Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f4fb5113-77fe-3880-9ae2-c77e6d615e05.roa
File:                     f4fb5113-77fe-3880-9ae2-c77e6d615e05.roa (raw, json)
Hash identifier:          DmRuj7pBgqR7JV8ON3p5gRyXG7LLS8DFLD2th4Zamdo=
Subject key identifier:   65:7A:E4:DF:53:23:69:14:D6:5B:1D:85:9A:06:B3:0C:BE:10:60:CC
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F7BB301F66D70005EE77B0800
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f4fb5113-77fe-3880-9ae2-c77e6d615e05.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     393886
IP address blocks:        2607:f5b5:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b3:01:f6:6d:70:00:5e:e7:7b:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=fd25f67a-7c18-4916-96aa-ea312d16e1aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:31:9d:84:76:e6:0b:24:7f:c8:df:d7:0e:69:
                    87:be:2a:56:7d:db:6c:0c:48:44:51:a8:e0:f3:71:
                    0b:33:d8:18:4e:89:ae:dc:e5:3b:7e:5b:32:00:c2:
                    1e:bb:79:b1:db:81:5f:8f:98:02:6a:a5:2b:fb:5f:
                    f2:33:c6:46:13:a7:9a:82:23:77:b2:94:69:42:a4:
                    6a:9a:2e:9e:23:49:df:6a:65:cd:82:c0:3a:b4:40:
                    ca:ab:7e:f7:d9:62:64:12:a7:13:ed:dd:59:de:e9:
                    d9:4d:6e:6e:c2:13:23:20:f1:8f:7c:94:e2:d1:d0:
                    c4:db:f6:2d:97:c1:bb:27:c4:2c:18:be:e6:55:f8:
                    39:35:20:1c:a3:f5:fd:f1:ef:a0:c9:57:75:2e:ea:
                    81:70:a5:de:0f:db:e8:22:41:88:00:e6:67:fe:a1:
                    f2:58:9a:23:f5:0a:1c:8c:e5:48:b3:80:55:52:be:
                    0b:36:bc:dd:3f:60:f0:d6:de:2b:37:13:0b:6e:33:
                    58:bd:c9:d2:c7:aa:eb:d9:8a:02:99:64:8b:d4:85:
                    47:66:42:fd:4b:c0:0a:c5:2a:ad:21:02:1e:a5:bc:
                    62:c7:5d:9f:0c:87:18:30:24:1e:05:b2:70:4d:0c:
                    21:cc:7d:37:a7:f6:a4:88:4d:e6:53:2f:6d:4a:99:
                    58:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7A:E4:DF:53:23:69:14:D6:5B:1D:85:9A:06:B3:0C:BE:10:60:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f4fb5113-77fe-3880-9ae2-c77e6d615e05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b5:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:de:de:32:67:11:d5:a2:fc:01:37:13:d2:0f:93:d9:7a:b7:
         80:33:2e:42:81:0d:7b:01:2b:47:58:33:4c:b3:b4:17:34:45:
         5e:c9:bc:a2:b8:27:82:ff:c6:23:1e:27:6b:de:0e:9d:87:60:
         0f:b6:0c:96:99:86:01:80:a4:c7:54:6b:27:e6:0b:9b:61:6f:
         db:c9:c0:44:85:11:a4:df:5d:27:30:11:01:f3:ea:09:65:62:
         d4:fa:1a:4c:55:e7:b5:ad:c1:b1:03:f2:89:88:d8:c5:06:42:
         26:9f:de:33:98:5f:0f:a8:69:39:54:21:06:7e:18:eb:e7:b2:
         0d:cb:63:7e:9f:e7:6d:7b:84:aa:46:1f:20:75:c4:10:78:d5:
         1d:b2:6d:31:99:df:46:77:ab:e8:c7:6c:5b:23:ba:2a:68:4c:
         1f:08:7a:38:9d:ac:6c:33:63:4c:a1:d3:57:99:b3:fa:c2:d1:
         c3:11:7d:de:95:fe:e5:ff:09:0c:58:af:91:c3:57:cd:b2:66:
         c3:89:47:85:a5:f9:83:6d:72:ed:6a:0c:2e:17:90:f2:31:86:
         17:45:4f:cb:33:cb:82:1d:0b:8b:4b:57:23:18:a5:a4:6c:f0:
         c4:18:cd:6d:eb:86:c0:ff:28:0a:a2:e3:79:2c:b2:38:d1:18:
         ac:14:1e:ce
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE97swH2bXAAXud7CAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk
ZmQyNWY2N2EtN2MxOC00OTE2LTk2YWEtZWEzMTJkMTZlMWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozGdhHbmCyR/yN/XDmmHvipWfdtsDEhEUajg
83ELM9gYTomu3OU7flsyAMIeu3mx24Ffj5gCaqUr+1/yM8ZGE6eagiN3spRpQqRq
mi6eI0nfamXNgsA6tEDKq3732WJkEqcT7d1Z3unZTW5uwhMjIPGPfJTi0dDE2/Yt
l8G7J8QsGL7mVfg5NSAco/X98e+gyVd1LuqBcKXeD9voIkGIAOZn/qHyWJoj9Qoc
jOVIs4BVUr4LNrzdP2Dw1t4rNxMLbjNYvcnSx6rr2YoCmWSL1IVHZkL9S8AKxSqt
IQIepbxix12fDIcYMCQeBbJwTQwhzH03p/akiE3mUy9tSplYhwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGV65N9TI2kU1lsdhZoGswy+EGDMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZjRmYjUxMTMtNzdmZS0z
ODgwLTlhZTItYzc3ZTZkNjE1ZTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf1tQAC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACje3jJnEdWi/AE3E9IPk9l6t4AzLkKBDXsBK0dYM0yztBc0RV7J
vKK4J4L/xiMeJ2veDp2HYA+2DJaZhgGApMdUayfmC5thb9vJwESFEaTfXScwEQHz
6gllYtT6GkxV57WtwbED8omI2MUGQiaf3jOYXw+oaTlUIQZ+GOvnsg3LY36f5217
hKpGHyB1xBB41R2ybTGZ30Z3q+jHbFsjuipoTB8IejidrGwzY0yh01eZs/rC0cMR
fd6V/uX/CQxYr5HDV82yZsOJR4Wl+YNtcu1qDC4XkPIxhhdFT8szy4IdC4tLVyMY
paRs8MQYzW3rhsD/KAqi43kssjjRGKwUHs4=
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:38:20 2026 by rpki-client