Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/ebca52f7-f4b7-3a01-8e68-ef25823a9c6f.roa
File:                     ebca52f7-f4b7-3a01-8e68-ef25823a9c6f.roa (raw, json)
Hash identifier:          bu7zbjUgBL3D9dLYpiav6MckGL5gg2iUzqWJv3RT6nA=
Subject key identifier:   5A:4C:11:66:6C:1E:7D:22:83:2E:CD:E2:F6:21:6E:A9:A2:02:BB:14
Certificate issuer:       /CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901
Certificate serial:       010D0C9F4328584EA796F755606AE90EAEADA800
Authority key identifier: 3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/ebca52f7-f4b7-3a01-8e68-ef25823a9c6f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     29843
IP address blocks:        2604:2040::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:f7:55:60:6a:e9:0e:ae:ad:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ca02a1fc-cd99-4eac-8c0c-4f940cc629f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:ed:d5:87:5c:97:c8:b0:92:4d:75:26:1f:
                    ab:dc:de:e9:c7:33:98:59:87:8e:73:a7:ab:1c:b2:
                    db:fe:21:ec:43:c1:51:7d:2b:52:54:0f:07:01:ea:
                    ed:83:37:81:4b:4d:17:6b:7e:c6:17:bf:a0:9c:68:
                    94:8f:9d:1b:05:2f:db:85:7a:7c:4b:e3:12:91:eb:
                    1e:96:e3:97:20:fc:1a:f2:14:24:cf:a7:eb:97:27:
                    d1:cc:1e:7b:1f:f7:11:fc:cf:e4:6d:f5:b2:94:37:
                    51:21:5d:d8:49:91:17:49:78:8e:38:ad:f9:92:52:
                    43:4d:fa:0e:8c:50:65:95:b2:2f:d8:cd:0a:6d:72:
                    93:fc:bd:0f:7b:41:fb:83:9a:a0:48:61:5a:1f:8f:
                    56:b4:d9:dc:81:80:36:be:ce:a5:bc:69:b4:b0:39:
                    bf:31:de:ea:f0:2e:47:b8:13:ae:ea:a3:28:23:44:
                    9e:cb:35:b9:4c:45:6c:62:4e:81:9c:3a:e9:03:61:
                    89:6b:93:ca:23:79:0f:9b:49:3d:6d:0a:36:8a:7c:
                    e4:97:d6:0c:dc:7a:50:b2:d1:91:3f:67:f0:0e:4f:
                    43:c5:ae:17:14:05:7a:35:55:88:f7:2e:d5:42:ea:
                    5e:36:98:4d:d9:09:a8:26:08:f4:7e:07:50:1f:e4:
                    87:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4C:11:66:6C:1E:7D:22:83:2E:CD:E2:F6:21:6E:A9:A2:02:BB:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/ebca52f7-f4b7-3a01-8e68-ef25823a9c6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.crl

            X509v3 Authority Key Identifier:
                keyid:3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:58:46:34:a4:5b:01:8a:c0:e9:90:ef:97:14:80:08:cd:52:
         9c:dc:f3:71:58:cd:fa:fb:dd:82:90:28:f6:1d:0f:ca:a3:0f:
         3b:a4:57:17:8a:0b:61:9a:11:4b:2f:48:11:e1:57:30:be:f5:
         19:ee:62:a0:7f:ba:96:19:3b:6a:05:50:2f:d1:c3:09:73:b3:
         be:31:17:e2:01:da:16:eb:d5:d3:2b:81:28:02:42:11:d4:5e:
         d3:01:ae:f7:a9:b3:7b:ab:a5:b2:54:94:a5:81:d7:2b:8e:3c:
         7a:e6:fa:39:14:16:25:c6:88:ea:48:a3:cc:dd:a7:b3:25:4f:
         9c:9e:f4:61:c1:33:77:ee:c5:4d:32:8b:04:8c:5c:d9:50:b2:
         90:ef:ee:ad:be:be:4e:38:c3:12:1e:bf:80:1a:27:c1:a1:9e:
         12:96:69:04:21:39:cc:37:ab:4e:1f:12:57:8a:d4:fe:8e:cd:
         ec:7c:5a:c2:06:f2:9f:72:7e:f2:cb:b2:0a:ce:4b:f7:32:26:
         7e:7c:e3:85:a0:bf:7a:4c:f8:ce:50:f3:99:a2:2a:d8:2c:d6:
         9d:2e:6c:0d:cd:24:87:13:5f:52:ff:64:22:0e:0c:d2:f7:a3:
         05:73:7e:53:6e:d3:f7:94:d9:ee:bf:46:a3:31:fe:53:87:8c:
         97:f7:d1:7d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nlvdVYGrpDq6tqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWVjNGVhYWItYTkyNy00MWM4LWI5NGQtZDVkYzdiYTNk
OTAxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
Y2EwMmExZmMtY2Q5OS00ZWFjLThjMGMtNGY5NDBjYzYyOWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnvt1Ydcl8iwkk11Jh+r3N7pxzOYWYeOc6er
HLLb/iHsQ8FRfStSVA8HAertgzeBS00Xa37GF7+gnGiUj50bBS/bhXp8S+MSkese
luOXIPwa8hQkz6frlyfRzB57H/cR/M/kbfWylDdRIV3YSZEXSXiOOK35klJDTfoO
jFBllbIv2M0KbXKT/L0Pe0H7g5qgSGFaH49WtNncgYA2vs6lvGm0sDm/Md7q8C5H
uBOu6qMoI0SeyzW5TEVsYk6BnDrpA2GJa5PKI3kPm0k9bQo2inzkl9YM3HpQstGR
P2fwDk9Dxa4XFAV6NVWI9y7VQupeNphN2QmoJgj0fgdQH+SH9wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFpMEWZsHn0igy7N4vYhbqmiArsUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81ZWM0
ZWFhYi1hOTI3LTQxYzgtYjk0ZC1kNWRjN2JhM2Q5MDEvZWJjYTUyZjctZjRiNy0z
YTAxLThlNjgtZWYyNTgyM2E5YzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWVjNGVhYWItYTkyNy00MWM4LWI5
NGQtZDVkYzdiYTNkOTAxLzVlYzRlYWFiLWE5MjctNDFjOC1iOTRkLWQ1ZGM3YmEz
ZDkwMS5jcmwwHwYDVR0jBBgwFoAUPLew0jKWKIjnlbiMEySNE53NbQUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81ZWM0ZWFhYi1hOTI3LTQxYzgtYjk0ZC1kNWRj
N2JhM2Q5MDEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQgQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCjWEY0pFsBisDpkO+XFIAIzVKc3PNxWM36+92CkCj2HQ/Kow87pFcX
igthmhFLL0gR4VcwvvUZ7mKgf7qWGTtqBVAv0cMJc7O+MRfiAdoW69XTK4EoAkIR
1F7TAa73qbN7q6WyVJSlgdcrjjx65vo5FBYlxojqSKPM3aezJU+cnvRhwTN37sVN
MosEjFzZULKQ7+6tvr5OOMMSHr+AGifBoZ4SlmkEITnMN6tOHxJXitT+js3sfFrC
BvKfcn7yy7IKzkv3MiZ+fOOFoL96TPjOUPOZoirYLNadLmwNzSSHE19S/2QiDgzS
96MFc35TbtP3lNnuv0ajMf5Th4yX99F9
-----END CERTIFICATE-----
Generated at Thu Aug 13 21:55:28 2026 by rpki-client