Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/8813a5af-a066-3445-98d1-7efec72cf34b.roa
File:                     8813a5af-a066-3445-98d1-7efec72cf34b.roa (raw, json)
Hash identifier:          B02+YX5sAe1XN4vdKELi+jWeAxXtski3YhzrFHsEcBg=
Subject key identifier:   09:61:B9:1A:87:C6:2E:0E:15:EA:B6:E7:8E:F8:7C:2C:D9:19:C3:68
Certificate issuer:       /CN=5eb9bc8d-6001-40dd-8162-ac1cf8678a49
Certificate serial:       010D0C9F4328584EA79386022317D3CAE7CC4DE0
Authority key identifier: 56:6D:D5:A6:9A:C8:37:9F:47:12:5A:0F:C9:33:C0:3A:29:59:97:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/8813a5af-a066-3445-98d1-7efec72cf34b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        2610:108:bf20::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:86:02:23:17:d3:ca:e7:cc:4d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb9bc8d-6001-40dd-8162-ac1cf8678a49
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e7fe8269-ed07-49f7-b0ba-6e475b02c0c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:71:e8:31:66:c3:73:15:3d:5e:c8:b8:c1:
                    d5:57:2c:33:d4:2a:d9:05:f8:bf:3c:5b:eb:f0:c3:
                    57:8c:08:c9:66:68:f6:94:cf:58:f1:1e:0f:8d:34:
                    c9:88:4d:19:28:bb:d5:2a:f6:ac:40:19:e7:82:24:
                    9f:c6:e3:c6:f1:42:28:a7:1e:db:3a:4f:7c:74:95:
                    0b:ef:4f:a6:ba:47:19:30:13:f9:6b:cf:79:72:97:
                    1e:01:ee:e4:3c:44:fd:15:8f:e1:9d:4a:15:23:5d:
                    26:b2:5a:92:22:a4:16:56:40:a3:d7:09:14:15:1e:
                    13:33:d1:99:09:49:cc:c9:1c:f3:37:37:5c:f8:ac:
                    2e:c0:9f:71:e7:36:6f:01:23:b4:fb:ad:fd:cc:a0:
                    6c:38:50:31:17:a0:05:ed:63:c9:81:47:23:eb:c2:
                    f7:3b:22:67:a3:fc:d5:b5:c5:82:ec:82:eb:d5:f0:
                    a7:17:ba:d6:58:55:7b:ca:7b:60:12:f2:7d:3b:f5:
                    3f:c3:42:a3:13:02:c8:19:5f:30:fb:c9:a9:f7:ee:
                    59:50:a0:7d:49:b4:da:29:a9:fc:0f:c6:91:82:00:
                    7a:59:b6:f1:88:eb:14:b2:b2:5b:17:85:66:6d:b8:
                    6a:57:02:a0:60:c9:ed:fa:df:75:9e:d6:3d:72:39:
                    33:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:61:B9:1A:87:C6:2E:0E:15:EA:B6:E7:8E:F8:7C:2C:D9:19:C3:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/8813a5af-a066-3445-98d1-7efec72cf34b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.crl

            X509v3 Authority Key Identifier:
                keyid:56:6D:D5:A6:9A:C8:37:9F:47:12:5A:0F:C9:33:C0:3A:29:59:97:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:108:bf20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:e5:27:0d:b4:c2:8b:cc:2a:b0:6f:22:b5:b3:80:f6:4c:59:
         56:27:3b:b0:30:59:51:dc:16:42:97:a6:07:7d:a9:8d:85:2c:
         a7:54:87:8a:6b:67:e7:d0:35:48:f7:ad:85:7c:f0:0e:7e:17:
         ee:03:1a:0e:68:4f:ed:13:a8:90:c1:6b:93:38:3b:11:4b:6f:
         80:8a:00:fb:e8:b3:2c:6f:a4:51:51:48:17:c9:a1:82:91:12:
         89:d1:70:cb:c3:93:68:46:78:f0:7a:d1:07:63:24:9d:95:0d:
         c9:94:af:06:16:f0:55:ab:4e:95:74:f5:f9:5a:9c:ac:39:da:
         c5:bd:47:58:6b:cb:18:4e:b9:09:da:5c:5b:32:5c:22:d4:58:
         d1:41:8a:41:7c:ca:2c:f6:9b:02:90:ee:53:b7:cb:2d:07:c4:
         53:60:24:bf:04:a8:ad:d6:eb:09:8f:b2:f6:d8:41:5a:9e:18:
         bd:b5:e7:0c:b4:eb:2f:f5:d0:28:5d:1e:55:00:91:98:bb:32:
         44:63:f2:d5:0c:a0:33:37:10:e4:fb:cf:5a:59:c5:da:53:14:
         d5:0c:33:df:2d:0e:0e:4b:f9:5d:5a:fe:6b:70:a1:44:1b:6c:
         b2:63:04:b9:42:4e:c1:58:03:e4:b6:a2:5c:b0:dd:de:18:85:
         bf:fc:8e:ca
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nk4YCIxfTyufMTeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWViOWJjOGQtNjAwMS00MGRkLTgxNjItYWMxY2Y4Njc4
YTQ5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZTdmZTgyNjktZWQwNy00OWY3LWIwYmEtNmU0NzViMDJjMGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv9x6DFmw3MVPV7IuMHVVywz1CrZBfi/PFvr
8MNXjAjJZmj2lM9Y8R4PjTTJiE0ZKLvVKvasQBnngiSfxuPG8UIopx7bOk98dJUL
70+mukcZMBP5a895cpceAe7kPET9FY/hnUoVI10mslqSIqQWVkCj1wkUFR4TM9GZ
CUnMyRzzNzdc+KwuwJ9x5zZvASO0+639zKBsOFAxF6AF7WPJgUcj68L3OyJno/zV
tcWC7ILr1fCnF7rWWFV7yntgEvJ9O/U/w0KjEwLIGV8w+8mp9+5ZUKB9SbTaKan8
D8aRggB6WbbxiOsUsrJbF4VmbbhqVwKgYMnt+t91ntY9cjkzCQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAlhuRqHxi4OFeq25474fCzZGcNoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZWI5
YmM4ZC02MDAxLTQwZGQtODE2Mi1hYzFjZjg2NzhhNDkvODgxM2E1YWYtYTA2Ni0z
NDQ1LTk4ZDEtN2VmZWM3MmNmMzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWViOWJjOGQtNjAwMS00MGRkLTgx
NjItYWMxY2Y4Njc4YTQ5LzVlYjliYzhkLTYwMDEtNDBkZC04MTYyLWFjMWNmODY3
OGE0OS5jcmwwHwYDVR0jBBgwFoAUVm3VpprIN59HEloPyTPAOilZl0owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81ZWI5YmM4ZC02MDAxLTQwZGQtODE2Mi1hYzFj
Zjg2NzhhNDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJhABCL8g
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADnlJw20wovMKrBvIrWzgPZMWVYnO7AwWVHcFkKXpgd9qY2FLKdU
h4prZ+fQNUj3rYV88A5+F+4DGg5oT+0TqJDBa5M4OxFLb4CKAPvosyxvpFFRSBfJ
oYKREonRcMvDk2hGePB60QdjJJ2VDcmUrwYW8FWrTpV09flanKw52sW9R1hryxhO
uQnaXFsyXCLUWNFBikF8yiz2mwKQ7lO3yy0HxFNgJL8EqK3W6wmPsvbYQVqeGL21
5wy06y/10ChdHlUAkZi7MkRj8tUMoDM3EOT7z1pZxdpTFNUMM98tDg5L+V1a/mtw
oUQbbLJjBLlCTsFYA+S2olyw3d4Yhb/8jso=
-----END CERTIFICATE-----
Generated at Wed Jul 29 20:37:40 2026 by rpki-client