Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/ee0b90a2-de99-3856-a2f5-59b878447287.roa
File:                     ee0b90a2-de99-3856-a2f5-59b878447287.roa (raw, json)
Hash identifier:          QYeagzK7iKTU6I+kix7tGwUI1vNFDLnLqyHbqBGxBqE=
Subject key identifier:   F9:50:C3:37:CA:D9:8C:F0:22:B5:BB:68:FE:20:B4:16:66:F7:EC:09
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584F13023D93C3F665AFF73C0000
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/ee0b90a2-de99-3856-a2f5-59b878447287.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     271
IP address blocks:        2607:f8f0:50::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:3d:93:c3:f6:65:af:f7:3c:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=ac94fc55-a284-49b7-a353-61c117c1daa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6b:47:18:86:4f:8b:f6:49:7c:56:05:30:e3:
                    80:6b:e5:57:1a:b1:50:ed:2b:dd:88:e2:69:96:f0:
                    79:3d:fc:21:01:a5:7e:84:4f:cb:f5:21:2f:79:1f:
                    1c:b1:4e:4d:bb:fd:36:6a:eb:24:61:d0:e3:66:a0:
                    8f:89:c0:e3:5d:5f:e0:f7:08:3d:f6:e1:85:1e:4c:
                    18:99:3c:b3:85:a5:2c:ff:dd:f6:2a:05:da:f4:e6:
                    6b:e6:3b:9e:1f:a4:92:90:fa:8c:f4:ef:4b:08:07:
                    61:4b:c2:9e:ee:33:37:10:4c:02:a1:8a:04:bf:8d:
                    17:d7:ee:0e:04:9d:81:93:d1:b9:d2:3a:7f:b4:e3:
                    1a:c4:60:fc:1e:26:e3:83:c3:68:fa:98:e2:5b:68:
                    d3:22:90:97:13:29:6b:73:72:05:96:97:72:cd:b5:
                    68:61:54:f3:b0:94:5f:db:f7:b4:ef:7d:d2:a3:c5:
                    2f:b9:16:9a:3a:3a:71:a1:50:cd:04:13:6b:a6:21:
                    40:f5:4b:78:8b:25:22:78:04:8c:6a:1b:c8:1f:fd:
                    00:f2:d0:95:e3:ab:ad:8c:61:ea:7b:82:99:a8:3a:
                    ff:99:0d:c5:92:b0:70:aa:c4:d3:b7:58:a4:3f:28:
                    d2:65:58:70:0e:c3:22:74:cf:1f:e9:bd:73:f1:f5:
                    db:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:50:C3:37:CA:D9:8C:F0:22:B5:BB:68:FE:20:B4:16:66:F7:EC:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/ee0b90a2-de99-3856-a2f5-59b878447287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:50::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:7a:e6:77:2b:8b:80:99:6d:f2:0a:b1:b9:4e:51:f0:05:80:
         3d:00:93:bc:10:99:c4:d8:b0:90:19:e5:cc:85:d3:65:f8:4c:
         05:97:c8:79:94:34:56:18:09:56:11:92:5b:21:78:c2:00:f5:
         c9:fa:ae:21:b4:cf:bc:34:ab:68:29:d0:cd:8b:02:aa:d4:5a:
         c8:e3:4a:69:59:a6:eb:4c:9d:09:32:96:fb:10:f6:01:2a:67:
         d6:af:c3:67:48:bd:bf:ee:eb:94:92:be:dd:73:f1:d7:bd:9b:
         ef:3e:72:d6:13:3d:53:e9:b6:08:d9:e8:c9:a5:df:67:6f:8b:
         83:81:02:97:b4:5e:c6:d6:82:c2:d8:eb:ee:e6:6b:fd:fe:c7:
         00:e4:44:70:0e:71:cc:0b:32:4c:15:f3:a6:23:33:05:5e:db:
         df:e1:22:59:38:d7:b1:c9:62:3b:07:22:d3:ec:92:89:23:8b:
         a6:16:12:75:73:dc:5d:3a:46:b6:82:01:84:31:b8:13:91:33:
         a5:f0:b0:4c:2f:f6:cc:35:bf:4a:2b:8c:a8:e0:e8:7d:2b:23:
         de:58:4a:99:dc:a7:a8:27:5f:c8:2d:47:e7:d1:ba:7e:5d:16:
         6a:ba:15:57:b3:61:ca:6e:c4:97:98:b5:48:8e:e4:47:84:47:
         fc:f5:fa:8b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8TAj2Tw/Zlr/c8AAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux
OGNmMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk
YWM5NGZjNTUtYTI4NC00OWI3LWEzNTMtNjFjMTE3YzFkYWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGtHGIZPi/ZJfFYFMOOAa+VXGrFQ7SvdiOJp
lvB5PfwhAaV+hE/L9SEveR8csU5Nu/02auskYdDjZqCPicDjXV/g9wg99uGFHkwY
mTyzhaUs/932KgXa9OZr5jueH6SSkPqM9O9LCAdhS8Ke7jM3EEwCoYoEv40X1+4O
BJ2Bk9G50jp/tOMaxGD8Hibjg8No+pjiW2jTIpCXEylrc3IFlpdyzbVoYVTzsJRf
2/e0733So8UvuRaaOjpxoVDNBBNrpiFA9Ut4iyUieASMahvIH/0A8tCV46utjGHq
e4KZqDr/mQ3FkrBwqsTTt1ikPyjSZVhwDsMidM8f6b1z8fXbHwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPlQwzfK2YzwIrW7aP4gtBZm9+wJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi
NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvZWUwYjkwYTItZGU5OS0z
ODU2LWEyZjUtNTliODc4NDQ3Mjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5
MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl
MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli
NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48ABQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH965ncri4CZbfIKsblOUfAFgD0Ak7wQmcTYsJAZ5cyF02X4TAWX
yHmUNFYYCVYRklsheMIA9cn6riG0z7w0q2gp0M2LAqrUWsjjSmlZputMnQkylvsQ
9gEqZ9avw2dIvb/u65SSvt1z8de9m+8+ctYTPVPptgjZ6Mml32dvi4OBApe0XsbW
gsLY6+7ma/3+xwDkRHAOccwLMkwV86YjMwVe29/hIlk417HJYjsHItPskokji6YW
EnVz3F06RraCAYQxuBORM6XwsEwv9sw1v0orjKjg6H0rI95YSpncp6gnX8gtR+fR
un5dFmq6FVezYcpuxJeYtUiO5EeER/z1+os=
-----END CERTIFICATE-----
Generated at Thu Oct 1 22:20:33 2026 by rpki-client