Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/a0c32ed6-d02f-35df-8b07-a38c4f7d68d7.roa
File:                     a0c32ed6-d02f-35df-8b07-a38c4f7d68d7.roa (raw, json)
Hash identifier:          wunW+TZokn1hoxVlsiNnm2WZxrrv2DNKGblodTnRw58=
Subject key identifier:   64:BE:C7:6C:91:20:4D:8F:4C:6A:96:73:F4:2B:9B:CD:C5:41:EF:F4
Certificate issuer:       /CN=e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff
Certificate serial:       010D0C9F4328584F4976A5592340C56D3ACCAE00
Authority key identifier: 28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/a0c32ed6-d02f-35df-8b07-a38c4f7d68d7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7896
IP address blocks:        2600:900::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:a5:59:23:40:c5:6d:3a:cc:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ae032e18-46cd-4320-bbb5-7a8662728355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c7:58:94:a0:a7:08:43:cf:96:96:37:a0:20:
                    a8:3b:1f:76:6e:1a:21:76:43:58:31:2a:2d:72:e3:
                    8c:1c:03:e1:1a:b2:3b:d1:36:06:58:ae:9f:69:4b:
                    bd:4c:b6:b9:39:fc:22:f0:a0:63:33:04:ab:13:f3:
                    9f:01:c6:cc:e1:ce:e7:b2:62:fb:6c:64:08:ce:50:
                    35:23:a3:df:1c:ac:be:50:72:e0:72:e1:ce:ee:94:
                    0f:93:5c:7d:87:d9:1b:e5:25:d1:72:24:a1:f4:aa:
                    e5:1c:eb:7b:03:bb:27:e5:f3:60:d0:f9:a9:fe:66:
                    5b:e1:47:46:30:14:83:0e:58:6c:1f:80:2e:c0:72:
                    7f:89:a4:a7:a8:34:c2:5a:f0:4e:ad:1b:a7:37:7e:
                    fa:b9:03:b0:76:bf:c3:e4:bb:e5:57:ed:01:0d:5f:
                    f5:ce:55:6a:f0:66:59:fc:c4:6b:bb:9b:87:d0:c4:
                    41:68:4d:68:83:67:81:a0:f0:fe:84:d0:9b:1c:46:
                    e4:48:1c:60:08:89:7b:de:de:1f:26:e1:42:4b:05:
                    72:5d:55:36:fd:89:4b:ac:ba:ce:a1:34:21:b1:c8:
                    63:2b:ff:33:99:05:b0:37:0e:18:e2:08:f7:e3:8c:
                    b7:16:c6:44:63:31:83:3c:c5:5a:02:e5:2b:0d:42:
                    80:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BE:C7:6C:91:20:4D:8F:4C:6A:96:73:F4:2B:9B:CD:C5:41:EF:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/a0c32ed6-d02f-35df-8b07-a38c4f7d68d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.crl

            X509v3 Authority Key Identifier:
                keyid:28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:900::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:4c:b7:51:d8:7f:ed:2d:93:71:ac:70:a6:ed:a0:49:d7:ae:
         6b:26:66:02:f4:59:1b:80:8b:26:a0:cf:5f:92:16:cc:50:75:
         ad:2a:ab:2f:32:f1:87:4f:18:24:b4:22:f7:57:2f:da:b4:0b:
         c5:60:1a:d4:cc:e1:ba:f4:76:d0:30:83:36:8b:29:9a:b7:77:
         41:f0:ac:1e:0c:43:22:b6:b5:18:e6:e2:d1:5e:3f:32:ea:ed:
         47:b6:56:06:00:fd:28:36:4d:49:cb:64:2c:fc:3c:30:da:d2:
         24:3a:8c:dd:4f:e4:7a:7e:40:70:b6:80:39:00:88:e0:be:cd:
         9c:fa:95:17:2b:41:ec:e8:99:11:0b:d8:f6:08:bc:d3:61:a3:
         e8:48:2f:22:47:d4:ed:04:ec:4a:0e:3e:85:4c:86:96:23:cf:
         7b:c2:fb:1b:3b:83:5a:91:6e:93:6c:00:48:66:81:ad:e1:83:
         e2:6b:f8:37:b2:9d:45:1f:41:23:ff:10:36:ad:b6:13:90:29:
         1c:ef:41:f3:b5:61:10:a4:ee:6e:d0:bc:25:8a:bb:d2:c6:f6:
         9a:9b:de:95:4c:b2:f3:e8:22:13:89:37:79:a1:36:b0:cf:1d:
         b1:40:c7:32:2b:97:82:3b:7e:04:92:8b:13:d2:99:89:3a:a8:
         ff:87:a0:ee
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdqVZI0DFbTrMrgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE0ZWJkNWYtZDcyZi00ZmZlLWFlY2QtYWQyZDJiMWE4
ZWZmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YWUwMzJlMTgtNDZjZC00MzIwLWJiYjUtN2E4NjYyNzI4MzU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8dYlKCnCEPPlpY3oCCoOx92bhohdkNYMSot
cuOMHAPhGrI70TYGWK6faUu9TLa5Ofwi8KBjMwSrE/OfAcbM4c7nsmL7bGQIzlA1
I6PfHKy+UHLgcuHO7pQPk1x9h9kb5SXRciSh9KrlHOt7A7sn5fNg0Pmp/mZb4UdG
MBSDDlhsH4AuwHJ/iaSnqDTCWvBOrRunN376uQOwdr/D5LvlV+0BDV/1zlVq8GZZ
/MRru5uH0MRBaE1og2eBoPD+hNCbHEbkSBxgCIl73t4fJuFCSwVyXVU2/YlLrLrO
oTQhschjK/8zmQWwNw4Y4gj344y3FsZEYzGDPMVaAuUrDUKAAQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGS+x2yRIE2PTGqWc/Qrm83FQe/0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lMTRl
YmQ1Zi1kNzJmLTRmZmUtYWVjZC1hZDJkMmIxYThlZmYvYTBjMzJlZDYtZDAyZi0z
NWRmLThiMDctYTM4YzRmN2Q2OGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTE0ZWJkNWYtZDcyZi00ZmZlLWFl
Y2QtYWQyZDJiMWE4ZWZmL2UxNGViZDVmLWQ3MmYtNGZmZS1hZWNkLWFkMmQyYjFh
OGVmZi5jcmwwHwYDVR0jBBgwFoAUKJOWuiuwPLkmCsnjm3yOzLSIMbkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lMTRlYmQ1Zi1kNzJmLTRmZmUtYWVjZC1hZDJk
MmIxYThlZmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAJADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAZTLdR2H/tLZNxrHCm7aBJ165rJmYC9FkbgIsmoM9fkhbMUHWtKqsv
MvGHTxgktCL3Vy/atAvFYBrUzOG69HbQMIM2iymat3dB8KweDEMitrUY5uLRXj8y
6u1HtlYGAP0oNk1Jy2Qs/Dww2tIkOozdT+R6fkBwtoA5AIjgvs2c+pUXK0Hs6JkR
C9j2CLzTYaPoSC8iR9TtBOxKDj6FTIaWI897wvsbO4NakW6TbABIZoGt4YPia/g3
sp1FH0Ej/xA2rbYTkCkc70HztWEQpO5u0LwlirvSxvaam96VTLLz6CITiTd5oTaw
zx2xQMcyK5eCO34EkosT0pmJOqj/h6Du
-----END CERTIFICATE-----
Generated at Tue Oct 13 06:17:11 2026 by rpki-client