Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/88520099-5979-3c62-8e90-33e24dd059b2.roa
File:                     88520099-5979-3c62-8e90-33e24dd059b2.roa (raw, json)
Hash identifier:          1UqtvZ1WUwgMaLyLEKT1h/wtu80VKQ/mCfDXsv6dfuI=
Subject key identifier:   B9:CA:03:43:D6:16:C4:A8:A1:1E:1D:52:1E:53:BD:E2:3C:71:0F:02
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EE4F1EF510FE5B03291248280
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/88520099-5979-3c62-8e90-33e24dd059b2.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        2607:f750:5000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:ef:51:0f:e5:b0:32:91:24:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=58e29adc-16ee-473d-a2c1-feba7156833f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f8:d0:45:d6:51:28:95:a0:5d:0a:23:01:dd:
                    9e:b1:6e:4d:f9:72:38:93:f4:a8:5a:d6:ed:60:3f:
                    fb:8b:23:e9:fd:bc:a4:57:e5:50:ca:4d:ef:22:38:
                    f8:b9:cf:d5:ab:15:80:1b:28:a3:52:e7:32:9f:a0:
                    f0:9b:94:e9:65:72:22:7c:79:7b:cc:40:e6:fd:f9:
                    b4:6b:a1:dc:6b:54:c1:b7:e5:99:a4:47:33:8a:40:
                    03:34:dd:2b:b3:8b:c5:a9:c8:4d:d6:11:ab:5b:cd:
                    6a:55:c0:27:1d:e1:08:f3:c8:e2:0e:e8:96:7c:d3:
                    26:15:56:f6:c1:b3:86:84:b5:ac:a1:b2:31:2c:70:
                    42:88:dd:0c:fe:de:f8:0f:3e:59:94:77:a9:10:19:
                    8a:09:5a:15:fd:b4:93:9f:36:c1:bb:14:5e:be:53:
                    92:f6:e2:4d:5f:c2:22:b6:7d:b2:f9:d2:fe:75:3d:
                    7a:74:6a:c0:3e:24:74:73:71:ff:08:45:b2:7b:5a:
                    94:ee:95:f3:31:cf:61:46:59:7a:49:28:e9:c2:be:
                    84:87:b5:4a:42:28:b1:72:9a:74:be:49:51:ba:7e:
                    16:12:c4:8b:1c:45:c8:fd:2b:b0:0a:59:c8:ea:c8:
                    f9:49:19:8e:f9:7b:ec:a3:9c:ab:25:fa:70:dc:cc:
                    7f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CA:03:43:D6:16:C4:A8:A1:1E:1D:52:1E:53:BD:E2:3C:71:0F:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/88520099-5979-3c62-8e90-33e24dd059b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:5000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:b2:fe:42:32:ba:90:2f:b4:3a:8e:d2:e0:9e:81:ed:f3:d0:
         75:16:28:2f:43:d9:7b:d6:2e:02:1a:a6:2f:a1:1e:3d:20:64:
         d0:58:d4:0b:fc:32:55:6e:e4:f1:15:7a:01:db:59:45:88:57:
         83:34:0f:23:41:fe:80:09:55:ff:b5:46:10:4a:91:cd:2a:9b:
         b6:e5:57:51:6a:2d:bf:83:b8:70:ce:b1:ea:84:34:74:50:c6:
         1d:b0:f0:69:02:da:95:e5:18:7e:59:bb:dd:3e:70:f6:22:c2:
         05:8a:fc:dd:32:dd:6b:ba:ee:8a:7d:2f:31:d5:26:5c:f3:6e:
         b9:52:ef:e6:f9:69:24:08:c5:dd:44:48:60:01:de:42:1c:30:
         88:65:95:e1:11:73:d7:20:3d:98:b6:c5:dc:f0:38:2a:82:b1:
         e2:3a:2a:81:95:ea:ac:92:8a:6b:73:69:cf:3f:9d:e8:d4:35:
         65:51:6f:cb:79:1c:e2:72:44:4c:e4:1c:a7:78:8a:02:11:a1:
         38:cd:2a:04:9c:c9:d2:58:6e:da:21:1a:a9:40:75:11:94:e4:
         aa:46:47:91:4b:66:f6:1d:65:03:08:a0:b0:56:1e:1e:a3:bd:
         4f:40:9f:e5:b3:e8:28:91:c9:1d:87:43:ec:a7:51:0f:7e:ea:
         09:44:73:23
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7k8e9RD+WwMpEkgoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk
NThlMjlhZGMtMTZlZS00NzNkLWEyYzEtZmViYTcxNTY4MzNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfjQRdZRKJWgXQojAd2esW5N+XI4k/SoWtbt
YD/7iyPp/bykV+VQyk3vIjj4uc/VqxWAGyijUucyn6Dwm5TpZXIifHl7zEDm/fm0
a6Hca1TBt+WZpEczikADNN0rs4vFqchN1hGrW81qVcAnHeEI88jiDuiWfNMmFVb2
wbOGhLWsobIxLHBCiN0M/t74Dz5ZlHepEBmKCVoV/bSTnzbBuxRevlOS9uJNX8Ii
tn2y+dL+dT16dGrAPiR0c3H/CEWye1qU7pXzMc9hRll6SSjpwr6Eh7VKQiixcpp0
vklRun4WEsSLHEXI/SuwClnI6sj5SRmO+Xvso5yrJfpw3Mx/yQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLnKA0PWFsSooR4dUh5TveI8cQ8CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvODg1MjAwOTktNTk3OS0z
YzYyLThlOTAtMzNlMjRkZDA1OWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf3UFAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEACLL+QjK6kC+0Oo7S4J6B7fPQdRYoL0PZe9YuAhqmL6EePSBk0FjU
C/wyVW7k8RV6AdtZRYhXgzQPI0H+gAlV/7VGEEqRzSqbtuVXUWotv4O4cM6x6oQ0
dFDGHbDwaQLaleUYflm73T5w9iLCBYr83TLda7ruin0vMdUmXPNuuVLv5vlpJAjF
3URIYAHeQhwwiGWV4RFz1yA9mLbF3PA4KoKx4joqgZXqrJKKa3Npzz+d6NQ1ZVFv
y3kc4nJETOQcp3iKAhGhOM0qBJzJ0lhu2iEaqUB1EZTkqkZHkUtm9h1lAwigsFYe
HqO9T0Cf5bPoKJHJHYdD7KdRD37qCURzIw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:44:54 2026 by rpki-client