81:
         84:a5:7c:8b:af:42:44:aa:b6:58:c1:29:39:b5:93:22:14:30:
         71:11:f2:6a:e5:e5:52:f6:fb:d9:4b:84:12:59:15:a8:0f:72:
         ea:b3:c8:8c:22:ae:e4:50:ac:77:33:0d:30:6c:85:29:0a:3b:
         ff:2f:d7:b3:17:e4:5c:b8:fe:36:3b:9e:87:44:4b:27:77:b1:
         50:e7:b4:52:a6:5b:57:f0:7c:5a:b1:7b:f7:a7:96:a5:f5:96:
         af:0a:04:19
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8u7RP3TADMX4/IGrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz
NWExMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk
M2Q2ZDc4NWQtMjJlOS00YjRkLTg4NzAtMjcxNzk1MTU3YTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Gm/EbxIkhyllquQrh4l77IbX2UOfO7VUYii
pr60KwKulxj1vvFBR5aroFiLIOGJ0jCVaQlrRPje+DO837T0k+wENcAzN07NlSN+
I+TuZZvLM1UJtiqbKwEd1GX6Jn4IxNiKCklcUEa3OTMKxUxhKVgB3lvbocol3DOb
JMCdQPOxHd/6tiSL226q4EljWnkbTqzt5ZiQO1gk5IhbbVesJLF/WdOwM+KSgthK
M3m70i52ALs+taUTKT7GMgBGOjcGc3HINDhvpT2Sde7Jrqzm3tImOOYB2p8werht
lnXorKgNGNd+qpryGXeykbB98ZAaOtQkfDt0VMYwGHNtg03tHwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHX4agbqJSefTLtV77OG5Uk4potOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk
MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvYTI2OTYzYzItYzFkZC0z
M2IyLTk0MmQtMGI2YjkyMjI0YjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2
YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4
MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5
YjQyODM1YTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJjEgADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA4uu1R2cH56BOCwUy8/ijlB5Q+HKmSrztcY/psMWVBr5My5gKSm7NW
o8/HZs1qajmlZIA8dZjUEFnmphsFchms7IfvSYhperQrVx27gmJ07W+qDwIHzK9I
d7QSmt1au0N0TnVIgG3QeZkKV7maVria968gZLaLutv/Uob0JbyY4xn/VmvxIDAP
sBoW6hqabaLZ0+9+HquSH1+oe5dKB5AeZoGEpXyLr0JEqrZYwSk5tZMiFDBxEfJq
5eVS9vvZS4QSWRWoD3Lqs8iMIq7kUKx3Mw0wbIUpCjv/L9ezF+RcuP42O56HREsn
d7FQ57RSpltX8HxasXv3p5al9ZavCgQZ
-----END CERTIFICATE-----
Generated at Mon Sep 21 06:33:49 2026 by rpki-client