Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ea9d19a-196c-3475-8d45-717f8dea35b8.roa
File:                     5ea9d19a-196c-3475-8d45-717f8dea35b8.roa (raw, json)
Hash identifier:          V9FNxeqiVAu/bCsvSeEzHySVaNKimLoQbG2vDVWFNEk=
Subject key identifier:   B6:19:38:2B:81:BA:83:AE:2B:9E:5F:D6:A6:76:CD:23:D3:7A:0B:12
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F49802EF70B532B299F746940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ea9d19a-196c-3475-8d45-717f8dea35b8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22909
IP address blocks:        2601:845::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:80:2e:f7:0b:53:2b:29:9f:74:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d3e1b43b-4c49-4715-8843-344fd55d66bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:27:a1:86:bd:a0:fd:52:8b:42:66:27:45:4c:
                    27:db:5c:4f:36:2c:92:4e:e9:5f:d4:88:59:46:d7:
                    77:b8:8a:e6:43:b1:73:ec:af:b3:46:d2:bf:05:17:
                    a1:4d:79:78:8d:9b:fc:5e:02:26:a6:4f:d6:ed:0b:
                    6d:af:2f:ce:73:e9:91:39:1a:b5:57:d3:0e:85:88:
                    3c:08:ae:38:e7:13:60:48:4a:3a:5d:64:2e:61:4b:
                    bb:e4:41:fa:2e:e4:a9:08:eb:ad:08:ee:99:21:42:
                    f5:3b:63:0f:fc:07:9c:41:c7:b2:3f:07:c9:bf:d0:
                    b8:f4:46:cc:f6:c6:de:bd:db:b8:24:65:78:96:bc:
                    61:b6:88:d1:47:53:42:3b:ac:64:fe:de:cc:fa:8f:
                    ea:d4:95:9a:29:9a:f5:20:c3:20:65:f5:2e:4a:8c:
                    1e:ce:57:56:22:79:f6:b3:83:48:6e:78:18:2e:2c:
                    d9:95:c3:22:71:9f:4b:6e:95:4d:76:1e:6e:81:61:
                    25:73:44:bb:5d:af:7a:a6:8e:83:af:50:68:e3:e5:
                    0a:d2:8e:4f:79:20:a8:dd:bd:9f:44:4a:b6:0d:62:
                    22:9d:c2:ff:67:30:92:f3:65:ee:c6:fc:f4:e7:b6:
                    0e:56:5c:3f:b1:b0:e5:89:54:0a:17:9c:8d:03:ac:
                    ac:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:19:38:2B:81:BA:83:AE:2B:9E:5F:D6:A6:76:CD:23:D3:7A:0B:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ea9d19a-196c-3475-8d45-717f8dea35b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:845::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:2a:55:35:5f:91:32:c3:e3:90:88:5d:e9:a8:30:b9:4d:24:
         56:5c:b9:4a:d6:8b:54:09:fb:d8:33:12:50:42:a3:92:86:1a:
         80:83:79:be:56:19:83:21:38:86:9e:47:7d:b0:4b:34:aa:12:
         07:6d:de:cd:29:0a:30:73:79:fd:38:c4:7b:13:92:da:c4:5b:
         e4:95:6a:49:2b:fb:96:dd:b4:82:1c:76:8e:c1:68:a7:86:24:
         7a:88:3f:a7:28:28:46:65:7c:96:c9:c1:7b:7d:65:fa:f7:75:
         32:06:74:da:20:c6:44:b2:d5:33:da:0b:2e:5d:c3:f3:81:42:
         98:25:4b:5a:e5:6a:0f:dc:35:c3:cc:1a:5b:37:6e:99:56:45:
         69:9c:a6:54:80:54:73:d3:7e:ab:2f:0d:20:e3:61:e5:a7:b6:
         b5:0f:67:cc:14:e8:24:fa:ec:44:03:85:bd:41:12:21:8a:83:
         41:6d:ed:2e:10:07:29:20:1d:76:a4:2f:fb:ff:03:85:f5:e0:
         c3:c6:31:42:d3:83:5d:8f:2e:08:ad:b0:1d:7c:7f:36:0a:aa:
         a6:1b:ba:c2:e6:b6:1e:bf:cc:53:26:76:65:d6:a7:88:e6:38:
         16:2a:57:3c:60:b7:8f:a2:ce:dc:29:84:33:62:ce:a5:a6:2e:
         3a:9f:f7:05
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JgC73C1MrKZ90aUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZDNlMWI0M2ItNGM0OS00NzE1LTg4NDMtMzQ0ZmQ1NWQ2NmJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyehhr2g/VKLQmYnRUwn21xPNiySTulf1IhZ
Rtd3uIrmQ7Fz7K+zRtK/BRehTXl4jZv8XgImpk/W7Qttry/Oc+mRORq1V9MOhYg8
CK445xNgSEo6XWQuYUu75EH6LuSpCOutCO6ZIUL1O2MP/AecQceyPwfJv9C49EbM
9sbevdu4JGV4lrxhtojRR1NCO6xk/t7M+o/q1JWaKZr1IMMgZfUuSowezldWInn2
s4NIbngYLizZlcMicZ9LbpVNdh5ugWElc0S7Xa96po6Dr1Bo4+UK0o5PeSCo3b2f
REq2DWIincL/ZzCS82Xuxvz057YOVlw/sbDliVQKF5yNA6ysrwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLYZOCuBuoOuK55f1qZ2zSPTegsSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWVhOWQxOWEtMTk2Yy0z
NDc1LThkNDUtNzE3ZjhkZWEzNWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEIRQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAvipVNV+RMsPjkIhd6agwuU0kVly5StaLVAn72DMSUEKjkoYagIN5
vlYZgyE4hp5HfbBLNKoSB23ezSkKMHN5/TjEexOS2sRb5JVqSSv7lt20ghx2jsFo
p4Ykeog/pygoRmV8lsnBe31l+vd1MgZ02iDGRLLVM9oLLl3D84FCmCVLWuVqD9w1
w8waWzdumVZFaZymVIBUc9N+qy8NIONh5ae2tQ9nzBToJPrsRAOFvUESIYqDQW3t
LhAHKSAddqQv+/8DhfXgw8YxQtODXY8uCK2wHXx/Ngqqphu6wua2Hr/MUyZ2Zdan
iOY4FipXPGC3j6LO3CmEM2LOpaYuOp/3BQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:19:46 2026 by rpki-client