Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1831f34a-97fe-41f4-8c90-0c35201574c4/e0ff5e4e-1494-38c2-aac5-a83dbdfe9a1e.roa
File:                     e0ff5e4e-1494-38c2-aac5-a83dbdfe9a1e.roa (raw, json)
Hash identifier:          srxXN4YQOI3g5TdksRbmgih3DxOT3Swt8IUDPjvvaT4=
Subject key identifier:   5D:F5:4F:82:A5:07:A4:29:73:12:DA:FE:8F:EB:8F:A5:4C:64:51:DD
Certificate issuer:       /CN=1831f34a-97fe-41f4-8c90-0c35201574c4
Certificate serial:       010D0C9F4328584EA788B70BD31DF1E1AAF7BB00
Authority key identifier: 82:CA:3B:52:39:D0:75:A1:50:50:AB:74:E4:F3:0C:75:88:FB:A9:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1831f34a-97fe-41f4-8c90-0c35201574c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1831f34a-97fe-41f4-8c90-0c35201574c4/e0ff5e4e-1494-38c2-aac5-a83dbdfe9a1e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     402197
IP address blocks:        2604:ecc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1831f34a-97fe-41f4-8c90-0c35201574c4/1831f34a-97fe-41f4-8c90-0c35201574c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1831f34a-97fe-41f4-8c90-0c35201574c4/1831f34a-97fe-41f4-8c90-0c35201574c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1831f34a-97fe-41f4-8c90-0c35201574c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:b7:0b:d3:1d:f1:e1:aa:f7:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1831f34a-97fe-41f4-8c90-0c35201574c4
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2e14fa56-038e-4e17-8547-0aadd391249b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9d:6a:85:65:2a:ca:0f:94:51:62:d3:be:42:
                    ad:0a:3f:33:7e:0a:76:ee:14:6d:5f:a1:22:d1:e3:
                    17:46:0a:b3:3e:6b:35:8a:fe:8f:f8:40:64:1e:7d:
                    d5:5d:03:89:3d:c9:56:98:35:14:30:fa:89:2f:a5:
                    59:e5:f2:bc:b4:83:ba:95:eb:d9:04:2a:bb:e3:81:
                    da:29:bf:e6:42:62:a4:25:42:fa:58:27:6d:46:47:
                    bf:f1:c7:6b:98:4c:f9:0f:aa:40:37:10:e2:63:28:
                    d9:de:dc:3b:15:b3:0f:7c:de:53:cd:f6:e4:81:80:
                    1b:26:e2:85:e8:37:9d:04:a4:28:3a:c8:d5:7a:5a:
                    7a:4a:3e:3e:f8:63:bc:9f:ab:5c:b1:f9:2f:dc:54:
                    01:6c:98:22:88:64:af:24:2c:7c:48:c3:18:fd:51:
                    bc:27:43:2c:5a:df:d1:66:46:29:f4:24:ba:33:9d:
                    e1:fb:06:16:5c:a7:7f:de:ff:33:80:6f:52:a0:b8:
                    c7:5a:ed:d4:f2:74:01:d4:23:6d:a4:f2:86:a9:61:
                    40:75:ac:73:af:e4:c4:df:6d:64:bb:7d:87:78:e9:
                    fd:0d:f3:0b:ea:f2:99:2d:4d:00:f5:71:9d:43:6e:
                    7e:76:fc:71:23:07:8b:b5:12:e2:d3:cf:c1:2d:be:
                    51:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F5:4F:82:A5:07:A4:29:73:12:DA:FE:8F:EB:8F:A5:4C:64:51:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1831f34a-97fe-41f4-8c90-0c35201574c4/e0ff5e4e-1494-38c2-aac5-a83dbdfe9a1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1831f34a-97fe-41f4-8c90-0c35201574c4/1831f34a-97fe-41f4-8c90-0c35201574c4.crl

            X509v3 Authority Key Identifier:
                keyid:82:CA:3B:52:39:D0:75:A1:50:50:AB:74:E4:F3:0C:75:88:FB:A9:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1831f34a-97fe-41f4-8c90-0c35201574c4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ecc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:32:01:fd:79:ff:3c:6d:d8:61:49:5f:0c:29:6b:16:2f:47:
         74:f4:5d:b9:f2:5b:8f:ae:80:11:1d:47:48:68:64:e9:20:0e:
         fc:b8:9e:a1:f9:f1:be:61:56:87:32:1e:c2:83:c1:fb:dd:0b:
         d5:70:a1:38:2c:7e:55:aa:b1:1d:5f:2c:2d:85:8a:21:fb:d5:
         e4:fd:d4:7d:d9:17:2d:fd:4e:d2:17:04:29:c2:b9:51:ee:80:
         ab:87:7b:9a:3c:7d:ac:50:af:0f:87:41:f1:4f:44:c8:81:93:
         c2:70:9e:15:fd:93:74:6c:ed:38:25:c7:ee:8b:3f:9e:37:c6:
         b4:6b:5c:29:54:b0:21:79:fe:a9:45:09:87:12:55:b2:35:c3:
         89:aa:63:65:6c:22:38:5b:86:9d:e2:a7:f0:06:66:97:8c:2f:
         48:e1:8a:dd:d6:da:31:b3:27:00:08:a6:b2:4a:98:ba:8a:2b:
         42:9c:e5:46:e2:da:d6:84:64:ab:de:32:21:87:b6:9a:3e:95:
         41:90:b0:97:af:db:6f:e5:38:b0:cc:20:63:95:84:d5:29:e4:
         2c:53:0e:3a:9d:bb:60:47:03:c9:61:0c:8e:34:7d:02:81:9f:
         33:9d:d4:93:8d:a1:86:f9:20:c9:82:c7:ef:8a:5e:5f:4f:25:
         af:8e:4b:80
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6niLcL0x3x4ar3uwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTgzMWYzNGEtOTdmZS00MWY0LThjOTAtMGMzNTIwMTU3
NGM0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MmUxNGZhNTYtMDM4ZS00ZTE3LTg1NDctMGFhZGQzOTEyNDliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ1qhWUqyg+UUWLTvkKtCj8zfgp27hRtX6Ei
0eMXRgqzPms1iv6P+EBkHn3VXQOJPclWmDUUMPqJL6VZ5fK8tIO6levZBCq744Ha
Kb/mQmKkJUL6WCdtRke/8cdrmEz5D6pANxDiYyjZ3tw7FbMPfN5TzfbkgYAbJuKF
6DedBKQoOsjVelp6Sj4++GO8n6tcsfkv3FQBbJgiiGSvJCx8SMMY/VG8J0MsWt/R
ZkYp9CS6M53h+wYWXKd/3v8zgG9SoLjHWu3U8nQB1CNtpPKGqWFAdaxzr+TE321k
u32HeOn9DfML6vKZLU0A9XGdQ25+dvxxIweLtRLi08/BLb5RUwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFF31T4KlB6QpcxLa/o/rj6VMZFHdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8xODMx
ZjM0YS05N2ZlLTQxZjQtOGM5MC0wYzM1MjAxNTc0YzQvZTBmZjVlNGUtMTQ5NC0z
OGMyLWFhYzUtYTgzZGJkZmU5YTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMTgzMWYzNGEtOTdmZS00MWY0LThj
OTAtMGMzNTIwMTU3NGM0LzE4MzFmMzRhLTk3ZmUtNDFmNC04YzkwLTBjMzUyMDE1
NzRjNC5jcmwwHwYDVR0jBBgwFoAUgso7UjnQdaFQUKt05PMMdYj7qcowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8xODMxZjM0YS05N2ZlLTQxZjQtOGM5MC0wYzM1
MjAxNTc0YzQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTswDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA5MgH9ef88bdhhSV8MKWsWL0d09F258luProARHUdIaGTpIA78uJ6h
+fG+YVaHMh7Cg8H73QvVcKE4LH5VqrEdXywthYoh+9Xk/dR92Rct/U7SFwQpwrlR
7oCrh3uaPH2sUK8Ph0HxT0TIgZPCcJ4V/ZN0bO04Jcfuiz+eN8a0a1wpVLAhef6p
RQmHElWyNcOJqmNlbCI4W4ad4qfwBmaXjC9I4Yrd1toxsycACKaySpi6iitCnOVG
4trWhGSr3jIhh7aaPpVBkLCXr9tv5TiwzCBjlYTVKeQsUw46nbtgRwPJYQyONH0C
gZ8zndSTjaGG+SDJgsfvil5fTyWvjkuA
-----END CERTIFICATE-----
Generated at Mon Aug 31 10:30:07 2026 by rpki-client