Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/18bc4e88-1e40-35a4-9b63-f8dad0452b22.roa
File:                     18bc4e88-1e40-35a4-9b63-f8dad0452b22.roa (raw, json)
Hash identifier:          T4qdF8grUnqfJ2oCMEfbeL5V+IMyoP12rMj8SYg9zjs=
Subject key identifier:   02:20:CE:6F:B4:8B:15:2D:CE:8C:DD:E9:E7:00:77:94:A3:DC:4F:C3
Certificate issuer:       /CN=5a154205-b480-44eb-8ce6-252aa97d28bd
Certificate serial:       010D0C9F4328584F9638612567840AF045447F80
Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/18bc4e88-1e40-35a4-9b63-f8dad0452b22.roa
Signing time:             Thu 22 Oct 2026 13:00:13 +0000
ROA not before:           Thu 22 Oct 2026 13:00:13 +0000
ROA not after:            Wed 20 Jan 2027 14:00:13 +0000
asID:                     138415
IP address blocks:        2604:1420::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:96:38:61:25:67:84:0a:f0:45:44:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd
        Validity
            Not Before: Oct 22 13:00:13 2026 GMT
            Not After : Jan 20 14:00:13 2027 GMT
        Subject: CN=24fffb0c-eb70-4d30-91da-59d8baf3ea6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:53:f1:1a:8e:d1:53:0c:44:01:05:a4:e9:b6:
                    17:33:56:59:54:b9:0a:a3:5a:51:b1:56:cc:1b:7e:
                    3c:b0:25:f5:8d:b9:8a:62:8d:b0:3d:2b:a6:f7:50:
                    0d:61:d2:24:8a:84:53:0e:3b:29:23:43:82:37:af:
                    55:9b:ad:a0:19:84:b3:58:5b:5c:51:a9:8c:58:c8:
                    78:90:54:7f:be:01:ca:25:1a:75:59:e8:fe:b9:8d:
                    54:22:dc:8d:30:89:9d:6f:2b:cc:53:a9:a3:cc:3f:
                    45:98:df:6c:5b:89:f1:8e:fc:77:04:3f:56:2f:90:
                    b0:2f:22:08:a3:a7:64:22:92:84:93:4d:1b:26:14:
                    94:fa:ef:72:bb:5e:75:72:5b:67:2e:41:03:be:cd:
                    92:bd:dc:cf:27:aa:89:50:41:02:c4:1a:d7:c8:6f:
                    13:b3:0e:21:61:9d:68:88:94:26:31:bb:92:cc:b7:
                    db:7c:7a:07:19:29:aa:f7:e2:f1:1f:70:dc:86:f9:
                    5c:04:c3:fb:0f:c5:36:31:07:04:4c:6e:a4:f8:fb:
                    c2:e1:53:ec:da:b8:3f:8d:78:a4:10:e4:40:dc:75:
                    fd:05:f9:14:98:45:63:fe:52:85:02:eb:ae:c3:75:
                    95:6d:36:dc:6c:2d:33:98:52:67:91:05:e8:f2:53:
                    69:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:20:CE:6F:B4:8B:15:2D:CE:8C:DD:E9:E7:00:77:94:A3:DC:4F:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/18bc4e88-1e40-35a4-9b63-f8dad0452b22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl

            X509v3 Authority Key Identifier:
                keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1420::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f0:16:3c:1a:d5:66:ff:f1:3b:0e:4d:18:57:8b:bf:4b:da:
         e0:8c:39:2d:89:28:5f:64:02:95:f4:b5:51:84:dc:40:90:5c:
         55:fc:a3:7f:1a:10:a2:be:a5:e0:bd:e5:5d:6f:b2:e3:8f:c2:
         92:d9:dc:84:fc:06:c3:09:38:31:81:b6:a3:d7:39:5e:be:18:
         65:ec:8b:1b:10:6f:17:10:2d:70:18:58:ee:65:72:d7:b3:5b:
         a9:85:a0:ff:39:04:d3:d7:04:64:15:7a:26:8f:31:86:94:d7:
         09:53:44:01:13:b0:ba:f7:c3:94:cc:fd:58:d2:9e:5e:51:1d:
         69:30:f9:da:e1:9b:49:3b:7d:23:44:6b:29:9e:d4:29:2d:3c:
         66:87:04:07:68:3a:28:ec:ad:c9:44:77:e5:75:58:6d:22:f8:
         34:eb:52:19:c5:00:90:9b:95:55:3b:cf:ad:1b:72:64:3c:4f:
         69:cf:ae:6f:7b:5c:fd:b5:c1:23:dc:63:60:c0:ba:13:a6:e1:
         48:c9:02:b6:2b:c0:51:51:a1:37:c2:8b:5f:e0:a2:52:99:0e:
         7b:63:b7:06:9d:91:1d:b4:5c:74:e5:3f:dd:54:30:38:0e:0d:
         ae:e9:83:68:05:19:17:5b:1c:39:9b:cf:09:85:0b:2a:be:f1:
         95:70:24:43
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE+WOGElZ4QK8EVEf4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWExNTQyMDUtYjQ4MC00NGViLThjZTYtMjUyYWE5N2Qy
OGJkMB4XDTI2MTAyMjEzMDAxM1oXDTI3MDEyMDE0MDAxM1owLzEtMCsGA1UEAxMk
MjRmZmZiMGMtZWI3MC00ZDMwLTkxZGEtNTlkOGJhZjNlYTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FPxGo7RUwxEAQWk6bYXM1ZZVLkKo1pRsVbM
G348sCX1jbmKYo2wPSum91ANYdIkioRTDjspI0OCN69Vm62gGYSzWFtcUamMWMh4
kFR/vgHKJRp1Wej+uY1UItyNMImdbyvMU6mjzD9FmN9sW4nxjvx3BD9WL5CwLyII
o6dkIpKEk00bJhSU+u9yu151cltnLkEDvs2SvdzPJ6qJUEECxBrXyG8Tsw4hYZ1o
iJQmMbuSzLfbfHoHGSmq9+LxH3DchvlcBMP7D8U2MQcETG6k+PvC4VPs2rg/jXik
EORA3HX9BfkUmEVj/lKFAuuuw3WVbTbcbC0zmFJnkQXo8lNpyQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAIgzm+0ixUtzozd6ecAd5Sj3E/DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81YTE1
NDIwNS1iNDgwLTQ0ZWItOGNlNi0yNTJhYTk3ZDI4YmQvMThiYzRlODgtMWU0MC0z
NWE0LTliNjMtZjhkYWQwNDUyYjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNWExNTQyMDUtYjQ4MC00NGViLThj
ZTYtMjUyYWE5N2QyOGJkLzVhMTU0MjA1LWI0ODAtNDRlYi04Y2U2LTI1MmFhOTdk
MjhiZC5jcmwwHwYDVR0jBBgwFoAUZ0jHwigOJcT/6bz7JSsbuo0vU8UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi81YTE1NDIwNS1iNDgwLTQ0ZWItOGNlNi0yNTJh
YTk3ZDI4YmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQUIDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB+8BY8GtVm//E7Dk0YV4u/S9rgjDktiShfZAKV9LVRhNxAkFxV/KN/
GhCivqXgveVdb7Ljj8KS2dyE/AbDCTgxgbaj1zlevhhl7IsbEG8XEC1wGFjuZXLX
s1uphaD/OQTT1wRkFXomjzGGlNcJU0QBE7C698OUzP1Y0p5eUR1pMPna4ZtJO30j
RGspntQpLTxmhwQHaDoo7K3JRHfldVhtIvg061IZxQCQm5VVO8+tG3JkPE9pz65v
e1z9tcEj3GNgwLoTpuFIyQK2K8BRUaE3wotf4KJSmQ57Y7cGnZEdtFx05T/dVDA4
Dg2u6YNoBRkXWxw5m88JhQsqvvGVcCRD
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:20:09 2026 by rpki-client