Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/ee5e6bc7-e933-3011-ab89-2c7e76441156.roa
File:                     ee5e6bc7-e933-3011-ab89-2c7e76441156.roa (raw, json)
Hash identifier:          Czs9SqqW+TR43Rv4rTAdqMNCtijoyUkNMSpRb33AdJk=
Subject key identifier:   99:BF:0E:4F:59:CF:75:15:E1:21:3F:47:75:FD:D6:53:50:C0:63:49
Certificate issuer:       /CN=b04c27dd-ce06-4d0a-ae84-1d675e85ce59
Certificate serial:       010D0C9F4328584F497523D717FC163D7F13E280
Authority key identifier: 0D:51:66:96:3A:07:C0:C9:56:4D:30:56:AC:3A:FF:0C:9C:F4:19:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/ee5e6bc7-e933-3011-ab89-2c7e76441156.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     32024
IP address blocks:        2607:69c0:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:23:d7:17:fc:16:3d:7f:13:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04c27dd-ce06-4d0a-ae84-1d675e85ce59
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=34fd01c3-3e94-4217-9d80-e9efe5ebc810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c4:e8:26:d2:54:c9:04:0b:27:df:6f:bf:30:
                    29:cd:d9:0f:df:c4:82:ab:67:cd:fa:27:08:ff:d2:
                    68:9e:51:72:28:59:82:52:97:56:07:d2:49:c0:30:
                    ba:0f:d2:6b:6a:e4:e1:00:fb:19:69:00:ec:14:3f:
                    8b:ca:0f:2a:4f:28:d0:29:10:f6:aa:32:42:37:6e:
                    cc:c6:9b:75:08:f4:d4:9a:48:56:a7:31:4a:5e:98:
                    09:52:02:24:1d:c1:53:9e:cd:80:b3:30:df:b1:45:
                    81:1e:5f:4c:d5:92:a5:27:51:0d:c0:a6:36:9e:b3:
                    7f:11:82:25:d3:3d:b7:c8:f4:62:d7:8b:9e:15:24:
                    9c:80:40:68:18:7d:9a:37:45:86:b3:3e:59:a2:bd:
                    c2:bd:c5:b9:d9:05:86:01:bd:65:a9:17:c7:c0:fb:
                    a1:e7:0a:43:80:d3:18:47:a5:24:46:ad:8f:95:a1:
                    81:cd:c2:5f:4f:86:7b:13:17:17:55:ff:14:a3:90:
                    a5:df:fb:75:11:c5:71:f8:7d:66:d2:67:e4:fe:f4:
                    fb:38:62:65:97:5d:af:bf:f3:f9:5c:95:20:cd:e7:
                    46:1a:e4:97:3b:eb:66:e1:e1:22:2d:8f:c6:aa:15:
                    56:b0:38:cf:5a:80:38:8f:ce:16:52:ce:75:79:61:
                    78:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BF:0E:4F:59:CF:75:15:E1:21:3F:47:75:FD:D6:53:50:C0:63:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/ee5e6bc7-e933-3011-ab89-2c7e76441156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.crl

            X509v3 Authority Key Identifier:
                keyid:0D:51:66:96:3A:07:C0:C9:56:4D:30:56:AC:3A:FF:0C:9C:F4:19:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b04c27dd-ce06-4d0a-ae84-1d675e85ce59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:69c0:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:88:fe:ec:01:70:f7:f8:51:f6:e2:2b:ca:5e:b8:31:d4:48:
         59:e6:7a:86:ae:35:3e:02:e6:17:a0:65:e5:4a:91:c9:b1:60:
         03:03:5b:58:63:03:2e:12:4a:c5:8c:1c:a1:e3:a9:9a:d9:85:
         fa:b7:cd:6e:9e:b2:82:9c:7f:43:3b:db:62:f9:74:a3:fd:db:
         bc:04:c0:6c:34:50:fb:ad:86:0c:90:74:7c:59:bb:b5:b9:c3:
         61:1d:98:cd:78:79:aa:81:ec:04:90:0b:3d:4d:da:fd:c7:7c:
         5f:f3:b0:70:16:c6:0f:0d:49:7e:1b:21:a5:f1:ba:88:30:43:
         fa:19:42:61:2e:29:ee:d6:90:a5:ef:42:f8:30:b6:c0:fb:39:
         08:2c:82:f4:4d:a3:be:79:f1:c6:33:e5:fd:e4:ec:d2:f9:8d:
         02:61:26:70:57:1c:02:a4:14:14:0b:8a:19:f9:7d:5e:51:fe:
         30:ab:c5:77:ad:47:32:9e:50:41:a4:17:d1:27:7d:bb:ce:73:
         6f:f4:6c:f0:f4:23:65:86:c0:3c:da:2a:e0:ef:18:6c:d5:13:
         c9:9a:f5:89:db:fb:6d:82:61:ff:a8:22:2f:b2:e2:f9:e7:3d:
         4b:31:d4:94:a7:1d:02:33:94:b5:cb:08:70:c5:de:a4:30:a0:
         44:ef:c1:61
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdSPXF/wWPX8T4oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjA0YzI3ZGQtY2UwNi00ZDBhLWFlODQtMWQ2NzVlODVj
ZTU5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MzRmZDAxYzMtM2U5NC00MjE3LTlkODAtZTllZmU1ZWJjODEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcToJtJUyQQLJ99vvzApzdkP38SCq2fN+icI
/9JonlFyKFmCUpdWB9JJwDC6D9JrauThAPsZaQDsFD+Lyg8qTyjQKRD2qjJCN27M
xpt1CPTUmkhWpzFKXpgJUgIkHcFTns2AszDfsUWBHl9M1ZKlJ1ENwKY2nrN/EYIl
0z23yPRi14ueFSScgEBoGH2aN0WGsz5Zor3CvcW52QWGAb1lqRfHwPuh5wpDgNMY
R6UkRq2PlaGBzcJfT4Z7ExcXVf8Uo5Cl3/t1EcVx+H1m0mfk/vT7OGJll12vv/P5
XJUgzedGGuSXO+tm4eEiLY/GqhVWsDjPWoA4j84WUs51eWF4nQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJm/Dk9Zz3UV4SE/R3X91lNQwGNJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iMDRj
MjdkZC1jZTA2LTRkMGEtYWU4NC0xZDY3NWU4NWNlNTkvZWU1ZTZiYzctZTkzMy0z
MDExLWFiODktMmM3ZTc2NDQxMTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjA0YzI3ZGQtY2UwNi00ZDBhLWFl
ODQtMWQ2NzVlODVjZTU5L2IwNGMyN2RkLWNlMDYtNGQwYS1hZTg0LTFkNjc1ZTg1
Y2U1OS5jcmwwHwYDVR0jBBgwFoAUDVFmljoHwMlWTTBWrDr/DJz0GQIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iMDRjMjdkZC1jZTA2LTRkMGEtYWU4NC0xZDY3
NWU4NWNlNTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgdpwEAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAb4j+7AFw9/hR9uIryl64MdRIWeZ6hq41PgLmF6Bl5UqRybFgAwNb
WGMDLhJKxYwcoeOpmtmF+rfNbp6ygpx/QzvbYvl0o/3bvATAbDRQ+62GDJB0fFm7
tbnDYR2YzXh5qoHsBJALPU3a/cd8X/OwcBbGDw1JfhshpfG6iDBD+hlCYS4p7taQ
pe9C+DC2wPs5CCyC9E2jvnnxxjPl/eTs0vmNAmEmcFccAqQUFAuKGfl9XlH+MKvF
d61HMp5QQaQX0Sd9u85zb/Rs8PQjZYbAPNoq4O8YbNUTyZr1idv7bYJh/6giL7Li
+ec9SzHUlKcdAjOUtcsIcMXepDCgRO/BYQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:02:29 2026 by rpki-client