Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/13161fff-7fe5-3413-a997-8c16da025881.roa
File:                     13161fff-7fe5-3413-a997-8c16da025881.roa (raw, json)
Hash identifier:          ASm6JXv2Jt4wxM0YbeT2QUmNOJA/qISejeFpyz/wdw0=
Subject key identifier:   A1:7D:70:37:75:0E:17:4F:E4:AB:56:E4:4D:8C:D1:A7:CD:E4:41:ED
Certificate issuer:       /CN=0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb
Certificate serial:       010D0C9F4328584EEA878C934EFE5467AA737C40
Authority key identifier: A8:15:F3:CC:F9:79:46:E4:70:33:A1:8E:A1:22:A4:F3:D9:DD:03:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/13161fff-7fe5-3413-a997-8c16da025881.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     30036
IP address blocks:        2607:fdc8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:8c:93:4e:fe:54:67:aa:73:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=3a2c696e-1039-42f3-afa1-df75aabeccfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9d:be:d0:75:17:8e:95:28:be:6c:09:4e:62:
                    ab:b7:d6:bd:90:58:3e:81:76:7e:96:93:79:cd:9b:
                    c8:80:6c:70:fd:ea:f9:6a:2d:77:94:15:f1:47:b3:
                    b1:d0:28:7e:00:6c:59:21:25:bf:82:d4:48:04:a2:
                    bf:7d:02:ee:51:e8:1a:9b:33:af:e4:ef:02:80:2c:
                    74:65:1b:ee:58:63:19:6b:ad:5b:8a:b2:e3:27:30:
                    a0:44:d6:47:2c:de:6f:27:34:1d:cd:ed:ad:f0:d9:
                    3f:52:d5:f7:cc:19:fc:78:8b:47:00:f1:5b:94:c8:
                    f6:c2:64:cf:48:15:89:1c:a4:47:a0:c2:c3:55:35:
                    77:78:6d:3b:a1:4d:76:e9:a6:fb:d5:31:17:d0:df:
                    3c:d0:34:4b:f8:a1:d1:47:f5:4e:34:c8:7c:a7:f0:
                    4b:0c:d2:e5:b0:c6:6d:81:3a:b5:a1:74:0e:6f:d9:
                    52:d5:4f:2e:45:43:55:8a:0f:e7:02:98:ad:53:9c:
                    34:08:78:26:d8:6d:4a:b5:c6:d8:30:e4:4d:71:2d:
                    fd:d9:83:9d:14:fd:df:60:27:7f:58:30:81:7b:02:
                    7f:75:28:18:cc:60:56:a7:3d:bd:04:fe:6a:31:55:
                    53:6b:73:e2:a3:6b:f2:29:a9:b8:a0:2b:88:9a:8f:
                    0f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7D:70:37:75:0E:17:4F:E4:AB:56:E4:4D:8C:D1:A7:CD:E4:41:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/13161fff-7fe5-3413-a997-8c16da025881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.crl

            X509v3 Authority Key Identifier:
                keyid:A8:15:F3:CC:F9:79:46:E4:70:33:A1:8E:A1:22:A4:F3:D9:DD:03:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fdc8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:4c:ec:46:34:6f:3f:04:c4:8b:bd:02:22:64:e8:11:f8:59:
         3d:78:38:1e:7f:13:d4:ca:ed:0c:e1:57:10:96:9e:a2:f5:85:
         dc:12:75:e2:ee:9e:1e:65:ad:d2:fe:6c:e8:36:16:bb:1d:92:
         11:44:e1:9d:46:94:26:f4:d4:15:0f:97:8a:d7:87:a0:ca:b2:
         0c:f5:7f:1d:cd:bb:7f:83:7f:ba:79:9b:b6:a8:bc:20:c1:67:
         3d:00:76:ca:de:ad:64:6a:90:44:f1:c8:58:e4:28:4a:29:ed:
         83:10:42:b4:dc:2c:77:3a:72:f1:9f:0d:fa:f7:98:31:d7:ee:
         cf:9e:4a:68:85:9e:0a:dd:af:d6:f6:3e:1d:84:9d:6c:59:82:
         60:49:8d:2b:89:cd:58:c1:5c:d0:05:44:45:c7:9e:79:6c:83:
         4f:be:d0:12:ca:57:90:3b:04:0b:ac:f0:7b:04:a6:ee:82:5c:
         08:cc:60:64:ec:6f:1c:03:c5:7f:6c:5c:b1:e8:96:11:48:e6:
         78:54:d1:fe:7d:16:67:b9:55:a4:49:b0:d0:ff:98:db:d3:e2:
         c4:d1:c3:a4:1b:6d:73:76:cd:95:20:1c:19:0b:8d:59:91:76:
         b8:4a:8a:30:b8:c5:e6:d6:64:2f:44:ab:a4:b7:78:0a:2e:bd:
         9b:ff:ae:9f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7qh4yTTv5UZ6pzfEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGM1YjMxNzgtYTYzYy00YjFjLTljM2MtMDNmN2Q5Y2M5
MGViMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk
M2EyYzY5NmUtMTAzOS00MmYzLWFmYTEtZGY3NWFhYmVjY2ZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ2+0HUXjpUovmwJTmKrt9a9kFg+gXZ+lpN5
zZvIgGxw/er5ai13lBXxR7Ox0Ch+AGxZISW/gtRIBKK/fQLuUegamzOv5O8CgCx0
ZRvuWGMZa61birLjJzCgRNZHLN5vJzQdze2t8Nk/UtX3zBn8eItHAPFblMj2wmTP
SBWJHKRHoMLDVTV3eG07oU126ab71TEX0N880DRL+KHRR/VONMh8p/BLDNLlsMZt
gTq1oXQOb9lS1U8uRUNVig/nApitU5w0CHgm2G1KtcbYMORNcS392YOdFP3fYCd/
WDCBewJ/dSgYzGBWpz29BP5qMVVTa3Pio2vyKam4oCuImo8P7QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKF9cDd1DhdP5KtW5E2M0afN5EHtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzVi
MzE3OC1hNjNjLTRiMWMtOWMzYy0wM2Y3ZDljYzkwZWIvMTMxNjFmZmYtN2ZlNS0z
NDEzLWE5OTctOGMxNmRhMDI1ODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM1YjMxNzgtYTYzYy00YjFjLTlj
M2MtMDNmN2Q5Y2M5MGViLzBjNWIzMTc4LWE2M2MtNGIxYy05YzNjLTAzZjdkOWNj
OTBlYi5jcmwwHwYDVR0jBBgwFoAUqBXzzPl5RuRwM6GOoSKk89ndA8EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzViMzE3OC1hNjNjLTRiMWMtOWMzYy0wM2Y3
ZDljYzkwZWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf9yDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBnTOxGNG8/BMSLvQIiZOgR+Fk9eDgefxPUyu0M4VcQlp6i9YXcEnXi
7p4eZa3S/mzoNha7HZIRROGdRpQm9NQVD5eK14egyrIM9X8dzbt/g3+6eZu2qLwg
wWc9AHbK3q1kapBE8chY5ChKKe2DEEK03Cx3OnLxnw3695gx1+7PnkpohZ4K3a/W
9j4dhJ1sWYJgSY0ric1YwVzQBURFx555bINPvtASyleQOwQLrPB7BKbuglwIzGBk
7G8cA8V/bFyx6JYRSOZ4VNH+fRZnuVWkSbDQ/5jb0+LE0cOkG21zds2VIBwZC41Z
kXa4SoowuMXm1mQvRKukt3gKLr2b/66f
-----END CERTIFICATE-----
Generated at Sun Oct 11 16:08:10 2026 by rpki-client