Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2/c5ba7588-751d-3ce0-be5d-594e8df58c03.roa
File:                     c5ba7588-751d-3ce0-be5d-594e8df58c03.roa (raw, json)
Hash identifier:          cUEgXm1nk8Lh35LK1u4boMKMdfsq+AtSLPP1x3I+vas=
Subject key identifier:   AF:6D:65:C7:47:77:00:A1:FE:80:FA:7A:5E:CF:02:1A:19:B1:A7:DB
Certificate issuer:       /CN=2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2
Certificate serial:       010D0C9F4328584F51D2AB81E58216CB5C223500
Authority key identifier: 16:7D:BA:31:7A:2C:B9:B4:E3:4C:43:9D:6A:02:6C:C3:5E:70:20:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2/c5ba7588-751d-3ce0-be5d-594e8df58c03.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     399183
IP address blocks:        2620:90:a001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:ab:81:e5:82:16:cb:5c:22:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=879e917e-b28a-4050-b3bc-8b726b75b4d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:65:f8:29:dc:43:ae:ac:dd:f7:72:c7:7b:d7:
                    f2:fb:b2:1e:ef:6b:b9:9d:ae:5a:08:01:3e:78:da:
                    e2:c1:be:8f:b2:96:4f:08:80:f1:f2:e6:1d:9d:0d:
                    b7:8d:62:c8:35:69:68:fc:c8:86:e7:56:1d:56:22:
                    cf:2d:67:2c:a7:c3:fa:02:0c:01:35:83:08:94:b2:
                    b4:65:33:04:1b:67:57:ee:e5:34:2b:03:05:fc:fe:
                    aa:e3:df:40:0b:e6:32:b1:1e:69:4b:62:20:95:47:
                    43:60:8e:8d:0f:f6:d3:50:16:33:88:6d:6c:78:8c:
                    f7:b9:44:7c:17:54:12:6e:85:7b:f6:9f:2f:a8:27:
                    b5:13:d5:35:e0:06:38:10:40:d7:57:29:6b:87:61:
                    95:e9:69:41:73:81:ae:49:9c:64:8d:73:dc:60:22:
                    7f:46:e9:10:69:54:76:8b:f0:f2:e4:ea:6f:ff:20:
                    2e:10:c1:d8:97:3e:ab:18:0e:49:42:d4:1e:16:94:
                    cf:7b:52:bb:0c:e8:e2:99:da:64:74:3e:f4:16:d0:
                    20:3d:52:96:a5:9d:fe:c7:64:b3:bc:27:4a:cf:81:
                    7d:f2:52:46:2b:fd:b0:64:bf:cf:e5:01:ee:ce:bf:
                    c9:ff:6c:a7:11:0b:09:10:1c:13:ba:1f:4b:14:9f:
                    88:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6D:65:C7:47:77:00:A1:FE:80:FA:7A:5E:CF:02:1A:19:B1:A7:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2/c5ba7588-751d-3ce0-be5d-594e8df58c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2.crl

            X509v3 Authority Key Identifier:
                keyid:16:7D:BA:31:7A:2C:B9:B4:E3:4C:43:9D:6A:02:6C:C3:5E:70:20:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:90:a001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:3f:ed:d9:fb:d0:dc:d0:3e:cc:4b:24:9a:38:e9:fe:86:49:
         52:3b:27:ca:4f:c8:05:ac:5a:e3:d8:0b:69:9d:f1:6b:40:64:
         da:b3:1f:25:cd:68:b1:9c:b3:b6:d7:d5:93:5f:2a:75:b1:b8:
         d3:ca:d7:08:fa:4c:3e:de:ac:13:08:36:22:7a:ed:06:13:ee:
         98:7e:aa:af:f6:d7:9f:63:fb:de:43:93:73:ce:32:a5:04:e8:
         d5:63:9f:7b:25:03:61:30:b0:43:3c:3d:e3:32:7c:7d:9a:ba:
         60:87:07:85:93:2d:3f:73:04:b8:96:4b:19:76:d1:00:d0:a0:
         11:00:a1:40:c9:bb:18:dd:e8:80:77:c9:ee:cd:ce:ad:c4:6f:
         0e:c6:72:c7:e7:34:7b:c5:a6:6a:90:af:0b:26:24:34:64:55:
         5f:52:5f:a3:b6:76:7d:47:6a:4c:f2:47:e4:4f:96:d7:44:65:
         67:2d:03:e6:e7:99:73:f4:60:b2:25:e2:bd:1a:fd:21:6a:ac:
         0f:5e:3f:af:2b:97:f9:b2:19:5f:d0:c1:a7:d2:17:04:2d:e9:
         e8:8b:33:05:a1:fe:02:f5:c7:4c:78:ca:4a:99:2d:2e:e9:70:
         12:fb:8b:40:78:38:ed:b0:ef:c4:fc:66:2b:db:84:9f:1f:40:
         27:45:11:be
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9R0quB5YIWy1wiNQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmFkN2I3YjAtM2MxMS00ZDkyLTliMmItN2VkNGI0OWIz
OGMyMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk
ODc5ZTkxN2UtYjI4YS00MDUwLWIzYmMtOGI3MjZiNzViNGQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmX4KdxDrqzd93LHe9fy+7Ie72u5na5aCAE+
eNriwb6PspZPCIDx8uYdnQ23jWLINWlo/MiG51YdViLPLWcsp8P6AgwBNYMIlLK0
ZTMEG2dX7uU0KwMF/P6q499AC+YysR5pS2IglUdDYI6ND/bTUBYziG1seIz3uUR8
F1QSboV79p8vqCe1E9U14AY4EEDXVylrh2GV6WlBc4GuSZxkjXPcYCJ/RukQaVR2
i/Dy5Opv/yAuEMHYlz6rGA5JQtQeFpTPe1K7DOjimdpkdD70FtAgPVKWpZ3+x2Sz
vCdKz4F98lJGK/2wZL/P5QHuzr/J/2ynEQsJEBwTuh9LFJ+ImQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK9tZcdHdwCh/oD6el7PAhoZsafbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYWQ3
YjdiMC0zYzExLTRkOTItOWIyYi03ZWQ0YjQ5YjM4YzIvYzViYTc1ODgtNzUxZC0z
Y2UwLWJlNWQtNTk0ZThkZjU4YzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMmFkN2I3YjAtM2MxMS00ZDkyLTli
MmItN2VkNGI0OWIzOGMyLzJhZDdiN2IwLTNjMTEtNGQ5Mi05YjJiLTdlZDRiNDli
MzhjMi5jcmwwHwYDVR0jBBgwFoAUFn26MXosubTjTEOdagJsw15wIK4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYWQ3YjdiMC0zYzExLTRkOTItOWIyYi03ZWQ0
YjQ5YjM4YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAkKAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAL4/7dn70NzQPsxLJJo46f6GSVI7J8pPyAWsWuPYC2md8WtAZNqz
HyXNaLGcs7bX1ZNfKnWxuNPK1wj6TD7erBMINiJ67QYT7ph+qq/2159j+95Dk3PO
MqUE6NVjn3slA2EwsEM8PeMyfH2aumCHB4WTLT9zBLiWSxl20QDQoBEAoUDJuxjd
6IB3ye7Nzq3Ebw7GcsfnNHvFpmqQrwsmJDRkVV9SX6O2dn1HakzyR+RPltdEZWct
A+bnmXP0YLIl4r0a/SFqrA9eP68rl/myGV/QwafSFwQt6eiLMwWh/gL1x0x4ykqZ
LS7pcBL7i0B4OO2w78T8ZivbhJ8fQCdFEb4=
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:12:22 2026 by rpki-client