Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5dba420f-9cf2-3712-a603-ddcda508b950.roa
File:                     5dba420f-9cf2-3712-a603-ddcda508b950.roa (raw, json)
Hash identifier:          qxz76rCR+ChbV/cMjwWm3KTyR4HMQu0dC7UjUAN9xmM=
Subject key identifier:   3D:B3:06:A0:7A:FF:AE:1A:AB:07:92:9F:FA:38:7C:DD:EA:89:68:4C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F82ADA0C96D98E9E6B9B18800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5dba420f-9cf2-3712-a603-ddcda508b950.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     12222
IP address blocks:        2001:4878:2215::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:a0:c9:6d:98:e9:e6:b9:b1:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=500465fc-5029-4af3-bbb0-184e7ac201ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1e:7f:3b:00:27:0e:e6:2e:7d:ad:4f:05:65:
                    48:f3:a0:1e:d3:02:27:6f:3b:74:45:cd:d0:83:32:
                    35:c8:a4:4c:5b:ff:c4:e3:18:28:98:c3:8c:1c:98:
                    b2:65:ed:57:dc:00:82:50:c7:a2:5b:d5:23:f1:d4:
                    5e:41:42:dd:76:7e:72:ad:b5:7b:bb:9a:8c:0f:6f:
                    65:e4:f6:e2:52:77:79:25:eb:c3:66:23:da:4e:1c:
                    e9:f0:a2:15:df:d6:6a:f0:02:08:b6:02:a2:ed:31:
                    c9:b1:fa:ca:dc:41:0f:cc:94:31:20:24:dd:b7:09:
                    0e:d1:9b:8b:1c:70:2c:a6:df:b8:0f:9d:9f:bf:93:
                    f1:c6:46:c0:95:93:d5:65:1a:55:d5:e1:83:d1:e3:
                    6e:d4:a6:c6:2d:6d:bb:04:1d:22:f1:59:ed:6f:38:
                    ff:69:d6:51:2f:52:31:df:c6:8b:83:89:21:31:04:
                    d1:28:55:c3:b5:ff:4a:a4:e7:d3:c0:e9:f5:7a:14:
                    45:67:16:21:3f:50:46:fa:bf:22:9d:8a:27:6b:77:
                    d2:00:87:58:fa:94:6c:21:a6:0d:10:9c:99:3b:2b:
                    2a:78:bc:56:30:8c:c6:ff:f7:51:c4:34:54:60:71:
                    0e:ee:0b:79:0c:3e:50:fd:f9:f8:95:f5:c3:fd:61:
                    8a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B3:06:A0:7A:FF:AE:1A:AB:07:92:9F:FA:38:7C:DD:EA:89:68:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5dba420f-9cf2-3712-a603-ddcda508b950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:2215::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:27:60:43:42:e6:c0:85:ef:ce:9c:33:68:e8:1a:01:b0:d1:
         8a:ba:8e:96:7e:d0:ec:80:15:9e:56:92:4c:70:22:08:ed:46:
         a8:e7:41:11:35:b7:cd:62:a5:29:2b:07:44:18:ee:7f:b8:19:
         03:9f:11:24:1f:74:08:2e:41:a3:59:99:5d:2c:36:5f:1a:03:
         9f:82:69:16:c8:53:f9:72:cd:f1:6f:6e:14:b2:17:a4:46:d1:
         2d:97:a2:f7:fe:08:f5:fd:97:17:a9:95:d4:d5:5d:23:5b:39:
         0c:75:0a:85:3e:b7:8e:5a:26:87:db:fc:f5:b0:1c:3e:cb:4d:
         05:97:d5:e4:c8:d5:e9:21:05:7b:82:b2:c4:14:5e:fb:7f:6c:
         22:6e:5f:50:15:26:1b:3a:68:e5:01:41:78:b5:28:e2:c2:d6:
         12:b7:65:70:52:f2:31:82:4d:02:26:08:56:c0:3f:35:00:f5:
         07:31:cf:c7:5f:5d:8e:3b:55:2c:62:1f:39:f1:fa:b4:98:cb:
         c3:68:af:23:72:d9:ff:de:73:bf:72:95:20:ad:cc:01:60:7f:
         a2:2b:76:57:9b:6f:73:0f:c7:15:3a:58:d6:b6:53:49:04:f1:
         d1:9f:bc:a1:d5:23:70:1b:f7:51:c1:f0:21:27:05:b7:5c:0e:
         a0:d9:7c:f2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+CraDJbZjp5rmxiAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk
NTAwNDY1ZmMtNTAyOS00YWYzLWJiYjAtMTg0ZTdhYzIwMWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR5/OwAnDuYufa1PBWVI86Ae0wInbzt0Rc3Q
gzI1yKRMW//E4xgomMOMHJiyZe1X3ACCUMeiW9Uj8dReQULddn5yrbV7u5qMD29l
5PbiUnd5JevDZiPaThzp8KIV39Zq8AIItgKi7THJsfrK3EEPzJQxICTdtwkO0ZuL
HHAspt+4D52fv5PxxkbAlZPVZRpV1eGD0eNu1KbGLW27BB0i8Vntbzj/adZRL1Ix
38aLg4khMQTRKFXDtf9KpOfTwOn1ehRFZxYhP1BG+r8inYona3fSAIdY+pRsIaYN
EJyZOysqeLxWMIzG//dRxDRUYHEO7gt5DD5Q/fn4lfXD/WGKjQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD2zBqB6/64aqweSn/o4fN3qiWhMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWRiYTQyMGYtOWNmMi0z
NzEyLWE2MDMtZGRjZGE1MDhiOTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeCIV
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIwnYENC5sCF786cM2joGgGw0Yq6jpZ+0OyAFZ5WkkxwIgjtRqjn
QRE1t81ipSkrB0QY7n+4GQOfESQfdAguQaNZmV0sNl8aA5+CaRbIU/lyzfFvbhSy
F6RG0S2Xovf+CPX9lxepldTVXSNbOQx1CoU+t45aJofb/PWwHD7LTQWX1eTI1ekh
BXuCssQUXvt/bCJuX1AVJhs6aOUBQXi1KOLC1hK3ZXBS8jGCTQImCFbAPzUA9Qcx
z8dfXY47VSxiHznx+rSYy8NoryNy2f/ec79ylSCtzAFgf6Irdlebb3MPxxU6WNa2
U0kE8dGfvKHVI3Ab91HB8CEnBbdcDqDZfPI=
-----END CERTIFICATE-----
Generated at Thu Oct 22 10:34:08 2026 by rpki-client