Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/ceda3ed4-49e5-373f-b1c9-7344fce724af.roa
File:                     ceda3ed4-49e5-373f-b1c9-7344fce724af.roa (raw, json)
Hash identifier:          qExHqg8Gcm7XVXp3SZoWE6XhW17lVVggQC3ZB2FTQC4=
Subject key identifier:   82:27:0E:B6:71:B9:96:6A:BA:C3:02:06:69:3A:F0:0E:87:DD:05:35
Certificate issuer:       /CN=e179ce28-23c7-45e1-9b0e-d90358c94f57
Certificate serial:       010D0C9F4328584EC7A1D3D5B3CBA513EFD08E00
Authority key identifier: D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/ceda3ed4-49e5-373f-b1c9-7344fce724af.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     46539
IP address blocks:        2605:cb40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:d3:d5:b3:cb:a5:13:ef:d0:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e179ce28-23c7-45e1-9b0e-d90358c94f57
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=90bd497d-db09-4698-8bf3-1538d8b61af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d5:43:9c:ab:88:98:c0:af:46:17:9a:5f:93:
                    7e:84:cc:2b:31:50:9a:d5:67:3e:e3:2b:4b:68:3e:
                    45:25:31:7b:85:69:9c:63:1e:97:59:5c:cb:f4:de:
                    da:bc:9b:82:80:c6:a6:97:09:1c:73:5b:8f:55:9d:
                    98:01:2c:d1:e6:f5:41:19:6e:f6:34:96:9d:fb:8d:
                    37:2c:84:0f:58:24:82:47:a1:64:ba:16:32:e6:04:
                    07:e7:25:39:5c:fd:aa:88:02:d3:0c:43:c6:88:db:
                    9a:2b:0f:69:03:4d:5d:8c:f4:18:f9:76:cf:79:65:
                    81:9c:75:bd:dc:34:73:27:75:92:c5:5a:22:40:4f:
                    01:7d:cf:08:dc:96:00:ba:3b:ee:09:46:3b:fd:fb:
                    0f:ed:b6:9e:e0:36:15:04:b1:47:0b:aa:c3:0d:09:
                    ad:c2:e1:6a:95:07:4f:14:b9:95:33:94:9f:d9:1b:
                    e3:98:4c:fd:e5:ef:00:53:cf:b3:32:ac:ae:13:91:
                    13:ae:72:16:22:d2:72:c1:ad:d8:ed:d9:83:06:51:
                    c9:c7:25:f5:03:9c:59:51:9a:ed:b9:5e:5d:2b:67:
                    0f:51:0b:8c:13:f1:65:52:04:d6:6a:10:60:ef:14:
                    5d:5d:07:d7:7a:16:b5:6b:dd:75:97:29:a3:32:51:
                    ac:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:27:0E:B6:71:B9:96:6A:BA:C3:02:06:69:3A:F0:0E:87:DD:05:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/ceda3ed4-49e5-373f-b1c9-7344fce724af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.crl

            X509v3 Authority Key Identifier:
                keyid:D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:cb40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:20:94:26:ab:15:cb:57:06:70:cd:ae:2a:14:43:17:44:28:
         11:70:1d:cc:4b:77:81:d9:ad:cd:96:07:8d:e2:43:ed:e7:4e:
         52:df:06:8a:5e:de:03:75:0b:71:0d:c9:df:18:68:2e:44:bd:
         bb:51:ad:7a:fe:b5:54:ff:9e:eb:2f:7f:6f:ae:9c:a1:84:1f:
         7e:7d:53:0a:2e:73:8b:1e:7b:d0:b4:63:f9:1f:e5:db:b6:8e:
         35:1b:2c:0f:b8:0e:a5:f3:23:a8:99:dd:49:44:b7:43:e7:2a:
         98:73:40:f7:94:39:cf:fd:76:8c:7d:35:d0:36:ff:ab:68:ee:
         08:20:d7:25:0b:6e:50:c7:bc:aa:68:ee:fc:13:87:93:f1:cb:
         75:66:ba:06:d6:aa:0e:75:40:91:16:49:cf:68:2d:4f:de:18:
         2e:30:50:2e:83:05:4b:9f:d5:10:f3:40:32:2e:64:2c:04:57:
         12:b2:9e:2e:22:17:79:c4:f8:5e:8f:cd:3a:67:12:50:4a:79:
         65:83:bb:32:cf:82:6e:72:1a:48:5b:39:87:ad:c2:c3:f8:50:
         e1:be:bb:57:e2:fe:73:1a:22:e0:82:9b:e9:ef:78:18:d6:49:
         8f:1b:d5:58:79:8a:2c:09:e0:91:23:ee:b0:40:79:9b:41:60:
         42:ca:ed:14
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7HodPVs8ulE+/QjgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE3OWNlMjgtMjNjNy00NWUxLTliMGUtZDkwMzU4Yzk0
ZjU3MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk
OTBiZDQ5N2QtZGIwOS00Njk4LThiZjMtMTUzOGQ4YjYxYWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitVDnKuImMCvRheaX5N+hMwrMVCa1Wc+4ytL
aD5FJTF7hWmcYx6XWVzL9N7avJuCgMamlwkcc1uPVZ2YASzR5vVBGW72NJad+403
LIQPWCSCR6FkuhYy5gQH5yU5XP2qiALTDEPGiNuaKw9pA01djPQY+XbPeWWBnHW9
3DRzJ3WSxVoiQE8Bfc8I3JYAujvuCUY7/fsP7bae4DYVBLFHC6rDDQmtwuFqlQdP
FLmVM5Sf2RvjmEz95e8AU8+zMqyuE5ETrnIWItJywa3Y7dmDBlHJxyX1A5xZUZrt
uV5dK2cPUQuME/FlUgTWahBg7xRdXQfXeha1a911lymjMlGs+wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIInDrZxuZZqusMCBmk68A6H3QU1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTc5
Y2UyOC0yM2M3LTQ1ZTEtOWIwZS1kOTAzNThjOTRmNTcvY2VkYTNlZDQtNDllNS0z
NzNmLWIxYzktNzM0NGZjZTcyNGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE3OWNlMjgtMjNjNy00NWUxLTli
MGUtZDkwMzU4Yzk0ZjU3L2UxNzljZTI4LTIzYzctNDVlMS05YjBlLWQ5MDM1OGM5
NGY1Ny5jcmwwHwYDVR0jBBgwFoAU2AXHLiY/2rj1Q+/5UZWEQBye9GAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMTc5Y2UyOC0yM2M3LTQ1ZTEtOWIwZS1kOTAz
NThjOTRmNTcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXLQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAsIJQmqxXLVwZwza4qFEMXRCgRcB3MS3eB2a3NlgeN4kPt505S3waK
Xt4DdQtxDcnfGGguRL27Ua16/rVU/57rL39vrpyhhB9+fVMKLnOLHnvQtGP5H+Xb
to41GywPuA6l8yOomd1JRLdD5yqYc0D3lDnP/XaMfTXQNv+raO4IINclC25Qx7yq
aO78E4eT8ct1ZroG1qoOdUCRFknPaC1P3hguMFAugwVLn9UQ80AyLmQsBFcSsp4u
Ihd5xPhej806ZxJQSnllg7syz4JuchpIWzmHrcLD+FDhvrtX4v5zGiLggpvp73gY
1kmPG9VYeYosCeCRI+6wQHmbQWBCyu0U
-----END CERTIFICATE-----
Generated at Thu Aug 20 00:08:14 2026 by rpki-client