Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ad8fbbdd-131b-3961-932e-633657bf038e.roa
File:                     ad8fbbdd-131b-3961-932e-633657bf038e.roa (raw, json)
Hash identifier:          tlmSP6d1ec8GhTPptaWEsKaVrYGYimm3m85+z/pMf9g=
Subject key identifier:   CD:11:F2:B0:94:0D:BF:6E:6C:A6:F5:72:2D:24:D1:E3:E0:19:2D:E8
Certificate issuer:       /CN=ea3f9044-c185-4062-8dad-240b32b11348
Certificate serial:       010D0C9F4328584F31B7CEDCDF0FD65951BDCC00
Authority key identifier: FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ad8fbbdd-131b-3961-932e-633657bf038e.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     136557
IP address blocks:        2607:bc40:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:ce:dc:df:0f:d6:59:51:bd:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea3f9044-c185-4062-8dad-240b32b11348
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=66d813ae-ae5c-4076-8618-6c3772b5ab75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3c:6d:99:97:9a:6a:ac:fb:52:4b:9a:8b:f9:
                    d2:5a:f4:c8:ac:58:54:81:66:30:ab:e6:43:68:f6:
                    2f:e0:a5:53:76:49:13:c1:d5:64:5f:39:d3:11:45:
                    fc:50:64:40:4e:95:16:9e:fb:63:4d:b5:ab:2f:dd:
                    1e:64:48:6b:be:ba:d9:c4:39:18:66:be:e0:87:97:
                    e9:b3:10:f0:3b:b9:b8:cd:ee:d9:7f:79:a6:b1:35:
                    4a:c4:81:16:a9:cd:59:e7:4d:ca:cb:21:b2:57:7a:
                    7c:8f:db:88:c3:0e:17:67:0c:eb:87:0a:0b:9f:d6:
                    a9:69:fc:3d:ff:db:68:f9:85:14:77:7f:c0:05:1c:
                    2a:04:ab:9d:70:55:a2:11:c4:19:f1:b8:6d:98:3e:
                    4e:48:af:50:7b:73:9a:b1:81:1a:04:40:37:4d:2c:
                    39:18:9d:2a:3f:56:8f:03:ca:ad:b6:3f:c7:b6:e7:
                    68:4c:9b:81:e2:79:e2:0f:88:95:bc:64:6b:6a:24:
                    74:31:b3:f0:f4:ae:a5:58:a6:c2:76:75:e8:8b:31:
                    ab:ef:da:ac:1c:f2:90:d5:ae:e3:0c:fe:eb:76:ed:
                    17:3b:fd:99:b2:2d:78:89:c8:63:8a:27:10:3f:ce:
                    8f:0c:38:21:3d:4e:83:95:0f:6b:9b:f4:af:0f:3f:
                    e7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:11:F2:B0:94:0D:BF:6E:6C:A6:F5:72:2D:24:D1:E3:E0:19:2D:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ad8fbbdd-131b-3961-932e-633657bf038e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl

            X509v3 Authority Key Identifier:
                keyid:FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:bc40:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:90:4a:43:b4:a5:31:93:96:ae:00:8e:e8:d8:cd:68:04:63:
         8d:61:9c:4f:bc:81:8e:5f:2a:7f:9c:c5:2b:d1:e9:fc:9a:0f:
         0a:f2:c3:2a:65:88:40:7b:9d:7b:cf:0b:bc:ad:82:a6:31:79:
         7c:99:6a:04:7d:b8:ed:62:90:2d:c7:c1:e4:9c:12:19:f3:19:
         77:4f:14:91:10:a3:4e:f5:31:25:63:55:93:8e:32:8c:d5:a5:
         c3:3c:52:1e:7f:62:8f:46:bf:a6:08:e8:da:83:31:e6:d8:36:
         12:72:f2:d0:a6:9e:4e:c6:51:a7:a9:34:d0:5b:f6:a5:f2:b9:
         cf:ba:22:ce:b9:0c:2b:8c:3f:18:4c:e2:ca:9b:e9:a6:55:c4:
         1d:32:ff:6a:60:5c:e9:18:5d:e2:d1:86:72:09:b4:15:26:ff:
         9a:c4:03:e5:b1:4d:07:61:17:c6:7a:f8:26:1a:19:5e:bf:6b:
         1c:3b:1b:94:07:2e:0c:0c:a4:f1:34:62:b9:e9:fa:8c:45:50:
         45:50:b9:1f:63:ed:5b:bd:76:8a:2f:35:16:42:70:98:f6:10:
         40:5b:c7:8c:4d:04:ce:e5:86:f8:96:93:4d:6d:4a:6b:30:44:
         77:fb:a0:4d:94:98:54:f8:4f:ef:48:97:b1:f1:8e:95:ea:6b:
         75:5b:94:c4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8xt87c3w/WWVG9zAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWEzZjkwNDQtYzE4NS00MDYyLThkYWQtMjQwYjMyYjEx
MzQ4MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk
NjZkODEzYWUtYWU1Yy00MDc2LTg2MTgtNmMzNzcyYjVhYjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjxtmZeaaqz7Ukuai/nSWvTIrFhUgWYwq+ZD
aPYv4KVTdkkTwdVkXznTEUX8UGRATpUWnvtjTbWrL90eZEhrvrrZxDkYZr7gh5fp
sxDwO7m4ze7Zf3mmsTVKxIEWqc1Z503KyyGyV3p8j9uIww4XZwzrhwoLn9apafw9
/9to+YUUd3/ABRwqBKudcFWiEcQZ8bhtmD5OSK9Qe3OasYEaBEA3TSw5GJ0qP1aP
A8qttj/HtudoTJuB4nniD4iVvGRraiR0MbPw9K6lWKbCdnXoizGr79qsHPKQ1a7j
DP7rdu0XO/2Zsi14ichjiicQP86PDDghPU6DlQ9rm/SvDz/nrwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM0R8rCUDb9ubKb1ci0k0ePgGS3oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lYTNm
OTA0NC1jMTg1LTQwNjItOGRhZC0yNDBiMzJiMTEzNDgvYWQ4ZmJiZGQtMTMxYi0z
OTYxLTkzMmUtNjMzNjU3YmYwMzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZWEzZjkwNDQtYzE4NS00MDYyLThk
YWQtMjQwYjMyYjExMzQ4L2VhM2Y5MDQ0LWMxODUtNDA2Mi04ZGFkLTI0MGIzMmIx
MTM0OC5jcmwwHwYDVR0jBBgwFoAU/qCdkBIn9seDsTYB8Pa28gt/KOYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lYTNmOTA0NC1jMTg1LTQwNjItOGRhZC0yNDBi
MzJiMTEzNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJge8QAEC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACSQSkO0pTGTlq4AjujYzWgEY41hnE+8gY5fKn+cxSvR6fyaDwry
wypliEB7nXvPC7ytgqYxeXyZagR9uO1ikC3HweScEhnzGXdPFJEQo071MSVjVZOO
MozVpcM8Uh5/Yo9Gv6YI6NqDMebYNhJy8tCmnk7GUaepNNBb9qXyuc+6Is65DCuM
PxhM4sqb6aZVxB0y/2pgXOkYXeLRhnIJtBUm/5rEA+WxTQdhF8Z6+CYaGV6/axw7
G5QHLgwMpPE0Yrnp+oxFUEVQuR9j7Vu9doovNRZCcJj2EEBbx4xNBM7lhviWk01t
SmswRHf7oE2UmFT4T+9Il7HxjpXqa3VblMQ=
-----END CERTIFICATE-----
Generated at Wed Sep 30 19:45:59 2026 by rpki-client