Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8e4c6fb7-9c11-39af-beb6-738e221457a1.roa
File:                     8e4c6fb7-9c11-39af-beb6-738e221457a1.roa (raw, json)
Hash identifier:          kL2x3BHaFXbDCYwAHFJlYcbLQAdJEoNLtqoKF9u58vY=
Subject key identifier:   3B:3D:21:3A:2A:7E:AA:21:7E:E7:85:80:83:F6:BE:9F:4F:F6:84:EB
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EE4F1E98AC28433281A37B480
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8e4c6fb7-9c11-39af-beb6-738e221457a1.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        2607:f750:2100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:e9:8a:c2:84:33:28:1a:37:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=bbde0ed6-c604-484c-9fca-5a04af381027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:31:0c:a3:1f:91:f7:5e:e8:f9:17:f9:96:ec:
                    e3:19:05:5c:35:f9:6b:f9:0c:8b:48:43:8d:e8:3b:
                    98:b7:1f:e0:f6:00:29:72:88:72:3e:1a:fc:93:19:
                    7f:42:1f:c5:4d:da:a9:7a:e5:96:45:fa:84:95:d4:
                    60:90:cd:df:b6:1b:83:27:b8:0d:0e:37:57:60:90:
                    69:60:51:2a:9f:3a:ab:43:65:14:d1:9f:9c:2a:96:
                    ba:77:54:75:71:85:27:3f:ee:12:ad:6b:5f:c0:b0:
                    22:d3:e7:ae:e4:c0:21:8a:9d:67:a0:26:c1:ca:ac:
                    44:1b:5e:22:51:84:f8:d7:ac:58:b3:17:b6:7b:c0:
                    98:b0:33:fd:6c:c1:86:e3:5a:70:48:46:8f:b1:76:
                    65:bc:3e:fe:04:b7:2c:ce:34:8f:82:08:08:52:e6:
                    5e:af:e1:40:67:d0:70:83:b3:00:7f:a0:91:42:ac:
                    92:52:68:40:6b:54:7d:a7:43:25:3f:7c:74:27:0d:
                    5a:a3:47:17:ff:1d:be:11:c4:ea:d1:b5:a7:7a:d9:
                    dd:0b:31:b1:9a:83:87:0b:cf:18:84:5e:b6:70:c4:
                    95:b3:67:7e:eb:05:9e:c2:98:6e:bf:95:15:ad:96:
                    03:24:62:1d:ca:82:64:f6:40:03:91:15:9e:6f:d5:
                    86:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3D:21:3A:2A:7E:AA:21:7E:E7:85:80:83:F6:BE:9F:4F:F6:84:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/8e4c6fb7-9c11-39af-beb6-738e221457a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:2100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:e0:54:74:1e:d2:0a:f9:68:d5:15:a9:6a:d9:95:c5:cd:99:
         fc:99:f4:c8:6c:10:30:df:e8:61:8b:5a:e5:a5:c7:63:51:ab:
         f7:ce:36:e4:8b:36:b2:21:34:e6:a9:c9:54:46:7c:b3:14:5c:
         7d:ac:6c:a2:a7:39:e4:89:89:80:0c:1b:7c:bf:f4:40:80:43:
         e4:bf:99:0a:96:34:65:ea:eb:70:72:05:24:dc:06:ba:f8:2d:
         68:c0:6d:9c:a3:99:13:88:66:ca:8e:40:de:29:84:03:ee:c5:
         68:17:98:db:fe:30:e8:cb:50:6c:ce:d0:38:f4:d9:0c:8f:6e:
         84:9a:64:4a:a4:e9:1b:44:08:b8:e0:ff:66:2d:65:bb:a5:98:
         7a:68:11:9e:03:7f:73:1f:a9:34:3d:17:0f:6d:ae:54:a9:77:
         b0:ea:66:26:f0:85:18:03:52:30:27:2f:39:c3:dc:80:62:a8:
         74:4c:86:df:8e:e7:ee:4f:12:66:5c:4e:18:d4:ca:d3:b6:c8:
         b7:ee:86:7f:f9:d2:76:fe:d5:ce:ee:31:49:d1:9d:1e:75:6e:
         f3:2d:2f:96:4b:f7:ca:c5:5c:12:41:dd:b6:52:e9:f3:c6:df:
         5a:bd:d3:ee:28:de:bd:23:56:08:57:2a:94:d9:3f:e1:18:0e:
         15:27:2f:11
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7k8emKwoQzKBo3tIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk
YmJkZTBlZDYtYzYwNC00ODRjLTlmY2EtNWEwNGFmMzgxMDI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTEMox+R917o+Rf5luzjGQVcNflr+QyLSEON
6DuYtx/g9gApcohyPhr8kxl/Qh/FTdqpeuWWRfqEldRgkM3fthuDJ7gNDjdXYJBp
YFEqnzqrQ2UU0Z+cKpa6d1R1cYUnP+4SrWtfwLAi0+eu5MAhip1noCbByqxEG14i
UYT416xYsxe2e8CYsDP9bMGG41pwSEaPsXZlvD7+BLcszjSPgggIUuZer+FAZ9Bw
g7MAf6CRQqySUmhAa1R9p0MlP3x0Jw1ao0cX/x2+EcTq0bWnetndCzGxmoOHC88Y
hF62cMSVs2d+6wWewphuv5UVrZYDJGIdyoJk9kADkRWeb9WG0wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDs9IToqfqohfueFgIP2vp9P9oTrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvOGU0YzZmYjctOWMxMS0z
OWFmLWJlYjYtNzM4ZTIyMTQ1N2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf3UCEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEALuBUdB7SCvlo1RWpatmVxc2Z/Jn0yGwQMN/oYYta5aXHY1Gr9842
5Is2siE05qnJVEZ8sxRcfaxsoqc55ImJgAwbfL/0QIBD5L+ZCpY0ZerrcHIFJNwG
uvgtaMBtnKOZE4hmyo5A3imEA+7FaBeY2/4w6MtQbM7QOPTZDI9uhJpkSqTpG0QI
uOD/Zi1lu6WYemgRngN/cx+pND0XD22uVKl3sOpmJvCFGANSMCcvOcPcgGKodEyG
347n7k8SZlxOGNTK07bIt+6Gf/nSdv7Vzu4xSdGdHnVu8y0vlkv3ysVcEkHdtlLp
88bfWr3T7ijevSNWCFcqlNk/4RgOFScvEQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 15:00:38 2026 by rpki-client