Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/5cb86780-eead-3402-9ecf-8879529d2c03.roa
File:                     5cb86780-eead-3402-9ecf-8879529d2c03.roa (raw, json)
Hash identifier:          kesA0vUadKrCz/A1hgMfhRuqRrDJYJo2Q1BLA82dO/Q=
Subject key identifier:   37:88:D2:5D:34:70:AC:DB:60:82:C3:38:3E:10:7A:5D:DB:95:84:D9
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584EA788260B6CDE00EA8E6A5680
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/5cb86780-eead-3402-9ecf-8879529d2c03.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     2152
IP address blocks:        2607:cc80:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:26:0b:6c:de:00:ea:8e:6a:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6fd03622-ad5c-45ce-b99b-f249bf345b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:05:92:a3:2b:b9:6c:b8:eb:0f:61:ea:37:b3:
                    76:e4:97:76:2a:fb:10:4e:54:bd:8f:5c:e5:cc:86:
                    a0:7c:2a:59:95:3d:d4:94:a2:30:b9:67:52:90:be:
                    62:30:18:a4:e4:17:ef:d3:7f:05:5f:57:7f:eb:cd:
                    07:fa:7b:74:b8:f4:ca:a0:fe:f1:a4:e8:e5:c0:80:
                    9b:ed:fb:80:06:f9:00:81:b6:6a:6e:80:8a:25:5b:
                    26:97:33:a9:f7:67:81:b9:ad:ca:5d:31:9c:bd:6d:
                    08:49:8d:62:3f:8d:00:3c:71:bf:24:81:4e:81:1a:
                    c3:44:92:89:d3:79:37:d8:48:74:6c:51:4a:6e:03:
                    63:ee:44:cf:5d:cd:97:f5:7f:78:94:ea:59:8d:28:
                    6c:2f:d1:65:fb:ef:11:9c:a0:df:2e:4c:0e:08:0d:
                    5c:79:e3:45:fe:33:54:2b:a8:2a:6f:6d:c3:90:26:
                    0a:01:9b:47:e6:c7:20:41:c6:93:41:52:9c:f8:7e:
                    71:cb:05:76:d0:10:85:99:94:10:2e:0a:7e:bf:5d:
                    17:e8:ca:08:12:2f:a8:05:7b:1a:48:4f:bb:2e:b2:
                    36:26:c7:86:c5:56:d5:72:c7:af:20:43:da:ac:2c:
                    b6:08:f0:18:94:25:0e:c9:31:7f:f7:4d:31:ea:28:
                    88:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:88:D2:5D:34:70:AC:DB:60:82:C3:38:3E:10:7A:5D:DB:95:84:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/5cb86780-eead-3402-9ecf-8879529d2c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:1000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:cb:dc:f2:9f:8d:33:f8:e9:dd:a3:50:72:74:bf:aa:fa:15:
         81:b0:45:05:ad:96:3d:1d:7d:6c:10:df:10:b2:e4:3b:c0:7f:
         99:0d:72:81:93:73:21:2d:2d:2f:45:d3:88:cc:2b:fd:5f:42:
         e6:75:39:9e:7a:96:fa:f8:fe:d4:73:d4:4f:b5:1c:f0:10:92:
         26:16:5c:bd:7f:a2:d5:24:aa:fc:88:70:b3:10:aa:57:dc:fd:
         02:cf:42:be:fd:f0:35:53:27:2e:00:71:46:f0:89:6b:af:c5:
         79:fd:39:d9:12:82:9e:90:38:73:88:a5:c7:10:e8:ea:fc:c3:
         3a:cd:13:bb:37:67:8a:5e:41:a3:71:23:7a:81:30:a1:b0:e5:
         62:17:a9:d4:b3:69:50:ad:9c:0b:a6:a9:01:c5:bf:70:2c:c3:
         86:c3:0d:22:3e:49:6f:43:03:49:9b:7d:7e:83:5f:3c:3d:6c:
         dc:43:52:f5:ef:ea:df:54:3b:3f:15:8b:4c:18:cf:9a:a4:8a:
         c4:11:23:fe:3c:52:8e:a0:35:d3:08:17:60:d9:41:02:78:8d:
         3f:ae:ca:b3:c7:be:23:ec:86:49:d9:53:b7:b0:9b:d4:2e:25:
         f1:f7:b4:8c:d5:00:82:04:fd:a8:96:3e:15:bb:82:30:25:28:
         fe:1b:ed:50
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6niCYLbN4A6o5qVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE1ZDNmZGItN2MyZC00MzkwLWE3MmYtZmE0NmYwMmY0
MDc4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NmZkMDM2MjItYWQ1Yy00NWNlLWI5OWItZjI0OWJmMzQ1YjcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQWSoyu5bLjrD2HqN7N25Jd2KvsQTlS9j1zl
zIagfCpZlT3UlKIwuWdSkL5iMBik5Bfv038FX1d/680H+nt0uPTKoP7xpOjlwICb
7fuABvkAgbZqboCKJVsmlzOp92eBua3KXTGcvW0ISY1iP40APHG/JIFOgRrDRJKJ
03k32Eh0bFFKbgNj7kTPXc2X9X94lOpZjShsL9Fl++8RnKDfLkwOCA1ceeNF/jNU
K6gqb23DkCYKAZtH5scgQcaTQVKc+H5xywV20BCFmZQQLgp+v10X6MoIEi+oBXsa
SE+7LrI2JseGxVbVcsevIEParCy2CPAYlCUOyTF/900x6iiIPQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDeI0l00cKzbYILDOD4Qel3blYTZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTVk
M2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2ZjAyZjQwNzgvNWNiODY3ODAtZWVhZC0z
NDAyLTllY2YtODg3OTUyOWQyYzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE1ZDNmZGItN2MyZC00MzkwLWE3
MmYtZmE0NmYwMmY0MDc4L2UxNWQzZmRiLTdjMmQtNDM5MC1hNzJmLWZhNDZmMDJm
NDA3OC5jcmwwHwYDVR0jBBgwFoAUEMqrDaYVw2cS3TXs0nMj95zDq7AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMTVkM2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2
ZjAyZjQwNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfMgBAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEnL3PKfjTP46d2jUHJ0v6r6FYGwRQWtlj0dfWwQ3xCy5DvAf5kN
coGTcyEtLS9F04jMK/1fQuZ1OZ56lvr4/tRz1E+1HPAQkiYWXL1/otUkqvyIcLMQ
qlfc/QLPQr798DVTJy4AcUbwiWuvxXn9OdkSgp6QOHOIpccQ6Or8wzrNE7s3Z4pe
QaNxI3qBMKGw5WIXqdSzaVCtnAumqQHFv3Asw4bDDSI+SW9DA0mbfX6DXzw9bNxD
UvXv6t9UOz8Vi0wYz5qkisQRI/48Uo6gNdMIF2DZQQJ4jT+uyrPHviPshknZU7ew
m9QuJfH3tIzVAIIE/aiWPhW7gjAlKP4b7VA=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:43:19 2026 by rpki-client