Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/38f91415-0f3b-3b15-bfa1-ceac27c47553.roa
File:                     38f91415-0f3b-3b15-bfa1-ceac27c47553.roa (raw, json)
Hash identifier:          6dzAd0klux4yNfNbxAhvYmiB0f4JW8sx/i3Q7ahA4bk=
Subject key identifier:   B1:CA:3D:73:11:F3:25:CC:68:A8:32:80:CD:AD:47:87:05:8C:F1:1D
Certificate issuer:       /CN=e056707d-838a-4b8b-bd8e-8a874ea0684d
Certificate serial:       010D0C9F4328584F498C10AAABE148EA3C3FAB40
Authority key identifier: 21:73:27:CC:A7:57:0A:AF:9B:53:F6:47:A1:F4:EE:A3:36:32:1C:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/38f91415-0f3b-3b15-bfa1-ceac27c47553.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     400011
IP address blocks:        2605:b9c0:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8c:10:aa:ab:e1:48:ea:3c:3f:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e056707d-838a-4b8b-bd8e-8a874ea0684d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a1707d04-b95a-4ce1-8f2b-dabfb4af8273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5d:e5:6b:fb:60:db:14:55:ab:2b:09:65:c4:
                    ea:de:d4:f7:a0:af:96:a0:34:d1:cb:fe:14:30:fd:
                    3c:1b:56:49:49:0b:52:f8:b4:9f:30:e3:39:ef:56:
                    8f:79:11:3a:62:1e:e1:de:b0:30:67:b5:43:f1:d0:
                    b3:cb:26:ea:2d:9b:b4:1d:4c:ea:b1:6d:31:7c:bc:
                    b6:db:f4:f2:dc:45:04:dd:b0:52:31:bc:ed:66:a8:
                    0c:ba:c2:b1:6e:31:18:55:4f:5e:11:cd:92:76:69:
                    5e:ca:96:4e:c1:4d:a2:50:f8:85:3e:a8:7e:8e:50:
                    91:bf:0b:35:08:32:5e:89:ff:8f:87:65:bc:8e:f4:
                    f9:e2:06:99:8b:bd:b4:23:6a:2d:b9:65:bf:ac:8c:
                    16:4c:5c:b3:9d:f1:cf:cf:79:9c:93:a7:a7:bb:07:
                    80:9e:02:be:c5:f7:03:b4:16:da:e9:9e:fb:42:92:
                    05:82:93:7b:49:ab:35:e2:68:3b:fd:53:db:ea:b7:
                    28:8d:f5:72:69:d5:04:65:f3:17:de:0c:07:d1:b7:
                    65:d9:47:4b:89:d5:1e:f2:28:e7:9d:f7:8e:f0:a7:
                    ef:b3:d5:1f:1b:3d:34:b4:45:d5:3c:88:e3:e7:fd:
                    6f:0d:31:93:b8:d8:1a:2e:70:22:0f:2c:cd:e1:2b:
                    b6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CA:3D:73:11:F3:25:CC:68:A8:32:80:CD:AD:47:87:05:8C:F1:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/38f91415-0f3b-3b15-bfa1-ceac27c47553.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.crl

            X509v3 Authority Key Identifier:
                keyid:21:73:27:CC:A7:57:0A:AF:9B:53:F6:47:A1:F4:EE:A3:36:32:1C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b9c0:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d2:7a:df:26:85:a5:48:ad:3d:b3:d5:6b:6d:01:5e:38:b7:
         c4:c8:2d:47:e6:5e:70:f8:95:16:bf:78:f9:15:90:75:39:d0:
         05:ce:64:ae:c3:6b:fe:28:90:35:bf:91:ee:cb:54:6b:07:13:
         e4:e4:90:6f:c7:33:6b:2a:64:63:92:79:d9:a8:3c:34:9d:0e:
         59:94:06:5e:df:01:bc:53:f5:ee:76:cd:d1:c0:39:da:52:36:
         80:46:3d:0f:bc:cf:0b:ff:8e:33:2d:43:be:d4:29:df:56:61:
         dd:68:f8:ec:27:49:da:b5:d0:b5:ed:71:e5:93:f5:ab:8e:94:
         cb:22:ca:2f:2b:e6:b8:d0:e7:0b:10:36:90:43:d3:ab:ac:cc:
         e5:24:59:a2:95:19:2c:98:67:00:eb:42:4f:a0:73:12:94:3f:
         c2:95:aa:54:c1:06:ba:7a:4d:d3:dd:d5:bf:31:eb:9a:54:b9:
         1c:db:87:a2:1b:77:54:77:17:1f:63:9a:99:63:db:4c:ca:55:
         35:51:09:31:07:43:f1:26:cc:b1:90:0b:da:b7:88:b2:34:f3:
         fa:7c:ff:ca:58:e3:54:40:73:b8:90:83:ee:9e:38:a7:d0:08:
         c6:62:44:2d:73:d6:c3:67:c4:4d:05:ec:07:65:46:92:af:35:
         bc:f3:f2:d2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JjBCqq+FI6jw/q0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTA1NjcwN2QtODM4YS00YjhiLWJkOGUtOGE4NzRlYTA2
ODRkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YTE3MDdkMDQtYjk1YS00Y2UxLThmMmItZGFiZmI0YWY4MjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV3la/tg2xRVqysJZcTq3tT3oK+WoDTRy/4U
MP08G1ZJSQtS+LSfMOM571aPeRE6Yh7h3rAwZ7VD8dCzyybqLZu0HUzqsW0xfLy2
2/Ty3EUE3bBSMbztZqgMusKxbjEYVU9eEc2SdmleypZOwU2iUPiFPqh+jlCRvws1
CDJeif+Ph2W8jvT54gaZi720I2otuWW/rIwWTFyznfHPz3mck6enuweAngK+xfcD
tBba6Z77QpIFgpN7Sas14mg7/VPb6rcojfVyadUEZfMX3gwH0bdl2UdLidUe8ijn
nfeO8Kfvs9UfGz00tEXVPIjj5/1vDTGTuNgaLnAiDyzN4Su2bQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLHKPXMR8yXMaKgygM2tR4cFjPEdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lMDU2
NzA3ZC04MzhhLTRiOGItYmQ4ZS04YTg3NGVhMDY4NGQvMzhmOTE0MTUtMGYzYi0z
YjE1LWJmYTEtY2VhYzI3YzQ3NTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTA1NjcwN2QtODM4YS00YjhiLWJk
OGUtOGE4NzRlYTA2ODRkL2UwNTY3MDdkLTgzOGEtNGI4Yi1iZDhlLThhODc0ZWEw
Njg0ZC5jcmwwHwYDVR0jBBgwFoAUIXMnzKdXCq+bU/ZHofTuozYyHHMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9lMDU2NzA3ZC04MzhhLTRiOGItYmQ4ZS04YTg3
NGVhMDY4NGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgW5wAAD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGfSet8mhaVIrT2z1WttAV44t8TILUfmXnD4lRa/ePkVkHU50AXO
ZK7Da/4okDW/ke7LVGsHE+TkkG/HM2sqZGOSedmoPDSdDlmUBl7fAbxT9e52zdHA
OdpSNoBGPQ+8zwv/jjMtQ77UKd9WYd1o+OwnSdq10LXtceWT9auOlMsiyi8r5rjQ
5wsQNpBD06uszOUkWaKVGSyYZwDrQk+gcxKUP8KVqlTBBrp6TdPd1b8x65pUuRzb
h6Ibd1R3Fx9jmplj20zKVTVRCTEHQ/EmzLGQC9q3iLI08/p8/8pY41RAc7iQg+6e
OKfQCMZiRC1z1sNnxE0F7AdlRpKvNbzz8tI=
-----END CERTIFICATE-----
Generated at Sun Sep 27 04:07:50 2026 by rpki-client