Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/eb0668be-27f2-4af1-904a-eae4b20a5b43/5a2fcab8-4a92-312a-ba50-52bb643fa570.roa
File:                     5a2fcab8-4a92-312a-ba50-52bb643fa570.roa (raw, json)
Hash identifier:          DvTiid4t+sX8T3ALaSmdMlk31XTKXxZJ3XBepo8S858=
Subject key identifier:   2A:CC:B8:99:E2:84:78:90:26:7F:07:85:FD:1D:B9:38:22:B6:77:37
Certificate issuer:       /CN=eb0668be-27f2-4af1-904a-eae4b20a5b43
Certificate serial:       010D0C9F4328584FCCC67AA2D5EC3EB0D9868900
Authority key identifier: B6:ED:65:25:FB:50:47:27:7F:93:AE:46:68:85:E9:DB:95:10:A0:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/eb0668be-27f2-4af1-904a-eae4b20a5b43.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/eb0668be-27f2-4af1-904a-eae4b20a5b43/5a2fcab8-4a92-312a-ba50-52bb643fa570.roa
Signing time:             Wed 11 Nov 2026 02:00:12 +0000
ROA not before:           Wed 11 Nov 2026 02:00:12 +0000
ROA not after:            Tue 09 Feb 2027 02:00:12 +0000
asID:                     32922
IP address blocks:        2607:fd00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/eb0668be-27f2-4af1-904a-eae4b20a5b43/eb0668be-27f2-4af1-904a-eae4b20a5b43.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/eb0668be-27f2-4af1-904a-eae4b20a5b43/eb0668be-27f2-4af1-904a-eae4b20a5b43.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/eb0668be-27f2-4af1-904a-eae4b20a5b43.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:cc:c6:7a:a2:d5:ec:3e:b0:d9:86:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb0668be-27f2-4af1-904a-eae4b20a5b43
        Validity
            Not Before: Nov 11 02:00:12 2026 GMT
            Not After : Feb  9 02:00:12 2027 GMT
        Subject: CN=7c4d48d2-7bd8-4c91-8bb0-7a4817f8368c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e3:ca:02:52:56:ab:ec:6f:f2:af:b9:03:f9:
                    b9:24:74:58:09:20:28:0c:13:26:42:6b:a9:5c:3b:
                    63:a2:95:2c:8a:99:5b:f1:1c:44:73:55:4d:24:ab:
                    d5:f2:27:bb:e5:77:b9:04:14:b4:87:ed:3c:5c:65:
                    6c:33:de:1e:8c:d1:a0:dd:de:c0:87:9c:ca:97:ce:
                    e8:ad:7d:56:05:5b:60:d2:ce:34:19:d0:f5:4c:c2:
                    7d:cc:be:12:34:09:39:4b:d5:46:a9:85:1f:88:44:
                    3c:9f:86:30:27:71:05:88:32:9b:58:cd:04:22:a4:
                    45:0c:cb:71:8a:b7:a5:72:c8:c3:e7:85:3c:ca:25:
                    30:c9:1c:bd:ee:28:e5:1f:f6:28:d8:1d:6f:42:81:
                    d1:e1:75:8e:d9:ae:d7:6f:d2:fa:96:d4:ee:03:05:
                    c8:aa:af:49:fb:3d:40:61:80:f2:6d:2a:ba:b3:07:
                    6f:3c:50:67:d0:b0:95:46:01:9f:39:49:99:dd:03:
                    81:35:06:4d:8b:49:32:15:38:7c:14:c6:98:05:f5:
                    2d:ff:4c:73:7c:fa:b0:fb:8b:17:11:32:e5:45:7a:
                    de:dd:fd:ec:85:45:56:3b:c9:f5:e8:57:98:81:66:
                    f5:3f:5f:1d:b1:78:c0:91:ce:1f:44:e7:45:c2:b3:
                    c2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CC:B8:99:E2:84:78:90:26:7F:07:85:FD:1D:B9:38:22:B6:77:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/eb0668be-27f2-4af1-904a-eae4b20a5b43/5a2fcab8-4a92-312a-ba50-52bb643fa570.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/eb0668be-27f2-4af1-904a-eae4b20a5b43/eb0668be-27f2-4af1-904a-eae4b20a5b43.crl

            X509v3 Authority Key Identifier:
                keyid:B6:ED:65:25:FB:50:47:27:7F:93:AE:46:68:85:E9:DB:95:10:A0:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/eb0668be-27f2-4af1-904a-eae4b20a5b43.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fd00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:03:e7:1b:9f:f5:0c:49:cc:e0:59:35:68:a5:af:65:08:7e:
         44:23:6b:4d:5f:c7:0f:4b:fc:d1:ec:b7:3b:b5:93:ec:c2:ac:
         7b:6a:e7:db:bc:45:44:8b:3c:e2:20:5d:82:29:44:a2:b8:06:
         98:89:37:c4:9a:9f:80:04:f5:57:75:61:cc:23:89:64:cd:9e:
         a3:aa:d7:1a:8d:e4:7c:b3:a7:bf:ea:ca:3f:05:16:b2:fd:1c:
         83:70:f8:bb:ea:b7:4f:15:2d:71:7d:59:cc:06:40:6d:21:3c:
         2d:4e:66:92:3a:cc:71:0c:f4:36:17:8f:8a:f5:e3:18:46:e8:
         71:3a:f7:85:34:00:8f:4e:79:6f:06:a0:00:2b:6d:50:cf:80:
         72:ee:52:6f:12:06:fb:c5:bc:4c:a7:7c:37:23:6d:31:b1:e7:
         c6:11:bf:16:c2:bb:7b:c2:3e:b8:4e:cc:85:8d:76:1d:34:de:
         58:d6:4a:7a:f1:5b:5d:7e:20:1e:d9:a6:59:7e:c8:b0:58:d0:
         b8:92:bc:b5:00:5b:c5:6c:dc:6f:c8:e2:90:46:4e:4e:d6:d2:
         0d:2e:04:16:44:c3:41:f7:53:01:d8:ab:f5:df:cc:2e:aa:84:
         63:30:a8:0d:df:c3:ac:7f:52:87:10:17:f0:af:97:7b:2f:29:
         3f:d5:eb:f3
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE/Mxnqi1ew+sNmGiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWIwNjY4YmUtMjdmMi00YWYxLTkwNGEtZWFlNGIyMGE1
YjQzMB4XDTI2MTExMTAyMDAxMloXDTI3MDIwOTAyMDAxMlowLzEtMCsGA1UEAxMk
N2M0ZDQ4ZDItN2JkOC00YzkxLThiYjAtN2E0ODE3ZjgzNjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOPKAlJWq+xv8q+5A/m5JHRYCSAoDBMmQmup
XDtjopUsiplb8RxEc1VNJKvV8ie75Xe5BBS0h+08XGVsM94ejNGg3d7Ah5zKl87o
rX1WBVtg0s40GdD1TMJ9zL4SNAk5S9VGqYUfiEQ8n4YwJ3EFiDKbWM0EIqRFDMtx
irelcsjD54U8yiUwyRy97ijlH/Yo2B1vQoHR4XWO2a7Xb9L6ltTuAwXIqq9J+z1A
YYDybSq6swdvPFBn0LCVRgGfOUmZ3QOBNQZNi0kyFTh8FMaYBfUt/0xzfPqw+4sX
ETLlRXre3f3shUVWO8n16FeYgWb1P18dsXjAkc4fROdFwrPCowIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCrMuJnihHiQJn8Hhf0duTgitnc3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9lYjA2
NjhiZS0yN2YyLTRhZjEtOTA0YS1lYWU0YjIwYTViNDMvNWEyZmNhYjgtNGE5Mi0z
MTJhLWJhNTAtNTJiYjY0M2ZhNTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZWIwNjY4YmUtMjdmMi00YWYxLTkw
NGEtZWFlNGIyMGE1YjQzL2ViMDY2OGJlLTI3ZjItNGFmMS05MDRhLWVhZTRiMjBh
NWI0My5jcmwwHwYDVR0jBBgwFoAUtu1lJftQRyd/k65GaIXp25UQoGwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9lYjA2NjhiZS0yN2YyLTRhZjEtOTA0YS1lYWU0
YjIwYTViNDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf9ADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCOA+cbn/UMSczgWTVopa9lCH5EI2tNX8cPS/zR7Lc7tZPswqx7aufb
vEVEizziIF2CKUSiuAaYiTfEmp+ABPVXdWHMI4lkzZ6jqtcajeR8s6e/6so/BRay
/RyDcPi76rdPFS1xfVnMBkBtITwtTmaSOsxxDPQ2F4+K9eMYRuhxOveFNACPTnlv
BqAAK21Qz4By7lJvEgb7xbxMp3w3I20xsefGEb8Wwrt7wj64TsyFjXYdNN5Y1kp6
8VtdfiAe2aZZfsiwWNC4kry1AFvFbNxvyOKQRk5O1tINLgQWRMNB91MB2Kv138wu
qoRjMKgN38Osf1KHEBfwr5d7Lyk/1evz
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:22:31 2026 by rpki-client