Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/42f72087-4467-3691-8acf-0987d8d58f26.roa
File:                     42f72087-4467-3691-8acf-0987d8d58f26.roa (raw, json)
Hash identifier:          qkExbcE+HahNTQIoKOmQ8N6jm8DYlyyn/pVlLCW9lzE=
Subject key identifier:   3E:88:6A:68:99:F9:88:76:0E:E0:DE:89:7B:69:7F:6C:D7:09:1B:2D
Certificate issuer:       /CN=e8a5a257-a121-41de-b0be-6ab191fc4486
Certificate serial:       010D0C9F4328584F49880C0E303A20B01A424980
Authority key identifier: 32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/42f72087-4467-3691-8acf-0987d8d58f26.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     32709
IP address blocks:        2605:ea80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:0c:0e:30:3a:20:b0:1a:42:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a5a257-a121-41de-b0be-6ab191fc4486
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=18bee06a-aa21-41f8-889d-bb2dd9f9a82b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:b6:fb:74:fa:33:37:03:84:a7:ec:96:88:
                    eb:cc:bf:ba:cb:1e:a9:ac:b9:45:82:c4:45:07:79:
                    e4:04:2a:79:0c:07:05:a0:f3:be:89:95:cf:38:1c:
                    8e:4c:3c:e7:95:5c:8a:78:98:18:ff:ba:fb:cc:fb:
                    6f:40:3e:e6:d4:2b:43:74:a8:8b:20:0e:30:86:c8:
                    e0:ce:d1:e2:98:91:1d:93:db:ee:ac:34:3f:f2:67:
                    4f:db:1f:b0:66:b4:0f:cb:27:34:f8:37:31:39:15:
                    18:ca:77:a2:91:38:e6:18:82:01:d3:01:a2:cb:e0:
                    f2:a6:de:8c:6c:ef:3e:5d:15:29:eb:12:bb:8f:a1:
                    9e:2e:fe:c2:9d:9b:ea:23:2a:06:eb:e7:ea:51:ef:
                    f6:74:38:54:bc:94:b6:19:6f:4c:82:c5:48:71:43:
                    de:d9:1f:4a:30:93:b9:ed:6e:cf:48:8c:50:a6:20:
                    39:7f:85:cd:2e:0d:7b:b6:e0:8b:86:c5:0d:50:fd:
                    b2:c1:45:7d:42:ca:5d:56:cf:c7:47:66:59:32:c2:
                    20:ca:f0:4f:24:0e:2d:3f:50:e3:5b:e4:81:ac:ba:
                    01:96:13:6f:a1:8c:b2:e0:9f:e3:d2:d0:f2:c7:bb:
                    2e:64:d4:36:ac:c3:34:99:fe:eb:90:da:82:ca:ab:
                    4f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:88:6A:68:99:F9:88:76:0E:E0:DE:89:7B:69:7F:6C:D7:09:1B:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/42f72087-4467-3691-8acf-0987d8d58f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl

            X509v3 Authority Key Identifier:
                keyid:32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ea80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:47:36:35:40:fa:9f:d2:5e:89:f7:eb:d8:cc:b2:e8:cf:10:
         a6:51:84:06:f1:c7:51:79:f6:95:fb:43:9c:0c:e9:39:a6:94:
         6c:f0:a1:4c:2b:9c:4d:a1:ac:13:ec:50:b1:7e:1b:bb:a1:e0:
         ed:33:31:c9:72:c6:10:21:50:ed:85:e3:0e:83:53:5a:0c:80:
         ce:b7:9a:70:55:78:e0:4d:ac:ce:b2:64:c3:8f:35:e8:23:6c:
         4b:e2:8a:f6:b6:eb:f4:b3:c3:3d:c7:c2:ff:47:7c:59:b0:75:
         77:3e:17:16:b3:c3:cf:1a:b4:28:39:78:19:3f:37:6f:85:19:
         bf:8b:89:d5:e8:67:75:73:77:54:56:3e:ee:66:ba:02:80:37:
         76:ad:7b:1b:14:27:a8:92:07:b1:63:59:20:ea:52:d4:a3:e6:
         ab:b0:37:8e:3f:b7:42:3d:7d:83:f3:68:5d:e2:69:4f:6b:ba:
         22:c0:eb:3e:f1:d3:a6:16:83:f2:83:00:4b:0e:38:ea:3a:7f:
         21:f1:f1:ae:36:3c:11:26:3c:8f:9f:26:40:74:ab:36:0c:7f:
         40:b0:39:c3:17:2f:76:56:32:64:6c:32:23:89:ca:96:03:f1:
         ec:6d:0f:a2:23:b4:17:3a:93:a9:51:fc:00:99:2b:df:d8:40:
         33:da:79:36
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JiAwOMDogsBpCSYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThhNWEyNTctYTEyMS00MWRlLWIwYmUtNmFiMTkxZmM0
NDg2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MThiZWUwNmEtYWEyMS00MWY4LTg4OWQtYmIyZGQ5ZjlhODJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWm2+3T6MzcDhKfslojrzL+6yx6prLlFgsRF
B3nkBCp5DAcFoPO+iZXPOByOTDznlVyKeJgY/7r7zPtvQD7m1CtDdKiLIA4whsjg
ztHimJEdk9vurDQ/8mdP2x+wZrQPyyc0+DcxORUYyneikTjmGIIB0wGiy+Dypt6M
bO8+XRUp6xK7j6GeLv7CnZvqIyoG6+fqUe/2dDhUvJS2GW9MgsVIcUPe2R9KMJO5
7W7PSIxQpiA5f4XNLg17tuCLhsUNUP2ywUV9QspdVs/HR2ZZMsIgyvBPJA4tP1Dj
W+SBrLoBlhNvoYyy4J/j0tDyx7suZNQ2rMM0mf7rkNqCyqtPKwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFD6IamiZ+Yh2DuDeiXtpf2zXCRstMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOGE1
YTI1Ny1hMTIxLTQxZGUtYjBiZS02YWIxOTFmYzQ0ODYvNDJmNzIwODctNDQ2Ny0z
NjkxLThhY2YtMDk4N2Q4ZDU4ZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZThhNWEyNTctYTEyMS00MWRlLWIw
YmUtNmFiMTkxZmM0NDg2L2U4YTVhMjU3LWExMjEtNDFkZS1iMGJlLTZhYjE5MWZj
NDQ4Ni5jcmwwHwYDVR0jBBgwFoAUMoEBACTss5HVn2xikJ/BC2weBc4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lOGE1YTI1Ny1hMTIxLTQxZGUtYjBiZS02YWIx
OTFmYzQ0ODYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXqgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAiRzY1QPqf0l6J9+vYzLLozxCmUYQG8cdRefaV+0OcDOk5ppRs8KFM
K5xNoawT7FCxfhu7oeDtMzHJcsYQIVDtheMOg1NaDIDOt5pwVXjgTazOsmTDjzXo
I2xL4or2tuv0s8M9x8L/R3xZsHV3PhcWs8PPGrQoOXgZPzdvhRm/i4nV6Gd1c3dU
Vj7uZroCgDd2rXsbFCeokgexY1kg6lLUo+arsDeOP7dCPX2D82hd4mlPa7oiwOs+
8dOmFoPygwBLDjjqOn8h8fGuNjwRJjyPnyZAdKs2DH9AsDnDFy92VjJkbDIjicqW
A/HsbQ+iI7QXOpOpUfwAmSvf2EAz2nk2
-----END CERTIFICATE-----
Generated at Sat Oct 3 15:17:29 2026 by rpki-client