Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/5ce2f63f-db8f-3bb2-900d-2201e35cf380.roa
File:                     5ce2f63f-db8f-3bb2-900d-2201e35cf380.roa (raw, json)
Hash identifier:          G4hlT1jy/GL1XKEFM0VN7E1UQFl2/hbMIBiTYadYRxQ=
Subject key identifier:   38:D6:ED:7C:30:95:AF:01:81:F9:01:6C:81:78:5F:C2:84:1D:38:48
Certificate issuer:       /CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb
Certificate serial:       010D0C9F4328584F86DDAB608C8BED49F31F2420
Authority key identifier: 63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/5ce2f63f-db8f-3bb2-900d-2201e35cf380.roa
Signing time:             Sat 17 Oct 2026 01:00:13 +0000
ROA not before:           Sat 17 Oct 2026 01:00:13 +0000
ROA not after:            Fri 15 Jan 2027 02:00:13 +0000
asID:                     5400
IP address blocks:        2606:f100:d800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:86:dd:ab:60:8c:8b:ed:49:f3:1f:24:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a24a22-f8e2-439f-a2d5-d497538d7bcb
        Validity
            Not Before: Oct 17 01:00:13 2026 GMT
            Not After : Jan 15 02:00:13 2027 GMT
        Subject: CN=55ad214c-12e5-4d23-bba4-9ca5fa43d0e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2d:44:02:94:9f:a0:7e:78:97:c0:5e:0a:2b:
                    fd:b3:3a:44:04:f6:97:6b:01:27:5f:e7:29:f4:7b:
                    36:e6:a9:9f:f9:32:b1:6a:e0:2c:0f:26:8c:9b:3a:
                    9f:5d:9e:5b:cc:7d:90:3c:83:b8:67:81:98:f2:a1:
                    4a:49:9c:a7:af:73:2a:96:6a:01:8b:7f:8e:ce:cc:
                    6b:ad:54:d6:d1:1f:18:07:68:f5:b7:94:10:ae:ea:
                    c8:2c:0e:1c:29:38:ce:f7:ba:dd:3d:03:e9:dc:fd:
                    3e:17:1e:85:dc:5e:9e:d9:6d:59:ba:77:39:c8:c6:
                    f7:33:33:93:cd:1e:3b:c1:f7:42:02:c5:19:78:b3:
                    4c:ca:04:31:db:da:6c:a7:82:ab:ea:06:92:38:76:
                    59:28:4b:7e:a0:01:d5:2c:1c:4b:98:29:b7:aa:c3:
                    49:2d:ac:7b:30:45:09:61:44:29:80:c8:7c:3f:06:
                    bb:a3:38:2e:ea:d3:88:dc:e8:fc:7b:d3:fb:cb:94:
                    64:b5:e7:59:37:9d:cd:3d:87:17:e2:e0:00:0d:0c:
                    f8:06:f6:5c:c6:a4:88:3b:41:b6:f4:8d:57:de:32:
                    74:63:66:e1:56:9e:be:33:f7:b3:f4:c9:8f:9c:ed:
                    0e:b4:c7:a7:cb:d9:dc:79:5e:88:d7:80:12:bc:ae:
                    98:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D6:ED:7C:30:95:AF:01:81:F9:01:6C:81:78:5F:C2:84:1D:38:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/5ce2f63f-db8f-3bb2-900d-2201e35cf380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb/31a24a22-f8e2-439f-a2d5-d497538d7bcb.crl

            X509v3 Authority Key Identifier:
                keyid:63:62:43:EA:56:DC:90:53:8B:5E:00:F3:58:D8:DE:87:62:93:8A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/31a24a22-f8e2-439f-a2d5-d497538d7bcb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f100:d800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:d8:65:87:14:a7:c0:2a:85:99:db:9d:a9:36:d2:cb:ff:e8:
         1a:08:e7:bf:8f:7e:4c:ed:7d:ee:92:0b:db:99:93:c7:ab:f8:
         8c:23:68:8d:fa:94:e0:b0:6b:ed:66:53:01:cf:6d:7e:9d:68:
         b0:f2:8a:c5:33:8f:02:1c:ae:ae:c7:38:db:df:b0:4d:d6:0b:
         4f:44:27:ff:58:3f:f9:c4:63:e4:06:fd:8f:5a:99:10:f6:9c:
         1e:76:41:93:68:39:12:d5:c2:ae:96:6f:ba:72:57:fb:c4:ca:
         a5:1c:84:b2:d4:f1:8f:3c:55:eb:bf:e3:12:da:89:5e:dc:52:
         07:8b:f0:2c:74:ff:00:e0:ad:bc:43:33:f6:d2:cd:0e:78:04:
         52:c9:47:c1:5c:77:cd:16:25:f1:bb:19:50:bd:cc:33:7e:11:
         e0:f6:f7:28:23:15:e5:c6:d6:67:57:38:03:91:8e:64:4f:c9:
         fd:90:98:c3:8f:ec:96:9a:8e:23:1f:91:c5:96:9a:5f:42:7e:
         34:e8:88:1d:6d:b9:bb:74:8a:83:fb:ea:d7:98:a4:e7:9b:f5:
         72:63:bd:75:8f:e0:3b:d1:f4:a2:75:f8:9e:46:9c:07:79:f3:
         ca:6e:4f:db:7e:b5:5a:c5:30:cb:c4:ff:cb:9a:97:76:da:f7:
         cf:d4:8e:b6
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+G3atgjIvtSfMfJCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzFhMjRhMjItZjhlMi00MzlmLWEyZDUtZDQ5NzUzOGQ3
YmNiMB4XDTI2MTAxNzAxMDAxM1oXDTI3MDExNTAyMDAxM1owLzEtMCsGA1UEAxMk
NTVhZDIxNGMtMTJlNS00ZDIzLWJiYTQtOWNhNWZhNDNkMGUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC1EApSfoH54l8BeCiv9szpEBPaXawEnX+cp
9Hs25qmf+TKxauAsDyaMmzqfXZ5bzH2QPIO4Z4GY8qFKSZynr3MqlmoBi3+Ozsxr
rVTW0R8YB2j1t5QQrurILA4cKTjO97rdPQPp3P0+Fx6F3F6e2W1Zunc5yMb3MzOT
zR47wfdCAsUZeLNMygQx29psp4Kr6gaSOHZZKEt+oAHVLBxLmCm3qsNJLax7MEUJ
YUQpgMh8Pwa7ozgu6tOI3Oj8e9P7y5RktedZN53NPYcX4uAADQz4BvZcxqSIO0G2
9I1X3jJ0Y2bhVp6+M/ez9MmPnO0OtMeny9nceV6I14ASvK6YwwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDjW7Xwwla8BgfkBbIF4X8KEHThIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMWEy
NGEyMi1mOGUyLTQzOWYtYTJkNS1kNDk3NTM4ZDdiY2IvNWNlMmY2M2YtZGI4Zi0z
YmIyLTkwMGQtMjIwMWUzNWNmMzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzFhMjRhMjItZjhlMi00MzlmLWEy
ZDUtZDQ5NzUzOGQ3YmNiLzMxYTI0YTIyLWY4ZTItNDM5Zi1hMmQ1LWQ0OTc1Mzhk
N2JjYi5jcmwwHwYDVR0jBBgwFoAUY2JD6lbckFOLXgDzWNjeh2KTioswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zMWEyNGEyMi1mOGUyLTQzOWYtYTJkNS1kNDk3
NTM4ZDdiY2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgbxANgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAIthlhxSnwCqFmdudqTbSy//oGgjnv49+TO197pIL25mTx6v4jCNo
jfqU4LBr7WZTAc9tfp1osPKKxTOPAhyursc429+wTdYLT0Qn/1g/+cRj5Ab9j1qZ
EPacHnZBk2g5EtXCrpZvunJX+8TKpRyEstTxjzxV67/jEtqJXtxSB4vwLHT/AOCt
vEMz9tLNDngEUslHwVx3zRYl8bsZUL3MM34R4Pb3KCMV5cbWZ1c4A5GOZE/J/ZCY
w4/slpqOIx+RxZaaX0J+NOiIHW25u3SKg/vq15ik55v1cmO9dY/gO9H0onX4nkac
B3nzym5P2361WsUwy8T/y5qXdtr3z9SOtg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 06:08:53 2026 by rpki-client