Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa
File:                     c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa (raw, json)
Hash identifier:          Ti/lw4f3lwLRwev/NLoTmKTAreNjAo1c8r2EELXBA94=
Subject key identifier:   7A:C4:1E:C3:82:46:00:E7:D0:4B:D5:BF:B8:B1:31:A2:15:1F:26:90
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F4328584F71ED8C8BC292FBC2AAB44D80
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     7065
IP address blocks:        2001:5a8::/32 maxlen: 64
                          2602:240::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:8c:8b:c2:92:fb:c2:aa:b4:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=de4a3e75-6af1-416f-b2c1-c19ea09b1c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:bb:ce:47:c5:ce:7c:4a:8b:85:37:09:82:
                    ec:a2:44:96:9f:af:23:b4:b9:93:e6:cf:76:e8:ae:
                    5e:df:35:b6:a5:71:71:2c:b1:82:34:0e:58:fd:3b:
                    d2:ba:d0:ca:a3:29:7e:0f:cf:e6:90:6a:96:ab:d0:
                    29:e6:16:bf:ce:84:50:c8:8a:36:96:92:60:49:a2:
                    c8:66:1e:9e:2d:76:ff:67:25:d8:9a:65:e2:ff:68:
                    0e:5d:13:7b:2b:91:99:09:03:2a:d5:b3:ac:fd:81:
                    04:2d:28:e4:cc:a8:01:1f:26:d7:70:75:10:20:e8:
                    c0:71:e5:c7:6c:bd:3d:35:00:45:e3:b9:73:3d:52:
                    e4:42:c5:6f:d7:38:b7:bb:60:cf:dd:67:30:f6:a1:
                    d4:84:41:d7:0e:6c:5c:54:52:ab:ec:74:25:18:88:
                    fc:70:e1:6f:60:6c:b9:9e:a9:4b:06:48:b1:e1:a7:
                    b5:a3:55:cf:76:5c:f6:c6:3e:74:da:6c:2f:3c:21:
                    bc:2e:7b:b0:49:8b:f6:c2:b1:59:16:be:9c:b8:54:
                    48:4d:f3:0c:9a:1e:20:65:13:9d:fe:55:1d:6c:14:
                    09:ce:91:e6:e1:05:62:85:ab:ca:81:f0:98:7f:02:
                    12:11:73:2a:e0:28:19:07:30:02:4e:b2:e5:01:86:
                    f2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C4:1E:C3:82:46:00:E7:D0:4B:D5:BF:B8:B1:31:A2:15:1F:26:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/c1cdef4e-bae3-359d-ae3f-0e9d60e3fdce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5a8::/32
                  2602:240::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:6c:40:f3:60:b2:5a:66:99:8b:d1:88:dc:a0:18:74:78:c7:
         ba:65:ea:4c:33:9c:7a:76:9c:0a:27:5a:5e:ab:49:25:60:cb:
         3d:2a:56:98:7e:c0:c0:92:e4:fd:4e:77:cf:13:d9:6e:89:2b:
         c4:d7:07:d1:92:b4:72:8e:41:7b:98:84:c9:16:ae:7a:cc:d0:
         34:bc:29:40:f5:27:b7:72:b0:75:25:67:a7:e9:84:07:ca:72:
         74:a2:2a:3c:d1:0a:ce:bb:13:9f:4b:bd:3f:07:ae:de:cb:a0:
         2f:53:7f:04:b8:8d:36:96:06:f8:77:1f:93:01:4c:06:66:e5:
         dc:c4:6c:6f:af:f8:e5:ce:02:61:cf:ee:0d:ea:7c:de:af:4a:
         9d:42:6c:95:1d:90:7c:40:a2:d0:5a:3c:74:a2:6a:03:62:46:
         97:e6:86:6f:b9:c0:84:71:2d:3d:4c:ae:a0:8c:6e:71:33:4c:
         15:be:58:90:02:e0:01:1b:26:96:9e:04:db:a2:10:63:43:64:
         28:f6:7b:83:b9:c7:3d:b9:60:03:20:b8:93:54:e2:46:06:4b:
         45:03:59:dc:12:5c:be:e1:b9:2a:81:d1:42:79:bf:1c:fe:c4:
         67:77:a2:a0:f7:f1:7e:07:7e:32:ae:a6:91:49:57:39:2f:b9:
         61:d1:2a:c2
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9x7YyLwpL7wqq0TYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmU5ZjRhMWYtMTM3MS00ZjNmLWIyOTEtNjllYWJmOGJi
MDg3MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk
ZGU0YTNlNzUtNmFmMS00MTZmLWIyYzEtYzE5ZWEwOWIxYzEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx67zkfFznxKi4U3CYLsokSWn68jtLmT5s92
6K5e3zW2pXFxLLGCNA5Y/TvSutDKoyl+D8/mkGqWq9Ap5ha/zoRQyIo2lpJgSaLI
Zh6eLXb/ZyXYmmXi/2gOXRN7K5GZCQMq1bOs/YEELSjkzKgBHybXcHUQIOjAceXH
bL09NQBF47lzPVLkQsVv1zi3u2DP3Wcw9qHUhEHXDmxcVFKr7HQlGIj8cOFvYGy5
nqlLBkix4ae1o1XPdlz2xj502mwvPCG8LnuwSYv2wrFZFr6cuFRITfMMmh4gZROd
/lUdbBQJzpHm4QVihavKgfCYfwISEXMq4CgZBzACTrLlAYbyQwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFHrEHsOCRgDn0EvVv7ixMaIVHyaQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlm
NGExZi0xMzcxLTRmM2YtYjI5MS02OWVhYmY4YmIwODcvYzFjZGVmNGUtYmFlMy0z
NTlkLWFlM2YtMGU5ZDYwZTNmZGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmU5ZjRhMWYtMTM3MS00ZjNmLWIy
OTEtNjllYWJmOGJiMDg3L2JlOWY0YTFmLTEzNzEtNGYzZi1iMjkxLTY5ZWFiZjhi
YjA4Ny5jcmwwHwYDVR0jBBgwFoAULwwCufh39B5QfFnfYu1eKPkJXfUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlmNGExZi0xMzcxLTRmM2YtYjI5MS02OWVh
YmY4YmIwODcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAIAEFqAMF
BCYCAkAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAtWxA82CyWmaZi9GI3KAYdHjHumXqTDOcenacCidaXqtJ
JWDLPSpWmH7AwJLk/U53zxPZbokrxNcH0ZK0co5Be5iEyRaueszQNLwpQPUnt3Kw
dSVnp+mEB8pydKIqPNEKzrsTn0u9Pweu3sugL1N/BLiNNpYG+HcfkwFMBmbl3MRs
b6/45c4CYc/uDep83q9KnUJslR2QfECi0Fo8dKJqA2JGl+aGb7nAhHEtPUyuoIxu
cTNMFb5YkALgARsmlp4E26IQY0NkKPZ7g7nHPblgAyC4k1TiRgZLRQNZ3BJcvuG5
KoHRQnm/HP7EZ3eioPfxfgd+Mq6mkUlXOS+5YdEqwg==
-----END CERTIFICATE-----
Generated at Sat Oct 24 15:42:51 2026 by rpki-client