Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/cf50e423-4354-3eb5-adb5-3070656ad9b7.roa
File:                     cf50e423-4354-3eb5-adb5-3070656ad9b7.roa (raw, json)
Hash identifier:          3qKAZq8ZA3RQgH7WeI3wmrDr4EYXO80c6evLKwVYQjU=
Subject key identifier:   C6:CE:F2:0E:61:AA:C0:9C:61:02:E4:0B:92:E1:1D:0C:0A:52:15:EF
Certificate issuer:       /CN=9e180184-106e-41ea-a049-5451e20c2840
Certificate serial:       010D0C9F4328584F11A14374E2B0041A0E421080
Authority key identifier: AC:0A:2F:67:F9:65:3C:E3:67:93:67:32:95:E2:99:0D:41:8A:86:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/cf50e423-4354-3eb5-adb5-3070656ad9b7.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     401511
IP address blocks:        2607:e2c0::/32 maxlen: 32
                          2607:e2c0::/48 maxlen: 64
                          2607:e2c0:1::/48 maxlen: 64
                          2607:e2c0:2::/48 maxlen: 64
                          2607:e2c0:3::/48 maxlen: 64
                          2607:e2c0:4::/48 maxlen: 64
                          2607:e2c0:5::/48 maxlen: 64
                          2607:e2c0:6::/48 maxlen: 64
                          2607:e2c0:7::/48 maxlen: 64
                          2607:e2c0:8::/48 maxlen: 64
                          2607:e2c0:9::/48 maxlen: 64
                          2607:e2c0:10::/48 maxlen: 64
                          2607:e2c0:11::/48 maxlen: 64
                          2607:e2c0:12::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/9e180184-106e-41ea-a049-5451e20c2840.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/9e180184-106e-41ea-a049-5451e20c2840.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a1:43:74:e2:b0:04:1a:0e:42:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e180184-106e-41ea-a049-5451e20c2840
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=3ea49f45-8f2b-49a2-977d-846cff9167b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:78:3a:e2:c3:2f:e6:9c:c7:64:94:e2:10:60:
                    44:f4:1f:c2:a0:25:1d:b1:54:2f:c5:76:4a:af:b3:
                    74:36:59:db:e9:92:34:fa:d9:ff:3f:d7:79:2e:20:
                    39:a5:e5:b1:62:5a:64:ac:f9:5f:4b:f6:22:2e:ad:
                    d4:99:3d:e0:ee:d5:b3:3b:77:da:57:74:d0:3b:22:
                    bc:cb:c3:65:d2:70:10:ec:81:0e:99:ab:0d:06:b6:
                    93:ad:c9:ed:e5:1a:35:d9:91:0e:62:18:f9:3c:48:
                    8b:6e:fe:ef:03:72:31:9b:6c:42:72:72:42:bf:0b:
                    11:20:6b:4b:17:fa:bc:f5:7f:b5:24:a9:46:ba:3c:
                    c6:22:ff:b2:64:cc:f9:de:fe:92:ba:e0:d3:5a:42:
                    b6:01:96:50:8e:ec:9d:25:b7:3c:b1:22:fd:48:e2:
                    66:35:66:a0:ff:17:c7:4b:fa:d0:87:9a:75:ba:5c:
                    27:f4:1d:6f:70:63:9f:fa:5d:27:8b:77:4d:24:3b:
                    fe:60:7f:6c:94:79:69:07:c5:58:36:23:d8:1c:42:
                    00:91:d2:43:8c:b9:1c:2d:62:0c:45:8c:34:60:20:
                    36:45:93:2a:e9:07:b1:8b:a4:66:95:1b:58:48:69:
                    11:9c:cc:d7:30:a8:7d:7e:a2:d3:71:12:2d:0d:a2:
                    24:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CE:F2:0E:61:AA:C0:9C:61:02:E4:0B:92:E1:1D:0C:0A:52:15:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/cf50e423-4354-3eb5-adb5-3070656ad9b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840/9e180184-106e-41ea-a049-5451e20c2840.crl

            X509v3 Authority Key Identifier:
                keyid:AC:0A:2F:67:F9:65:3C:E3:67:93:67:32:95:E2:99:0D:41:8A:86:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9e180184-106e-41ea-a049-5451e20c2840.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:e2c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:fb:ae:69:b8:06:3d:cd:d7:a9:f2:df:ef:9a:99:db:a1:1e:
         7f:74:1c:60:09:a2:05:cf:19:1b:c5:a9:1b:e4:76:7e:be:4f:
         e4:ec:98:54:38:23:ff:12:3c:34:c0:e9:cb:7d:d0:e4:43:94:
         9c:28:ff:66:1d:55:44:4d:7c:d2:8b:93:85:38:e3:d1:ab:8c:
         1c:4d:ee:ee:d5:6e:ee:0f:17:0a:15:f3:68:31:a4:56:a6:a7:
         db:a8:20:0e:03:f9:ea:24:e0:76:93:e2:33:c3:ae:de:9c:16:
         e1:91:8f:f6:59:98:34:43:5e:fe:66:28:78:2e:7a:f3:89:5c:
         74:d7:a9:cf:8d:9f:84:26:bb:df:0e:94:df:d5:18:05:e6:dc:
         b6:ca:11:d7:67:63:46:fc:c6:cf:a3:a2:84:bc:31:49:33:44:
         3b:ea:34:02:8e:23:b3:a0:75:7f:bc:fa:15:45:18:5b:92:f2:
         d7:ff:9c:53:e4:a6:83:6a:12:4f:bb:f2:61:dd:1a:c5:7a:e2:
         86:94:18:63:ce:b1:21:70:d6:82:80:3d:4d:82:74:c4:41:7f:
         12:ef:34:9a:b3:d0:77:1d:c3:5e:f3:4d:0d:b4:ae:de:17:84:
         1a:ac:d1:37:22:7d:4a:b9:4c:79:a4:7a:96:af:c5:6e:64:27:
         83:d7:fe:f3
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8RoUN04rAEGg5CEIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWUxODAxODQtMTA2ZS00MWVhLWEwNDktNTQ1MWUyMGMy
ODQwMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
M2VhNDlmNDUtOGYyYi00OWEyLTk3N2QtODQ2Y2ZmOTE2N2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxng64sMv5pzHZJTiEGBE9B/CoCUdsVQvxXZK
r7N0Nlnb6ZI0+tn/P9d5LiA5peWxYlpkrPlfS/YiLq3UmT3g7tWzO3faV3TQOyK8
y8Nl0nAQ7IEOmasNBraTrcnt5Ro12ZEOYhj5PEiLbv7vA3Ixm2xCcnJCvwsRIGtL
F/q89X+1JKlGujzGIv+yZMz53v6SuuDTWkK2AZZQjuydJbc8sSL9SOJmNWag/xfH
S/rQh5p1ulwn9B1vcGOf+l0ni3dNJDv+YH9slHlpB8VYNiPYHEIAkdJDjLkcLWIM
RYw0YCA2RZMq6Qexi6RmlRtYSGkRnMzXMKh9fqLTcRItDaIkrwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMbO8g5hqsCcYQLkC5LhHQwKUhXvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ZTE4
MDE4NC0xMDZlLTQxZWEtYTA0OS01NDUxZTIwYzI4NDAvY2Y1MGU0MjMtNDM1NC0z
ZWI1LWFkYjUtMzA3MDY1NmFkOWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWUxODAxODQtMTA2ZS00MWVhLWEw
NDktNTQ1MWUyMGMyODQwLzllMTgwMTg0LTEwNmUtNDFlYS1hMDQ5LTU0NTFlMjBj
Mjg0MC5jcmwwHwYDVR0jBBgwFoAUrAovZ/llPONnk2cyleKZDUGKhh0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC85ZTE4MDE4NC0xMDZlLTQxZWEtYTA0OS01NDUx
ZTIwYzI4NDAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfiwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBj+65puAY9zdep8t/vmpnboR5/dBxgCaIFzxkbxakb5HZ+vk/k7JhU
OCP/Ejw0wOnLfdDkQ5ScKP9mHVVETXzSi5OFOOPRq4wcTe7u1W7uDxcKFfNoMaRW
pqfbqCAOA/nqJOB2k+Izw67enBbhkY/2WZg0Q17+Zih4LnrziVx016nPjZ+EJrvf
DpTf1RgF5ty2yhHXZ2NG/MbPo6KEvDFJM0Q76jQCjiOzoHV/vPoVRRhbkvLX/5xT
5KaDahJPu/Jh3RrFeuKGlBhjzrEhcNaCgD1NgnTEQX8S7zSas9B3HcNe800NtK7e
F4QarNE3In1KuUx5pHqWr8VuZCeD1/7z
-----END CERTIFICATE-----
Generated at Thu Oct 8 17:34:31 2026 by rpki-client