Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/b0a5c45a-5eeb-3ea0-833f-7f9c21d6f92b.roa
File:                     b0a5c45a-5eeb-3ea0-833f-7f9c21d6f92b.roa (raw, json)
Hash identifier:          Qv6GeBlKImElkr91QgA9e3gXGjDveT1ytnxcMUwvKbM=
Subject key identifier:   3F:35:79:B5:03:B6:CC:35:C5:17:C5:49:FE:BC:F2:36:4F:88:67:E2
Certificate issuer:       /CN=ea3f9044-c185-4062-8dad-240b32b11348
Certificate serial:       010D0C9F4328584F35E7C66FEA000EA19BBDD100
Authority key identifier: FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/b0a5c45a-5eeb-3ea0-833f-7f9c21d6f92b.roa
Signing time:             Fri 18 Sep 2026 01:00:12 +0000
ROA not before:           Fri 18 Sep 2026 01:00:12 +0000
ROA not after:            Thu 17 Dec 2026 02:00:12 +0000
asID:                     395661
IP address blocks:        2607:bc40:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:35:e7:c6:6f:ea:00:0e:a1:9b:bd:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea3f9044-c185-4062-8dad-240b32b11348
        Validity
            Not Before: Sep 18 01:00:12 2026 GMT
            Not After : Dec 17 02:00:12 2026 GMT
        Subject: CN=64cc606f-73f9-4b67-acf5-dec4c625c89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bf:e2:93:ce:0c:bd:60:37:8f:3c:4a:9f:27:
                    9b:02:eb:f4:78:5c:e8:c3:93:1d:74:f5:fe:a9:e8:
                    50:6d:07:b5:27:5c:a6:53:ab:86:e7:a5:57:e3:15:
                    e8:11:f3:bf:ab:3c:fc:54:9c:c4:7a:31:09:79:f1:
                    fc:5c:b0:1a:7d:b9:08:dc:9a:a7:43:d7:a8:8b:f4:
                    23:51:06:78:99:05:24:32:ae:7c:88:ee:33:29:1c:
                    3c:68:60:a4:1a:e2:43:01:fc:05:24:09:fc:0f:b4:
                    73:16:02:dd:9e:58:0c:49:a8:17:14:cc:eb:8f:f1:
                    be:44:a4:3e:40:b2:16:81:0c:c9:d2:c0:ef:97:43:
                    26:65:3b:36:8b:dc:8e:51:29:af:ce:50:c9:5e:9a:
                    79:6c:64:f2:f6:30:18:d3:1a:26:fb:61:f8:c4:d1:
                    91:91:9e:9e:f3:c5:7b:18:35:95:d6:17:17:26:9d:
                    38:42:09:c3:b7:03:e8:d6:b4:10:a8:fc:5f:5f:d0:
                    ee:6f:7a:b1:e6:c0:9d:35:73:95:2a:c5:10:56:15:
                    48:00:65:0f:b5:65:12:aa:8a:85:8e:64:98:ae:c5:
                    89:dd:3b:c5:87:06:0c:9d:db:75:e6:d4:1f:94:ae:
                    ae:a2:de:af:f2:95:cb:44:e8:c5:68:34:fb:cf:18:
                    c9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:35:79:B5:03:B6:CC:35:C5:17:C5:49:FE:BC:F2:36:4F:88:67:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/b0a5c45a-5eeb-3ea0-833f-7f9c21d6f92b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl

            X509v3 Authority Key Identifier:
                keyid:FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:bc40:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:c1:4d:ac:e4:b3:8d:7d:94:29:6c:c3:35:52:37:bf:6d:5a:
         de:86:71:79:5a:d2:9f:cf:09:11:b0:76:2c:63:1a:96:4f:4b:
         68:a8:8a:6d:d8:e1:97:c7:32:54:54:56:70:37:c6:fc:c8:95:
         e0:58:12:67:46:41:70:6f:ab:3a:ab:91:d1:11:34:61:37:83:
         42:65:5c:18:aa:19:86:a8:26:f6:59:d1:59:5a:1b:a8:6f:ce:
         1b:2b:b2:fc:6d:ff:a5:4c:cb:69:94:be:e4:65:57:38:f1:c2:
         83:de:52:b5:90:c1:b4:8c:a5:08:4f:9f:48:02:69:52:ab:79:
         dd:f4:88:b6:d1:a9:11:8a:e0:71:4c:f6:46:4c:57:58:ca:9b:
         f9:41:e8:15:30:f8:73:4b:d0:a8:47:13:ea:f4:b0:50:a1:46:
         45:a1:02:17:d6:a2:6a:86:19:f5:0d:6f:d5:65:cf:d5:1d:bf:
         e6:d1:10:96:ad:fa:94:21:15:34:86:29:55:c4:87:6e:15:33:
         98:88:79:63:ce:a3:2b:7e:94:14:bd:5c:72:69:a2:4a:18:6f:
         28:62:be:71:1f:31:96:db:8b:05:28:47:f7:73:89:f1:0f:9c:
         aa:29:62:82:d9:04:5d:4d:ad:fd:25:46:1f:39:4a:d0:fd:9e:
         e5:3e:8a:fb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8158Zv6gAOoZu90QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWEzZjkwNDQtYzE4NS00MDYyLThkYWQtMjQwYjMyYjEx
MzQ4MB4XDTI2MDkxODAxMDAxMloXDTI2MTIxNzAyMDAxMlowLzEtMCsGA1UEAxMk
NjRjYzYwNmYtNzNmOS00YjY3LWFjZjUtZGVjNGM2MjVjODllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb/ik84MvWA3jzxKnyebAuv0eFzow5MddPX+
qehQbQe1J1ymU6uG56VX4xXoEfO/qzz8VJzEejEJefH8XLAafbkI3JqnQ9eoi/Qj
UQZ4mQUkMq58iO4zKRw8aGCkGuJDAfwFJAn8D7RzFgLdnlgMSagXFMzrj/G+RKQ+
QLIWgQzJ0sDvl0MmZTs2i9yOUSmvzlDJXpp5bGTy9jAY0xom+2H4xNGRkZ6e88V7
GDWV1hcXJp04QgnDtwPo1rQQqPxfX9Dub3qx5sCdNXOVKsUQVhVIAGUPtWUSqoqF
jmSYrsWJ3TvFhwYMndt15tQflK6uot6v8pXLROjFaDT7zxjJAwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD81ebUDtsw1xRfFSf688jZPiGfiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lYTNm
OTA0NC1jMTg1LTQwNjItOGRhZC0yNDBiMzJiMTEzNDgvYjBhNWM0NWEtNWVlYi0z
ZWEwLTgzM2YtN2Y5YzIxZDZmOTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZWEzZjkwNDQtYzE4NS00MDYyLThk
YWQtMjQwYjMyYjExMzQ4L2VhM2Y5MDQ0LWMxODUtNDA2Mi04ZGFkLTI0MGIzMmIx
MTM0OC5jcmwwHwYDVR0jBBgwFoAU/qCdkBIn9seDsTYB8Pa28gt/KOYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lYTNmOTA0NC1jMTg1LTQwNjItOGRhZC0yNDBi
MzJiMTEzNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJge8QAEA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJPBTazks419lClswzVSN79tWt6GcXla0p/PCRGwdixjGpZPS2io
im3Y4ZfHMlRUVnA3xvzIleBYEmdGQXBvqzqrkdERNGE3g0JlXBiqGYaoJvZZ0Vla
G6hvzhsrsvxt/6VMy2mUvuRlVzjxwoPeUrWQwbSMpQhPn0gCaVKred30iLbRqRGK
4HFM9kZMV1jKm/lB6BUw+HNL0KhHE+r0sFChRkWhAhfWomqGGfUNb9Vlz9Udv+bR
EJat+pQhFTSGKVXEh24VM5iIeWPOoyt+lBS9XHJpokoYbyhivnEfMZbbiwUoR/dz
ifEPnKopYoLZBF1Nrf0lRh85StD9nuU+ivs=
-----END CERTIFICATE-----
Generated at Sun Oct 4 15:23:58 2026 by rpki-client