Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/5d3b4b45-13c7-3423-b435-8a8330a241f0.roa
File:                     5d3b4b45-13c7-3423-b435-8a8330a241f0.roa (raw, json)
Hash identifier:          N1i5+0cpC2ecvjOdiqNXCH2IvbSl4M9c8Z+c0I68SsU=
Subject key identifier:   C0:38:09:F9:73:F6:1B:F0:70:76:8D:6D:85:A4:1F:50:38:31:71:BA
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F4328584F480D6460F85FDC0405D2F800
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/5d3b4b45-13c7-3423-b435-8a8330a241f0.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     26383
IP address blocks:        2605:e440:48::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:64:60:f8:5f:dc:04:05:d2:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=bcf66e6e-80b4-4e11-aa61-25ea993504ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2b:0d:80:bf:2b:f3:fa:9e:dc:19:c3:f4:ee:
                    23:b9:21:ae:47:2e:ea:e2:18:6f:82:d3:34:92:8e:
                    de:ff:30:83:1e:45:20:1c:d1:00:3d:58:e6:be:5e:
                    c6:ba:90:eb:fd:9d:a4:12:1c:4e:d6:52:f6:3b:a9:
                    e8:29:4d:cb:31:05:77:3a:db:7b:0f:0b:e3:7b:28:
                    ec:8e:24:ea:81:e6:f1:ce:93:58:1a:1d:55:0f:f7:
                    ef:d2:20:b3:00:77:19:de:7d:31:94:39:ea:b5:99:
                    89:86:6e:03:0f:6d:ee:6c:ce:74:08:3b:57:45:87:
                    b4:fd:13:4b:b0:25:b6:59:0a:f9:33:2d:70:29:0f:
                    7b:06:e0:1f:03:12:11:61:e3:53:f3:ab:01:3d:b5:
                    8d:f1:b6:79:ce:df:c0:67:b6:3a:f3:25:8e:37:7f:
                    34:05:99:2d:fb:96:5e:b5:9e:c7:49:db:06:59:fa:
                    d6:1a:e0:9e:a2:51:2f:11:14:8b:f4:48:5c:85:ad:
                    cd:d9:63:2e:d5:c2:8e:0b:f0:eb:75:51:a9:43:66:
                    f5:49:a6:c9:22:a5:ff:2d:1f:ab:bf:d5:79:3c:87:
                    1e:53:e5:93:f6:00:c2:04:6f:00:73:15:35:07:bd:
                    cf:73:c0:6e:cf:b8:9c:03:1f:17:04:9c:71:49:a6:
                    86:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:38:09:F9:73:F6:1B:F0:70:76:8D:6D:85:A4:1F:50:38:31:71:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/5d3b4b45-13c7-3423-b435-8a8330a241f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e440:48::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:f4:e0:88:0f:18:d3:d7:51:4c:fe:e6:7b:88:f6:30:e5:eb:
         47:29:cb:a7:ac:f4:fa:84:25:87:4f:e9:7f:8a:49:fd:d8:9d:
         42:b6:f1:b1:a9:e9:e6:36:cf:b6:24:57:dc:18:db:7d:1d:8f:
         87:90:01:6c:34:e5:36:6a:17:bd:e4:78:03:a4:c1:a8:ab:ec:
         c3:70:39:62:52:b7:80:7f:6f:30:04:1d:9d:05:69:05:31:1c:
         bf:1a:db:df:4f:35:f7:73:33:d1:3d:3d:75:73:d3:c6:10:69:
         67:d9:fc:73:87:e6:ee:27:cc:18:eb:97:78:1f:ae:1f:51:d7:
         44:23:9e:a8:79:7e:36:d5:d3:d2:7a:b6:98:62:be:25:e2:14:
         ac:9d:77:f7:cf:e6:ab:c5:f9:5f:29:1a:21:ed:c8:30:8a:a6:
         78:b4:4b:26:59:ce:ef:4f:e8:c5:96:38:23:3b:4c:e8:44:2a:
         8e:4c:ff:42:19:26:00:24:bb:8a:70:b1:ad:89:4f:3e:70:cf:
         e4:18:72:0e:fa:25:49:52:48:f4:43:fd:61:47:ac:bb:bf:df:
         8f:bb:71:01:08:c4:eb:f7:bd:b5:56:92:66:a7:1d:59:fb:21:
         57:66:16:1e:cf:e6:d8:ea:19:a5:8a:7b:6e:1c:1a:30:e3:e3:
         d3:79:b7:e2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9IDWRg+F/cBAXS+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDgyY2EzYTItOWUyYi00OWRhLWFhZWUtMmIwMmQwODk4
ZjgxMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk
YmNmNjZlNmUtODBiNC00ZTExLWFhNjEtMjVlYTk5MzUwNGNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSsNgL8r8/qe3BnD9O4juSGuRy7q4hhvgtM0
ko7e/zCDHkUgHNEAPVjmvl7GupDr/Z2kEhxO1lL2O6noKU3LMQV3Ott7Dwvjeyjs
jiTqgebxzpNYGh1VD/fv0iCzAHcZ3n0xlDnqtZmJhm4DD23ubM50CDtXRYe0/RNL
sCW2WQr5My1wKQ97BuAfAxIRYeNT86sBPbWN8bZ5zt/AZ7Y68yWON380BZkt+5Ze
tZ7HSdsGWfrWGuCeolEvERSL9Ehcha3N2WMu1cKOC/DrdVGpQ2b1SabJIqX/LR+r
v9V5PIceU+WT9gDCBG8AcxU1B73Pc8Buz7icAx8XBJxxSaaGCQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMA4Cflz9hvwcHaNbYWkH1A4MXG6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wODJj
YTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAyZDA4OThmODEvNWQzYjRiNDUtMTNjNy0z
NDIzLWI0MzUtOGE4MzMwYTI0MWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDgyY2EzYTItOWUyYi00OWRhLWFh
ZWUtMmIwMmQwODk4ZjgxLzA4MmNhM2EyLTllMmItNDlkYS1hYWVlLTJiMDJkMDg5
OGY4MS5jcmwwHwYDVR0jBBgwFoAUhbhudnk2OJYD9dqN3huu2bQfTDcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wODJjYTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAy
ZDA4OThmODEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgXkQABI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABj04IgPGNPXUUz+5nuI9jDl60cpy6es9PqEJYdP6X+KSf3YnUK2
8bGp6eY2z7YkV9wY230dj4eQAWw05TZqF73keAOkwair7MNwOWJSt4B/bzAEHZ0F
aQUxHL8a299PNfdzM9E9PXVz08YQaWfZ/HOH5u4nzBjrl3gfrh9R10Qjnqh5fjbV
09J6tphiviXiFKydd/fP5qvF+V8pGiHtyDCKpni0SyZZzu9P6MWWOCM7TOhEKo5M
/0IZJgAku4pwsa2JTz5wz+QYcg76JUlSSPRD/WFHrLu/34+7cQEIxOv3vbVWkman
HVn7IVdmFh7P5tjqGaWKe24cGjDj49N5t+I=
-----END CERTIFICATE-----
Generated at Tue Oct 6 14:59:48 2026 by rpki-client