Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/31edd340-4cbc-359c-a094-0098c49ec0c2.roa
File:                     31edd340-4cbc-359c-a094-0098c49ec0c2.roa (raw, json)
Hash identifier:          7j8988kiDvUKBx8AqFxk6aLPHpYPUP0avLKZ2RsRsRs=
Subject key identifier:   79:47:0A:C1:72:EC:C3:1B:DB:27:66:67:FA:15:5C:B7:08:FC:DF:A1
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F1F9244AC0557FB8F9E14BD00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/31edd340-4cbc-359c-a094-0098c49ec0c2.roa
Signing time:             Thu 10 Sep 2026 01:00:12 +0000
ROA not before:           Thu 10 Sep 2026 01:00:12 +0000
ROA not after:            Wed 09 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        2607:f750:3800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1f:92:44:ac:05:57:fb:8f:9e:14:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 10 01:00:12 2026 GMT
            Not After : Dec  9 02:00:12 2026 GMT
        Subject: CN=cc5c76fa-b1c8-4fd3-ba38-7530513464b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f0:dc:eb:4a:6a:fc:39:8b:cb:d8:fe:29:3b:
                    a0:62:a7:3c:49:0c:12:97:03:61:9d:53:f6:0c:98:
                    2d:88:c9:44:d9:4f:e4:f2:c7:f4:9f:f3:d0:f0:32:
                    a5:88:7f:d2:b7:d3:17:a7:9c:bb:1f:8f:46:79:74:
                    af:1d:9a:26:b5:ec:ad:3a:14:89:35:80:61:57:07:
                    b6:c2:57:1f:c7:7d:44:9d:58:2e:bf:ee:b9:e5:95:
                    2d:4c:2f:18:5e:a3:c2:2f:9b:59:54:7f:95:49:8a:
                    6f:76:34:9e:31:0c:46:32:23:77:68:34:09:9f:7f:
                    bc:c6:67:9a:7e:0d:8b:07:01:46:49:1c:55:4f:89:
                    f1:3f:7b:f4:80:4a:81:f1:31:e5:fa:68:0e:e0:4c:
                    a9:c1:9c:28:ec:7a:11:c8:52:0e:e9:83:66:3d:27:
                    7e:9c:05:a4:2e:6a:38:29:d3:27:9c:70:93:d3:3e:
                    58:0f:7f:ed:0b:fa:3b:8b:8b:5e:37:88:c9:bd:87:
                    97:92:e5:92:de:d1:62:f1:8f:6a:2f:6f:30:c6:04:
                    f5:6c:36:e7:79:8d:4e:5c:e7:d8:c6:a8:0b:c4:4d:
                    fa:2c:39:fd:fc:25:dc:f2:b5:3f:db:4b:f0:61:8b:
                    f0:90:1b:ea:4e:62:c3:2b:e5:29:dd:b8:01:1e:de:
                    b4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:47:0A:C1:72:EC:C3:1B:DB:27:66:67:FA:15:5C:B7:08:FC:DF:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/31edd340-4cbc-359c-a094-0098c49ec0c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:3800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:83:1f:27:00:e8:c4:01:4f:e2:9c:c9:a7:62:b7:d4:c7:b2:
         03:10:38:f7:d1:37:ab:4f:ad:7b:44:ce:b4:24:42:d0:ed:07:
         8f:81:da:05:28:69:f7:2c:f4:5d:63:5e:d1:1c:a6:8c:f4:10:
         1c:94:63:9d:17:ca:c9:fb:96:a7:ef:c9:3b:1c:be:66:8b:cd:
         5a:85:9f:99:8d:56:1d:52:43:e5:25:6e:15:29:c6:6f:72:96:
         28:ef:b3:31:65:fa:af:d3:17:e8:b4:39:83:28:36:e1:ef:7c:
         5f:e0:15:90:ea:d2:17:3f:f5:08:81:40:65:25:2d:b6:20:80:
         07:ef:6e:2b:0e:96:a4:a0:ea:08:3d:50:45:44:98:7a:fc:fb:
         7e:08:81:94:dc:21:d7:40:b1:36:9f:11:c7:46:86:24:9c:61:
         55:39:e9:c4:ce:79:d4:b9:31:8a:34:23:62:3b:82:25:de:6d:
         08:23:cc:90:c8:c5:39:24:8b:f8:2a:a0:2c:6b:ce:95:44:16:
         12:24:e5:ce:39:01:8f:49:4b:9b:91:eb:d2:e4:b1:dd:36:7c:
         d1:f5:ff:d5:31:91:39:50:14:19:24:8c:39:f9:53:9e:ac:5f:
         9f:55:5f:c9:ed:37:f5:20:11:30:64:3d:e4:c7:eb:f4:58:4a:
         dc:c1:ec:ef
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8fkkSsBVf7j54UvQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDkxMDAxMDAxMloXDTI2MTIwOTAyMDAxMlowLzEtMCsGA1UEAxMk
Y2M1Yzc2ZmEtYjFjOC00ZmQzLWJhMzgtNzUzMDUxMzQ2NGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvDc60pq/DmLy9j+KTugYqc8SQwSlwNhnVP2
DJgtiMlE2U/k8sf0n/PQ8DKliH/St9MXp5y7H49GeXSvHZomteytOhSJNYBhVwe2
wlcfx31EnVguv+655ZUtTC8YXqPCL5tZVH+VSYpvdjSeMQxGMiN3aDQJn3+8xmea
fg2LBwFGSRxVT4nxP3v0gEqB8THl+mgO4EypwZwo7HoRyFIO6YNmPSd+nAWkLmo4
KdMnnHCT0z5YD3/tC/o7i4teN4jJvYeXkuWS3tFi8Y9qL28wxgT1bDbneY1OXOfY
xqgLxE36LDn9/CXc8rU/20vwYYvwkBvqTmLDK+Up3bgBHt60sQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHlHCsFy7MMb2ydmZ/oVXLcI/N+hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMzFlZGQzNDAtNGNiYy0z
NTljLWEwOTQtMDA5OGM0OWVjMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf3UDgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEALIMfJwDoxAFP4pzJp2K31MeyAxA499E3q0+te0TOtCRC0O0Hj4Ha
BShp9yz0XWNe0RymjPQQHJRjnRfKyfuWp+/JOxy+ZovNWoWfmY1WHVJD5SVuFSnG
b3KWKO+zMWX6r9MX6LQ5gyg24e98X+AVkOrSFz/1CIFAZSUttiCAB+9uKw6WpKDq
CD1QRUSYevz7fgiBlNwh10CxNp8Rx0aGJJxhVTnpxM551LkxijQjYjuCJd5tCCPM
kMjFOSSL+CqgLGvOlUQWEiTlzjkBj0lLm5Hr0uSx3TZ80fX/1TGROVAUGSSMOflT
nqxfn1Vfye039SARMGQ95Mfr9FhK3MHs7w==
-----END CERTIFICATE-----
Generated at Mon Sep 28 22:51:44 2026 by rpki-client