Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/e9069be8-0c03-3f6c-9ca5-252aad9b5aea.roa
File:                     e9069be8-0c03-3f6c-9ca5-252aad9b5aea.roa (raw, json)
Hash identifier:          /qJuP++PnwiZebtK5L0kCi2XcQyYaPxJCVAGCxLPP7M=
Subject key identifier:   27:82:1A:11:B0:B1:17:EB:7D:24:EF:B9:89:E6:18:22:57:C7:56:DC
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F4328584EDC9206B122F3FE5EFDCDA4C0
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/e9069be8-0c03-3f6c-9ca5-252aad9b5aea.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        2620:1f7:c021::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:06:b1:22:f3:fe:5e:fd:cd:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=69ef0b1d-de94-4135-8f23-cbd7205ea4c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d3:ca:66:58:14:f9:c2:a2:de:dd:0d:08:62:
                    f1:a2:82:40:c3:2d:0a:f8:ae:cd:5f:26:28:79:20:
                    8e:7b:cd:9b:41:32:d2:8e:72:4e:58:35:f5:27:bb:
                    3d:88:9f:07:7b:21:07:a3:74:5d:38:42:a4:b6:7a:
                    f3:9a:b9:1e:4c:b8:98:b0:be:53:8b:1a:d7:56:fc:
                    98:32:8a:9d:0b:c5:b1:12:0e:bb:f3:f8:bc:2a:d8:
                    85:0b:fa:a3:b2:7b:83:e5:3e:91:e4:30:51:23:62:
                    9d:3b:ca:80:5d:b5:ae:d7:58:88:8b:10:ab:33:72:
                    fa:85:94:7f:7b:ce:3c:41:80:61:42:f5:c1:d9:b5:
                    a4:4c:e7:bf:ab:50:0d:6b:0b:8f:53:c1:80:ac:be:
                    15:02:a7:4a:2d:d2:f7:07:6c:cf:59:78:04:9f:dc:
                    a9:29:fa:63:f2:37:a4:08:a8:fd:b9:89:59:77:eb:
                    bc:6e:d2:51:3f:e4:5a:a3:ff:48:8d:27:05:78:92:
                    c7:fc:c3:ad:1b:cd:d7:f0:bc:1c:ad:b0:e9:ff:69:
                    f6:6b:a0:27:04:df:7b:f8:04:9d:0f:4d:9a:ef:12:
                    c4:9b:8a:06:75:67:33:b2:61:d0:28:d3:80:13:70:
                    5e:56:f4:80:c4:2e:3f:40:47:83:2c:0b:28:7b:0b:
                    f1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:82:1A:11:B0:B1:17:EB:7D:24:EF:B9:89:E6:18:22:57:C7:56:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/e9069be8-0c03-3f6c-9ca5-252aad9b5aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1f7:c021::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:0b:2a:54:cb:ba:9d:67:54:c9:d1:9c:28:32:8b:d0:14:4b:
         0f:48:4f:ba:a7:e9:01:28:cb:75:69:98:fb:55:1c:5d:52:d3:
         9c:ce:27:02:ec:8e:5b:fb:26:ae:b4:e1:6b:cb:ea:b5:c9:f2:
         73:1a:e1:4e:70:2e:d0:81:e0:99:45:3c:df:80:b3:3a:e0:18:
         95:3c:e9:70:77:68:09:6e:df:f5:0b:51:2c:7c:19:dd:8a:3f:
         56:06:7b:f4:a4:45:12:fa:e0:af:a8:61:88:f2:a7:45:73:94:
         1a:87:a3:ea:2d:81:10:79:24:38:70:17:17:92:c3:6e:fb:eb:
         90:9a:b8:aa:0f:00:71:26:e2:dd:fb:20:c5:d6:6a:30:e8:c7:
         c2:c9:cf:34:44:8b:2b:2e:b7:16:7f:2a:64:85:41:b4:1b:3d:
         1a:64:3d:22:35:73:c5:3f:22:a6:6b:5a:28:5e:95:fc:e2:f7:
         94:73:6d:d5:57:a3:4a:f0:44:32:95:bd:41:89:27:c1:01:e5:
         f9:cc:f0:7c:75:53:64:ad:62:b5:83:f6:87:8d:4b:95:28:d1:
         93:96:a9:42:22:32:74:6c:4c:c6:fb:de:c3:b2:2c:fd:52:01:
         1c:e4:44:cf:aa:ca:76:d4:71:d8:8a:37:72:b2:86:34:3d:05:
         96:13:28:79
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ckgaxIvP+Xv3NpMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5
OTNkMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
NjllZjBiMWQtZGU5NC00MTM1LThmMjMtY2JkNzIwNWVhNGMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitPKZlgU+cKi3t0NCGLxooJAwy0K+K7NXyYo
eSCOe82bQTLSjnJOWDX1J7s9iJ8HeyEHo3RdOEKktnrzmrkeTLiYsL5TixrXVvyY
MoqdC8WxEg678/i8KtiFC/qjsnuD5T6R5DBRI2KdO8qAXbWu11iIixCrM3L6hZR/
e848QYBhQvXB2bWkTOe/q1ANawuPU8GArL4VAqdKLdL3B2zPWXgEn9ypKfpj8jek
CKj9uYlZd+u8btJRP+Rao/9IjScFeJLH/MOtG83X8LwcrbDp/2n2a6AnBN97+ASd
D02a7xLEm4oGdWczsmHQKNOAE3BeVvSAxC4/QEeDLAsoewvxqwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCeCGhGwsRfrfSTvuYnmGCJXx1bcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi
OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvZTkwNjliZTgtMGMwMy0z
ZjZjLTljYTUtMjUyYWFkOWI1YWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky
NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk
OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy
NzJlZDk5M2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB98Ah
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGQLKlTLup1nVMnRnCgyi9AUSw9IT7qn6QEoy3VpmPtVHF1S05zO
JwLsjlv7Jq604WvL6rXJ8nMa4U5wLtCB4JlFPN+AszrgGJU86XB3aAlu3/ULUSx8
Gd2KP1YGe/SkRRL64K+oYYjyp0VzlBqHo+otgRB5JDhwFxeSw27765CauKoPAHEm
4t37IMXWajDox8LJzzREiysutxZ/KmSFQbQbPRpkPSI1c8U/IqZrWihelfzi95Rz
bdVXo0rwRDKVvUGJJ8EB5fnM8Hx1U2StYrWD9oeNS5Uo0ZOWqUIiMnRsTMb73sOy
LP1SARzkRM+qynbUcdiKN3KyhjQ9BZYTKHk=
-----END CERTIFICATE-----
Generated at Sat Sep 19 08:44:10 2026 by rpki-client