Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1e818c4c-a62d-3221-b8bb-5e6f798f382a.roa
File:                     1e818c4c-a62d-3221-b8bb-5e6f798f382a.roa (raw, json)
Hash identifier:          1PedIUQuGlivgWzr+jG4PMblEr8e2c65noliOMCfgUc=
Subject key identifier:   63:88:BE:B6:09:B1:EE:6D:7E:CC:32:F6:FA:DA:70:3F:A6:7B:D2:97
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584F49749ED38987E5C005698400
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1e818c4c-a62d-3221-b8bb-5e6f798f382a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     140952
IP address blocks:        2604:ea80:5800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:9e:d3:89:87:e5:c0:05:69:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=61ea4c8a-5f18-47d6-8d1d-01909e3f9f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:81:69:87:87:94:9e:ee:24:26:ae:ca:7c:9c:
                    ca:f8:11:77:14:ed:45:23:91:da:75:8e:a0:13:05:
                    cf:b8:fd:16:fc:65:6a:d1:52:1c:18:18:1a:56:5b:
                    2d:66:71:90:85:ac:e3:0e:7f:fe:78:27:06:72:b0:
                    a3:86:2b:79:d3:c0:2a:47:6e:24:23:8a:dc:c7:fc:
                    04:e4:96:a9:1a:f8:3a:f0:2d:5f:cf:58:8b:92:94:
                    9f:10:ce:a2:c5:8c:61:07:94:bc:1c:a6:1d:f7:74:
                    77:fb:c7:8e:48:dd:54:d7:5d:3e:9b:93:45:89:b3:
                    32:f8:8c:1c:e8:bc:4a:41:9d:86:ad:0e:37:8f:e6:
                    6c:63:fe:a8:d2:20:6a:a0:97:3e:97:82:40:af:10:
                    2d:e7:6a:c6:68:9b:42:05:91:a2:28:0b:07:6d:d3:
                    a4:25:06:03:b1:dd:72:2f:a3:6a:1f:97:05:1c:bb:
                    cb:1f:45:76:ee:2e:f7:51:9a:f0:e2:98:d5:d2:48:
                    63:4e:99:37:67:3f:ac:ff:6b:63:5a:2d:28:8e:af:
                    a7:5c:6e:80:0c:38:fa:26:02:d5:23:3e:4a:ed:70:
                    5c:7b:3b:0e:c1:2a:b6:ae:75:3e:93:0d:a7:bd:41:
                    85:c5:41:12:ff:3d:d9:51:79:18:99:10:de:c4:6a:
                    12:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:88:BE:B6:09:B1:EE:6D:7E:CC:32:F6:FA:DA:70:3F:A6:7B:D2:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1e818c4c-a62d-3221-b8bb-5e6f798f382a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ea80:5800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:b8:a5:c0:be:8c:4f:0e:7f:2d:82:e9:df:37:a1:b3:7d:31:
         ac:4d:29:f4:cf:6f:5f:60:36:43:d0:e6:ce:e0:8a:19:e5:d8:
         45:13:ba:f2:e0:a6:4d:fc:14:2d:47:d0:50:63:19:10:28:52:
         b1:0b:ff:c7:25:53:ec:70:55:f5:55:70:48:7a:a2:5f:e6:6d:
         39:fc:d8:13:ec:ab:d5:22:0d:bc:ca:11:8f:23:36:74:27:f2:
         bc:86:45:c7:dc:ee:72:69:9c:da:a4:3e:fd:b3:05:7e:cc:60:
         cd:cb:9f:35:1e:5e:18:cb:6b:e0:0d:45:92:d9:ed:83:5d:54:
         0c:2d:87:7b:48:6c:71:ed:9a:5f:3d:ec:1c:cf:6f:20:7d:36:
         de:df:b4:e5:7a:e6:35:48:39:cf:aa:ab:18:31:1f:17:34:ae:
         71:46:70:e8:fa:3f:34:28:d2:56:8f:da:10:76:bd:25:1a:4e:
         4b:dd:f1:12:21:ba:70:d9:ad:19:c0:d5:51:cf:41:f6:9f:f9:
         71:09:6f:1d:82:53:4d:7b:d8:b5:df:57:61:fa:03:93:bf:14:
         2e:b6:11:67:6a:44:38:1f:94:dd:3a:cc:83:6a:af:b3:bc:39:
         80:70:59:a2:a0:f7:75:c7:74:de:87:ba:38:0c:10:e6:a9:c6:
         57:7e:91:1b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdJ7TiYflwAVphAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NjFlYTRjOGEtNWYxOC00N2Q2LThkMWQtMDE5MDllM2Y5ZjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroFph4eUnu4kJq7KfJzK+BF3FO1FI5HadY6g
EwXPuP0W/GVq0VIcGBgaVlstZnGQhazjDn/+eCcGcrCjhit508AqR24kI4rcx/wE
5JapGvg68C1fz1iLkpSfEM6ixYxhB5S8HKYd93R3+8eOSN1U110+m5NFibMy+Iwc
6LxKQZ2GrQ43j+ZsY/6o0iBqoJc+l4JArxAt52rGaJtCBZGiKAsHbdOkJQYDsd1y
L6NqH5cFHLvLH0V27i73UZrw4pjV0khjTpk3Zz+s/2tjWi0ojq+nXG6ADDj6JgLV
Iz5K7XBcezsOwSq2rnU+kw2nvUGFxUES/z3ZUXkYmRDexGoSXwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGOIvrYJse5tfswy9vracD+me9KXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMWU4MThjNGMtYTYyZC0z
MjIxLWI4YmItNWU2Zjc5OGYzODJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTqgFgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAdbilwL6MTw5/LYLp3zehs30xrE0p9M9vX2A2Q9DmzuCKGeXYRRO6
8uCmTfwULUfQUGMZEChSsQv/xyVT7HBV9VVwSHqiX+ZtOfzYE+yr1SINvMoRjyM2
dCfyvIZFx9zucmmc2qQ+/bMFfsxgzcufNR5eGMtr4A1Fktntg11UDC2He0hsce2a
Xz3sHM9vIH023t+05XrmNUg5z6qrGDEfFzSucUZw6Po/NCjSVo/aEHa9JRpOS93x
EiG6cNmtGcDVUc9B9p/5cQlvHYJTTXvYtd9XYfoDk78ULrYRZ2pEOB+U3TrMg2qv
s7w5gHBZoqD3dcd03oe6OAwQ5qnGV36RGw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:34:48 2026 by rpki-client