Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/a7eacb29-8681-3ea1-af22-f531f43e0bdf.roa
File:                     a7eacb29-8681-3ea1-af22-f531f43e0bdf.roa (raw, json)
Hash identifier:          wL757PjPCQhG3bh6rrfx6tsCjVM0QiV+jsKP8fxhzks=
Subject key identifier:   40:A4:17:03:28:84:91:DE:EE:1D:25:AA:EB:E2:F2:25:4D:91:E1:85
Certificate issuer:       /CN=cea06c90-4ccd-4474-b4fa-882eed4f4cd5
Certificate serial:       010D0C9F4328584EC20C687B1ED6FAFBC7CD8A40
Authority key identifier: C0:94:76:1B:6F:0E:00:D6:3B:58:1C:57:5C:40:D3:98:37:9E:FD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/a7eacb29-8681-3ea1-af22-f531f43e0bdf.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     19750
IP address blocks:        2607:d7c0::/32 maxlen: 48
                          2620:100:a000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:68:7b:1e:d6:fa:fb:c7:cd:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea06c90-4ccd-4474-b4fa-882eed4f4cd5
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=8c9d9f06-8e49-42b6-9967-98e398aa7f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9d:fc:1b:72:b0:9f:3d:2c:21:d0:4c:6a:62:
                    70:36:89:55:bb:8b:e6:6a:fe:37:37:90:af:73:42:
                    0a:2b:07:da:ac:b9:b5:90:25:57:2a:0d:a2:1f:ec:
                    9b:a7:fd:ce:4e:e8:97:da:28:43:b4:d4:96:6e:02:
                    12:51:a0:e1:bf:0f:3b:86:9a:0e:12:4c:f0:ef:c0:
                    72:f3:7f:70:62:77:68:d0:d6:e0:43:4f:c6:46:39:
                    15:c4:d7:4c:19:ba:69:79:d9:78:54:e7:99:10:81:
                    ae:19:86:8a:9b:ff:16:d8:12:ac:6b:0f:97:f9:1d:
                    b5:19:d5:98:8a:84:02:d1:e3:b9:ec:1e:e7:3f:11:
                    43:0b:f9:6b:d6:70:47:2c:b4:4f:9f:f8:cd:a4:1e:
                    4d:24:1d:df:39:22:97:4f:fe:9f:c6:1a:50:06:df:
                    08:1b:64:3c:bd:6f:d5:97:34:58:ca:74:fd:db:5f:
                    c2:15:ec:00:2c:12:fa:6b:89:79:c5:62:65:f0:bb:
                    8c:f4:f1:84:65:9b:3a:f0:89:43:9d:01:bf:f9:cd:
                    7a:ab:43:da:6d:1d:36:7b:6b:0e:2e:ca:08:66:25:
                    8e:5c:06:f4:8a:86:7a:7f:39:2b:0a:75:84:af:26:
                    88:55:4f:94:53:f8:f7:cb:4d:25:b0:7f:57:26:b6:
                    73:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A4:17:03:28:84:91:DE:EE:1D:25:AA:EB:E2:F2:25:4D:91:E1:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/a7eacb29-8681-3ea1-af22-f531f43e0bdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.crl

            X509v3 Authority Key Identifier:
                keyid:C0:94:76:1B:6F:0E:00:D6:3B:58:1C:57:5C:40:D3:98:37:9E:FD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cea06c90-4ccd-4474-b4fa-882eed4f4cd5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d7c0::/32
                  2620:100:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:6c:08:54:36:9d:47:f1:19:08:8b:77:6a:c0:85:11:d0:2a:
         5b:9e:31:c4:2b:62:4d:d4:41:43:28:5d:79:d2:87:8e:f0:4c:
         5f:9e:0b:5e:d5:46:89:7b:f2:d1:e5:d7:e0:c0:3e:94:39:3d:
         c0:1f:87:ba:ea:d1:1c:7e:3a:cb:a8:e2:2f:5a:eb:a4:98:91:
         5c:f9:18:7c:a8:43:ec:02:2c:d0:3c:78:ea:ee:92:21:09:7d:
         d9:12:00:a7:51:0e:a9:db:07:bd:21:9e:c6:7a:6a:5d:7a:73:
         fb:ff:6d:5b:77:40:b0:1b:b1:80:b6:54:df:6a:d4:69:03:4a:
         40:4d:c6:55:52:9a:38:61:b2:fa:2b:1b:68:7a:f0:a3:fd:68:
         5c:eb:f9:1a:09:47:e0:62:52:e6:0f:81:6d:7e:2e:25:96:35:
         3b:d9:53:0a:ab:60:3d:a9:53:44:8f:dc:c6:a0:3a:bc:c4:66:
         b1:eb:b5:27:3d:4a:ae:84:20:9b:72:07:1c:e9:f0:d3:d3:90:
         b8:53:18:b4:7b:9e:5a:0a:72:e3:fa:cc:33:99:d0:5f:55:0c:
         36:3f:89:86:7c:3e:22:fc:bf:ed:bc:8b:7a:82:2d:f6:75:61:
         4c:ed:33:fb:c8:d6:9b:9e:8c:48:19:03:18:7e:dd:11:1a:18:
         65:66:90:3e
-----BEGIN CERTIFICATE-----
MIIGTTCCBTWgAwIBAgIUAQ0Mn0MoWE7CDGh7Htb6+8fNikAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VhMDZjOTAtNGNjZC00NDc0LWI0ZmEtODgyZWVkNGY0
Y2Q1MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk
OGM5ZDlmMDYtOGU0OS00MmI2LTk5NjctOThlMzk4YWE3ZjBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ38G3Kwnz0sIdBMamJwNolVu4vmav43N5Cv
c0IKKwfarLm1kCVXKg2iH+ybp/3OTuiX2ihDtNSWbgISUaDhvw87hpoOEkzw78By
839wYndo0NbgQ0/GRjkVxNdMGbppedl4VOeZEIGuGYaKm/8W2BKsaw+X+R21GdWY
ioQC0eO57B7nPxFDC/lr1nBHLLRPn/jNpB5NJB3fOSKXT/6fxhpQBt8IG2Q8vW/V
lzRYynT921/CFewALBL6a4l5xWJl8LuM9PGEZZs68IlDnQG/+c16q0PabR02e2sO
LsoIZiWOXAb0ioZ6fzkrCnWEryaIVU+UU/j3y00lsH9XJrZzYQIDAQABo4IDXzCC
A1swHQYDVR0OBBYEFECkFwMohJHe7h0lquvi8iVNkeGFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZWEw
NmM5MC00Y2NkLTQ0NzQtYjRmYS04ODJlZWQ0ZjRjZDUvYTdlYWNiMjktODY4MS0z
ZWExLWFmMjItZjUzMWY0M2UwYmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2VhMDZjOTAtNGNjZC00NDc0LWI0
ZmEtODgyZWVkNGY0Y2Q1L2NlYTA2YzkwLTRjY2QtNDQ3NC1iNGZhLTg4MmVlZDRm
NGNkNS5jcmwwHwYDVR0jBBgwFoAUwJR2G28OANY7WBxXXEDTmDee/aIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZWEwNmM5MC00Y2NkLTQ0NzQtYjRmYS04ODJl
ZWQ0ZjRjZDUuY2VyMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwUAJgfXwAMH
BCYgAQCgADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW
LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G
CSqGSIb3DQEBCwUAA4IBAQA/bAhUNp1H8RkIi3dqwIUR0CpbnjHEK2JN1EFDKF15
0oeO8Exfngte1UaJe/LR5dfgwD6UOT3AH4e66tEcfjrLqOIvWuukmJFc+Rh8qEPs
AizQPHjq7pIhCX3ZEgCnUQ6p2we9IZ7GempdenP7/21bd0CwG7GAtlTfatRpA0pA
TcZVUpo4YbL6KxtoevCj/Whc6/kaCUfgYlLmD4Ftfi4lljU72VMKq2A9qVNEj9zG
oDq8xGax67UnPUquhCCbcgcc6fDT05C4Uxi0e55aCnLj+swzmdBfVQw2P4mGfD4i
/L/tvIt6gi32dWFM7TP7yNabnoxIGQMYft0RGhhlZpA+
-----END CERTIFICATE-----
Generated at Fri Sep 11 00:55:24 2026 by rpki-client