Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1/4a62007d-5b0a-3371-9601-ee2f7b4b1ed3.roa
File:                     4a62007d-5b0a-3371-9601-ee2f7b4b1ed3.roa (raw, json)
Hash identifier:          9M3zXjJBqUSFE9ZUDkZ1BzebciURBtyIgsudNJlCYs4=
Subject key identifier:   C3:98:E3:20:A5:29:41:42:74:90:7B:9E:17:33:F3:01:C1:DF:3D:7B
Certificate issuer:       /CN=4ab46853-eb00-4588-9764-5162930da6b1
Certificate serial:       010D0C9F4328584EA01585107C91790B35026080
Authority key identifier: 4E:87:75:CC:A6:70:15:D5:E4:EA:81:7D:4F:9B:D8:FC:33:88:17:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1/4a62007d-5b0a-3371-9601-ee2f7b4b1ed3.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     7377
IP address blocks:        2607:f720::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1/4ab46853-eb00-4588-9764-5162930da6b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1/4ab46853-eb00-4588-9764-5162930da6b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:85:10:7c:91:79:0b:35:02:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab46853-eb00-4588-9764-5162930da6b1
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=51eda2d7-0ac8-4164-ba59-ff0fdeaf04c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3c:13:0e:6f:d1:5d:60:c6:0d:ab:08:3f:77:
                    64:53:1f:fc:b8:80:a7:b7:71:0e:98:14:c8:16:de:
                    ef:bf:98:b5:0a:f5:00:4b:0e:8e:89:b4:79:fd:a1:
                    8f:ea:b5:3e:51:ad:c0:c0:e2:c1:04:54:ed:e0:28:
                    c3:2a:3c:ca:03:82:bf:81:a1:ab:7d:95:f8:f1:28:
                    84:ff:3c:8a:a0:b2:0b:b9:d9:74:14:ad:05:61:a4:
                    ae:30:59:45:5b:52:03:b7:de:9a:55:27:f7:36:88:
                    67:a0:aa:29:ee:c9:e9:42:cd:53:eb:17:5f:95:cf:
                    97:0b:70:ea:f1:55:2f:a0:4f:47:a2:50:62:af:56:
                    fc:d5:35:90:c8:dc:58:ae:f9:e1:b6:32:ad:ef:91:
                    33:b0:21:eb:58:a4:35:80:cd:c9:08:81:e7:61:8d:
                    c4:b7:00:ac:d6:73:3b:a0:37:73:87:71:2c:0f:cc:
                    1d:49:05:da:47:bb:37:71:d1:81:e9:b4:7d:06:a7:
                    24:1f:32:47:b7:cc:95:b9:74:87:bb:67:a7:4e:51:
                    51:43:d8:bf:4c:d8:c8:5f:58:b3:bf:e0:aa:a3:c5:
                    d4:c9:0c:16:4d:d7:fd:9a:0a:e4:fd:97:2c:3d:09:
                    fe:7b:4e:a0:f2:ff:6a:aa:7c:86:62:45:ba:d2:ab:
                    71:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:98:E3:20:A5:29:41:42:74:90:7B:9E:17:33:F3:01:C1:DF:3D:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1/4a62007d-5b0a-3371-9601-ee2f7b4b1ed3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1/4ab46853-eb00-4588-9764-5162930da6b1.crl

            X509v3 Authority Key Identifier:
                keyid:4E:87:75:CC:A6:70:15:D5:E4:EA:81:7D:4F:9B:D8:FC:33:88:17:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4ab46853-eb00-4588-9764-5162930da6b1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f720::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:c2:4e:ef:b4:8b:85:02:a6:e8:af:ce:97:dc:96:9c:6a:a5:
         42:f1:6d:b0:9f:c7:12:1c:56:73:97:a7:f7:20:39:e9:ae:7f:
         8c:7d:79:26:9d:aa:2e:12:45:46:27:a2:f5:98:54:75:01:ee:
         20:41:23:0f:ce:6e:07:aa:eb:a9:58:8f:b1:06:a2:18:86:4b:
         78:bc:95:53:a1:e6:8d:f1:5a:6e:17:d8:8b:b3:e2:19:0b:6e:
         e9:c4:43:c4:c4:f1:b3:5f:0c:77:dc:e0:16:78:00:fc:f6:6b:
         3c:82:b7:af:ca:cb:5b:1c:7d:62:54:a6:6c:80:c4:34:c9:ee:
         72:ed:fa:7d:f8:b6:e8:7a:8c:74:73:c8:29:38:60:f0:51:33:
         b6:04:71:5c:f8:63:fc:17:89:65:99:c9:7a:27:9b:20:eb:41:
         4f:7a:9c:2c:33:34:ad:50:84:42:4b:56:8e:90:36:89:ed:54:
         59:b8:ec:52:69:e4:9f:ff:83:c2:4f:fa:e0:47:c1:32:46:6f:
         55:cb:e5:cf:27:ec:2c:4b:11:87:7f:f9:a5:11:17:90:71:5c:
         eb:5e:9a:e8:ff:c1:9a:36:4f:c9:f6:50:af:fe:c4:e1:19:d8:
         12:09:e9:27:ff:5d:f9:23:ce:21:3e:93:ce:02:2d:24:28:96:
         15:d5:6c:30
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6gFYUQfJF5CzUCYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFiNDY4NTMtZWIwMC00NTg4LTk3NjQtNTE2MjkzMGRh
NmIxMB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk
NTFlZGEyZDctMGFjOC00MTY0LWJhNTktZmYwZmRlYWYwNGM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jwTDm/RXWDGDasIP3dkUx/8uICnt3EOmBTI
Ft7vv5i1CvUASw6OibR5/aGP6rU+Ua3AwOLBBFTt4CjDKjzKA4K/gaGrfZX48SiE
/zyKoLILudl0FK0FYaSuMFlFW1IDt96aVSf3NohnoKop7snpQs1T6xdflc+XC3Dq
8VUvoE9HolBir1b81TWQyNxYrvnhtjKt75EzsCHrWKQ1gM3JCIHnYY3EtwCs1nM7
oDdzh3EsD8wdSQXaR7s3cdGB6bR9BqckHzJHt8yVuXSHu2enTlFRQ9i/TNjIX1iz
v+Cqo8XUyQwWTdf9mgrk/ZcsPQn+e06g8v9qqnyGYkW60qtxVQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMOY4yClKUFCdJB7nhcz8wHB3z17MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80YWI0
Njg1My1lYjAwLTQ1ODgtOTc2NC01MTYyOTMwZGE2YjEvNGE2MjAwN2QtNWIwYS0z
MzcxLTk2MDEtZWUyZjdiNGIxZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGFiNDY4NTMtZWIwMC00NTg4LTk3
NjQtNTE2MjkzMGRhNmIxLzRhYjQ2ODUzLWViMDAtNDU4OC05NzY0LTUxNjI5MzBk
YTZiMS5jcmwwHwYDVR0jBBgwFoAUTod1zKZwFdXk6oF9T5vY/DOIF84wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS80YWI0Njg1My1lYjAwLTQ1ODgtOTc2NC01MTYy
OTMwZGE2YjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf3IDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQClwk7vtIuFAqbor86X3JacaqVC8W2wn8cSHFZzl6f3IDnprn+MfXkm
naouEkVGJ6L1mFR1Ae4gQSMPzm4HquupWI+xBqIYhkt4vJVToeaN8VpuF9iLs+IZ
C27pxEPExPGzXwx33OAWeAD89ms8grevystbHH1iVKZsgMQ0ye5y7fp9+Lboeox0
c8gpOGDwUTO2BHFc+GP8F4llmcl6J5sg60FPepwsMzStUIRCS1aOkDaJ7VRZuOxS
aeSf/4PCT/rgR8EyRm9Vy+XPJ+wsSxGHf/mlEReQcVzrXpro/8GaNk/J9lCv/sTh
GdgSCekn/135I84hPpPOAi0kKJYV1Www
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:23:13 2026 by rpki-client