Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/c5f5b31f-c025-3789-a914-9b5232041348.roa
File:                     c5f5b31f-c025-3789-a914-9b5232041348.roa (raw, json)
Hash identifier:          ancvb74WdPg31ru1xLMYIdNxl0M7gxbUeehItwAz3WQ=
Subject key identifier:   7E:F0:8A:3C:82:5A:78:C6:06:FD:B6:13:8D:18:6A:64:2E:2B:F3:00
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F4328584F82ADB391585E134F2C5C1D00
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/c5f5b31f-c025-3789-a914-9b5232041348.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     16509
IP address blocks:        2620:113:1001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:b3:91:58:5e:13:4f:2c:5c:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=7ebc57ac-51b1-41fc-9f87-1cc187ed1620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b7:e7:21:f8:0f:51:dc:4e:10:97:3f:b7:50:
                    c0:6d:4a:f6:29:6d:2e:79:3a:93:60:fc:71:22:9b:
                    ae:df:c7:59:4d:6a:31:36:a1:a4:94:66:5e:cc:d4:
                    cd:a2:6f:b3:d6:a8:d0:88:e8:ae:f3:b5:e4:fc:42:
                    97:45:6e:93:9f:bc:58:54:83:e6:8e:9e:c1:6c:f1:
                    45:d1:1e:33:33:24:40:69:9d:42:25:70:31:65:a4:
                    86:d2:e6:eb:bd:06:bb:38:d9:50:b9:12:c5:9c:81:
                    07:1e:b4:92:5f:45:71:e6:6e:91:85:e3:19:07:bc:
                    dc:00:aa:07:f4:24:ae:f2:42:c0:ab:a1:ba:55:ba:
                    dc:ac:2a:b3:26:5b:3c:b2:2e:28:f8:b5:09:c0:5e:
                    b6:96:97:34:ff:19:6a:e3:64:02:8a:c1:3e:fb:b3:
                    24:9b:d3:b5:5e:6e:de:69:33:07:98:b5:da:c7:e0:
                    a4:42:98:32:55:1d:01:76:aa:7d:53:62:7c:26:aa:
                    d5:0a:6c:60:61:3a:9d:80:78:ee:bf:26:95:62:97:
                    29:7c:5f:d2:4b:27:ac:de:40:65:29:94:a0:cf:31:
                    ca:67:56:08:8f:28:9b:fd:fe:aa:0c:a8:67:7b:10:
                    d5:fb:44:e7:2f:c8:aa:0f:61:70:9c:cb:44:63:59:
                    0d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F0:8A:3C:82:5A:78:C6:06:FD:B6:13:8D:18:6A:64:2E:2B:F3:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/c5f5b31f-c025-3789-a914-9b5232041348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:113:1001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:05:0b:7d:b2:a8:35:5d:23:c3:d8:4d:e2:31:7b:32:c1:d2:
         91:2d:ff:af:9c:ba:b2:fc:4d:d5:c9:66:b2:e7:03:61:9b:b7:
         9b:39:d8:8d:bb:37:e7:49:d1:02:2e:e5:e5:0d:ca:85:55:12:
         e2:b8:54:41:da:b4:6a:e4:a9:dd:77:07:a3:83:0f:54:fe:82:
         74:b3:7a:94:71:43:5b:90:64:e9:3f:57:32:02:46:d7:12:99:
         47:50:76:2c:eb:54:61:c7:24:65:b3:5a:cf:f7:36:2b:57:22:
         64:33:35:df:f4:03:5a:7a:ae:41:81:23:62:61:86:38:88:3c:
         36:33:0d:02:df:ac:04:de:43:7b:b6:5b:41:57:65:ac:22:fc:
         95:30:5c:0a:a9:25:4b:37:da:6e:c3:51:a3:4a:83:5e:5d:81:
         17:7b:1e:2b:fa:22:ea:0e:8a:63:c6:a3:b2:27:cf:ae:ad:a8:
         f8:1e:c9:91:34:7a:13:03:15:36:2c:7b:bb:43:11:0e:81:b5:
         cf:27:cf:0f:df:07:4d:62:dd:46:d0:90:25:da:43:de:e0:e2:
         38:12:66:aa:95:6d:83:5a:68:b5:8f:45:cf:1e:23:df:3d:0a:
         40:f5:c6:ec:fa:a8:29:b9:b5:1b:22:ef:d0:bf:b3:f4:6b:49:
         6a:b1:ca:d7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+CrbORWF4TTyxcHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmViYWQyOWMtYzJlNC00NDdkLWEyOWUtMjBmMzI5MjE5
ZWE5MB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk
N2ViYzU3YWMtNTFiMS00MWZjLTlmODctMWNjMTg3ZWQxNjIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrfnIfgPUdxOEJc/t1DAbUr2KW0ueTqTYPxx
Ipuu38dZTWoxNqGklGZezNTNom+z1qjQiOiu87Xk/EKXRW6Tn7xYVIPmjp7BbPFF
0R4zMyRAaZ1CJXAxZaSG0ubrvQa7ONlQuRLFnIEHHrSSX0Vx5m6RheMZB7zcAKoH
9CSu8kLAq6G6VbrcrCqzJls8si4o+LUJwF62lpc0/xlq42QCisE++7Mkm9O1Xm7e
aTMHmLXax+CkQpgyVR0Bdqp9U2J8JqrVCmxgYTqdgHjuvyaVYpcpfF/SSyes3kBl
KZSgzzHKZ1YIjyib/f6qDKhnexDV+0TnL8iqD2FwnMtEY1kNgQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH7wijyCWnjGBv22E40YamQuK/MAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJh
ZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYzMjkyMTllYTkvYzVmNWIzMWYtYzAyNS0z
Nzg5LWE5MTQtOWI1MjMyMDQxMzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmViYWQyOWMtYzJlNC00NDdkLWEy
OWUtMjBmMzI5MjE5ZWE5L2JlYmFkMjljLWMyZTQtNDQ3ZC1hMjllLTIwZjMyOTIx
OWVhOS5jcmwwHwYDVR0jBBgwFoAUBzxRbeqFGDJmyoVohEc4Dza5UhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJhZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYz
MjkyMTllYTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABExAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACUFC32yqDVdI8PYTeIxezLB0pEt/6+curL8TdXJZrLnA2Gbt5s5
2I27N+dJ0QIu5eUNyoVVEuK4VEHatGrkqd13B6ODD1T+gnSzepRxQ1uQZOk/VzIC
RtcSmUdQdizrVGHHJGWzWs/3NitXImQzNd/0A1p6rkGBI2JhhjiIPDYzDQLfrATe
Q3u2W0FXZawi/JUwXAqpJUs32m7DUaNKg15dgRd7Hiv6IuoOimPGo7Inz66tqPge
yZE0ehMDFTYse7tDEQ6Btc8nzw/fB01i3UbQkCXaQ97g4jgSZqqVbYNaaLWPRc8e
I989CkD1xuz6qCm5tRsi79C/s/RrSWqxytc=
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:34:11 2026 by rpki-client