Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/631036c5-3cea-3dae-9c08-96cf6e790c65.roa
File:                     631036c5-3cea-3dae-9c08-96cf6e790c65.roa (raw, json)
Hash identifier:          ugDkLhbjjefr75qmGux2G1TWuNl5mlGZ4Pq9TZ7n5pU=
Subject key identifier:   CA:96:36:96:EC:84:9B:27:19:50:A2:FA:4C:BB:F0:63:47:93:30:E2
Certificate issuer:       /CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756
Certificate serial:       010D0C9F4328584F46A7E5F22742DA19C3B9AD80
Authority key identifier: 8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/631036c5-3cea-3dae-9c08-96cf6e790c65.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     53486
IP address blocks:        2607:eb00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:e5:f2:27:42:da:19:c3:b9:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=da3893aa-3644-4754-b28e-fe3bef533117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1b:6a:92:c4:78:3f:8e:73:d2:f6:01:87:fd:
                    3f:98:1e:4a:dc:c0:04:a2:a9:8d:d9:6a:f1:87:31:
                    f1:87:fb:1d:92:b6:b1:c4:43:a7:f3:92:d9:e9:8a:
                    81:d6:4f:d8:64:86:2f:24:16:72:ee:18:a2:15:c1:
                    65:12:b6:0c:23:54:dd:0e:79:29:2d:1c:02:86:01:
                    f5:30:d5:f3:67:4a:5a:2d:0d:ed:35:52:a9:e3:5d:
                    d8:f3:eb:3e:6e:ae:a5:65:b4:a1:8e:86:5f:78:c1:
                    f8:11:ca:10:81:8f:50:b6:00:8a:73:58:1a:55:f6:
                    73:8d:02:fb:05:33:0e:50:d6:90:46:5a:a6:3d:0e:
                    b0:53:27:77:2b:d0:b5:cc:29:18:bf:5a:a2:a2:33:
                    7a:b4:22:6c:2a:34:97:51:26:78:1c:7e:de:46:61:
                    e0:10:5c:46:b4:fd:4a:6f:f4:ca:55:9c:f5:6a:e7:
                    60:8a:62:4d:01:89:76:7a:0f:df:87:ef:99:75:a6:
                    fa:0b:ef:77:3c:b2:ec:74:03:34:14:83:b3:bb:e6:
                    f5:8e:4a:5b:4f:f4:e5:fd:05:8d:ec:aa:ce:2a:95:
                    b4:7a:91:35:8c:6e:99:b5:38:d2:d7:36:c6:ac:86:
                    17:6f:c3:bd:c9:8a:22:19:d3:b4:30:b0:7a:8f:e2:
                    43:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:96:36:96:EC:84:9B:27:19:50:A2:FA:4C:BB:F0:63:47:93:30:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/631036c5-3cea-3dae-9c08-96cf6e790c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl

            X509v3 Authority Key Identifier:
                keyid:8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:eb00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:e5:e7:e2:92:63:db:c9:06:85:ad:c0:fe:bd:db:44:d3:eb:
         fa:6b:03:42:2b:48:d7:ec:a0:6f:e5:a2:16:44:c9:4e:56:77:
         37:f2:fa:1a:d3:6a:52:fc:b3:98:48:f2:9d:fb:b4:b0:3c:5f:
         b0:22:b8:50:77:97:b7:d2:af:82:88:7c:d9:96:81:14:fa:1c:
         2b:f7:b2:bb:92:86:bc:f6:75:58:b8:97:2d:a4:b4:bc:0d:25:
         fc:cf:3b:7f:97:f5:88:4b:4a:9f:12:6a:ca:66:ec:b1:6d:17:
         32:e2:dc:b9:9c:f1:7e:68:fa:8d:e9:6e:8d:5b:ff:a5:ca:12:
         49:27:84:08:44:54:81:7c:02:ea:20:f9:60:2b:22:a7:b8:97:
         ab:38:79:f1:c6:3b:6a:8e:8c:76:40:65:c1:3b:89:76:0e:d1:
         63:59:d4:3e:4b:d5:b5:c0:83:be:99:5b:61:6a:b7:c9:20:08:
         56:99:b9:c3:be:b2:6d:85:0d:b5:70:79:46:20:0a:47:f5:f3:
         04:f2:77:6a:5a:85:00:89:66:d7:39:07:75:75:3c:67:9c:d1:
         ed:ee:4c:89:e1:68:e2:e5:60:03:d4:1d:95:d1:34:c5:19:f3:
         2c:03:88:bc:0a:3c:f9:1a:d7:96:da:1c:e4:0a:92:7c:f0:2e:
         a2:cf:8c:29
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Gp+XyJ0LaGcO5rYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODk1YjkxZGQtM2ExZi00NmU4LTg4ZTktMWEwNmExYzg4
NzU2MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk
ZGEzODkzYWEtMzY0NC00NzU0LWIyOGUtZmUzYmVmNTMzMTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhtqksR4P45z0vYBh/0/mB5K3MAEoqmN2Wrx
hzHxh/sdkraxxEOn85LZ6YqB1k/YZIYvJBZy7hiiFcFlErYMI1TdDnkpLRwChgH1
MNXzZ0paLQ3tNVKp413Y8+s+bq6lZbShjoZfeMH4EcoQgY9QtgCKc1gaVfZzjQL7
BTMOUNaQRlqmPQ6wUyd3K9C1zCkYv1qiojN6tCJsKjSXUSZ4HH7eRmHgEFxGtP1K
b/TKVZz1audgimJNAYl2eg/fh++Zdab6C+93PLLsdAM0FIOzu+b1jkpbT/Tl/QWN
7KrOKpW0epE1jG6ZtTjS1zbGrIYXb8O9yYoiGdO0MLB6j+JDuwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMqWNpbshJsnGVCi+ky78GNHkzDiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84OTVi
OTFkZC0zYTFmLTQ2ZTgtODhlOS0xYTA2YTFjODg3NTYvNjMxMDM2YzUtM2NlYS0z
ZGFlLTljMDgtOTZjZjZlNzkwYzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODk1YjkxZGQtM2ExZi00NmU4LTg4
ZTktMWEwNmExYzg4NzU2Lzg5NWI5MWRkLTNhMWYtNDZlOC04OGU5LTFhMDZhMWM4
ODc1Ni5jcmwwHwYDVR0jBBgwFoAUi6NwzMiWbBSrnLe/LtvxZr9jqMUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84OTViOTFkZC0zYTFmLTQ2ZTgtODhlOS0xYTA2
YTFjODg3NTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfrADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAT5efikmPbyQaFrcD+vdtE0+v6awNCK0jX7KBv5aIWRMlOVnc38voa
02pS/LOYSPKd+7SwPF+wIrhQd5e30q+CiHzZloEU+hwr97K7koa89nVYuJctpLS8
DSX8zzt/l/WIS0qfEmrKZuyxbRcy4ty5nPF+aPqN6W6NW/+lyhJJJ4QIRFSBfALq
IPlgKyKnuJerOHnxxjtqjox2QGXBO4l2DtFjWdQ+S9W1wIO+mVtharfJIAhWmbnD
vrJthQ21cHlGIApH9fME8ndqWoUAiWbXOQd1dTxnnNHt7kyJ4Wji5WAD1B2V0TTF
GfMsA4i8Cjz5GteW2hzkCpJ88C6iz4wp
-----END CERTIFICATE-----
Generated at Sun Oct 4 13:17:15 2026 by rpki-client