Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b18b941-68db-40cf-9ad4-a1488a74fc10/5e5880e7-68fa-3c02-9cac-d00d37932a8b.roa
File:                     5e5880e7-68fa-3c02-9cac-d00d37932a8b.roa (raw, json)
Hash identifier:          HGNKaZhIDoHcoVPF/EtoOMiFFMur43NmqXJF9pe8+Cw=
Subject key identifier:   C3:1E:38:22:7E:7F:68:7F:D6:F4:15:C9:BC:42:36:4F:EE:AB:88:DC
Certificate issuer:       /CN=0b18b941-68db-40cf-9ad4-a1488a74fc10
Certificate serial:       010D0C9F4328584F119CDF8EE301DDA227FF2280
Authority key identifier: A6:AF:BD:1D:12:D6:7A:FB:69:87:BD:78:CF:75:9E:FA:0A:50:8F:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b18b941-68db-40cf-9ad4-a1488a74fc10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b18b941-68db-40cf-9ad4-a1488a74fc10/5e5880e7-68fa-3c02-9cac-d00d37932a8b.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     7784
IP address blocks:        2602:81e:5000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b18b941-68db-40cf-9ad4-a1488a74fc10/0b18b941-68db-40cf-9ad4-a1488a74fc10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b18b941-68db-40cf-9ad4-a1488a74fc10/0b18b941-68db-40cf-9ad4-a1488a74fc10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b18b941-68db-40cf-9ad4-a1488a74fc10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:df:8e:e3:01:dd:a2:27:ff:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b18b941-68db-40cf-9ad4-a1488a74fc10
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=9aa395ca-a436-4f5d-aed7-3a4a90762b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:30:13:20:b5:dd:86:88:1d:a6:c8:23:7f:d7:
                    11:2b:af:b1:89:0c:33:a8:41:1c:52:75:f1:0f:4c:
                    15:2d:31:ab:93:13:25:b4:4f:f2:81:d0:82:72:2d:
                    a0:d7:0e:d6:d4:d7:51:04:ba:a2:86:df:a9:1c:a5:
                    c4:68:e0:1a:30:aa:d4:e7:bc:e1:54:e3:e2:5a:d7:
                    f9:6c:c3:e9:5b:b4:d1:4a:6a:24:10:a7:5d:1c:2f:
                    3c:8f:a4:b1:de:3e:0c:5f:13:5c:c2:78:9b:56:35:
                    79:06:44:b4:26:7d:0e:dd:f5:42:61:52:83:74:e5:
                    95:19:02:78:2d:66:90:70:c8:b5:4a:5f:cf:a2:e4:
                    f5:4d:d8:91:93:92:6a:e2:93:09:3d:38:57:21:aa:
                    80:ba:15:40:79:00:cb:1b:4a:68:58:1b:cc:36:3a:
                    5f:74:2a:3c:15:1e:bb:71:a1:33:7f:d4:9b:28:22:
                    25:d9:0d:3a:00:c3:ec:8e:28:56:1a:3c:f3:40:c9:
                    be:dc:72:bd:fc:bf:29:03:4d:e2:49:60:d7:a3:ef:
                    f0:9d:2d:55:5a:bf:c7:d6:ef:9c:87:28:14:2a:65:
                    84:9b:9d:1b:96:51:d9:9f:ac:05:be:1e:32:c0:b6:
                    ef:5d:93:82:7a:9a:2f:12:33:55:9e:0e:2e:8a:a0:
                    b4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1E:38:22:7E:7F:68:7F:D6:F4:15:C9:BC:42:36:4F:EE:AB:88:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b18b941-68db-40cf-9ad4-a1488a74fc10/5e5880e7-68fa-3c02-9cac-d00d37932a8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b18b941-68db-40cf-9ad4-a1488a74fc10/0b18b941-68db-40cf-9ad4-a1488a74fc10.crl

            X509v3 Authority Key Identifier:
                keyid:A6:AF:BD:1D:12:D6:7A:FB:69:87:BD:78:CF:75:9E:FA:0A:50:8F:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0b18b941-68db-40cf-9ad4-a1488a74fc10.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81e:5000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:ca:dd:22:be:eb:21:a7:9d:bb:0f:7a:f8:58:6f:48:3c:4a:
         ba:e2:8e:1d:45:e4:76:5f:b6:6e:1b:d2:50:93:ce:5e:14:ca:
         35:9b:07:02:33:fd:87:c6:76:ba:9d:00:c9:5e:50:33:cb:5f:
         6e:1e:73:e5:1a:44:cb:44:2f:43:95:1c:e2:41:25:8d:a9:6a:
         89:0b:4e:62:0f:d7:df:c6:46:0f:ab:9b:48:67:c4:8c:14:2e:
         11:8d:25:99:ca:5f:cc:86:7d:b2:9b:0c:15:29:2e:45:c5:69:
         4c:6e:3c:68:dd:ee:ab:14:7c:5d:06:69:d8:63:2f:3b:8c:cd:
         11:de:fd:d9:53:ec:31:96:db:30:c4:35:3d:fb:a4:04:d4:4e:
         ed:80:bf:13:d8:db:b1:bc:cc:b0:96:c6:41:59:d7:5f:47:73:
         bf:0b:8f:04:ce:72:e9:42:b5:aa:40:8c:9f:3f:ec:71:0a:f6:
         bf:58:39:4a:90:15:df:ee:13:87:86:52:fc:0e:26:52:2b:41:
         69:c7:7f:b7:50:49:88:3e:4c:4e:63:cf:d6:3f:8f:8f:7e:55:
         e7:a7:19:e6:bf:fa:83:fc:8a:3e:e8:65:18:ce:34:04:e7:57:
         18:96:36:b4:de:2a:17:b8:11:1d:f5:4f:fa:78:2e:f5:dc:d9:
         9c:e8:91:59
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8RnN+O4wHdoif/IoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGIxOGI5NDEtNjhkYi00MGNmLTlhZDQtYTE0ODhhNzRm
YzEwMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
OWFhMzk1Y2EtYTQzNi00ZjVkLWFlZDctM2E0YTkwNzYyYjJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDATILXdhogdpsgjf9cRK6+xiQwzqEEcUnXx
D0wVLTGrkxMltE/ygdCCci2g1w7W1NdRBLqiht+pHKXEaOAaMKrU57zhVOPiWtf5
bMPpW7TRSmokEKddHC88j6Sx3j4MXxNcwnibVjV5BkS0Jn0O3fVCYVKDdOWVGQJ4
LWaQcMi1Sl/PouT1TdiRk5Jq4pMJPThXIaqAuhVAeQDLG0poWBvMNjpfdCo8FR67
caEzf9SbKCIl2Q06AMPsjihWGjzzQMm+3HK9/L8pA03iSWDXo+/wnS1VWr/H1u+c
hygUKmWEm50bllHZn6wFvh4ywLbvXZOCepovEjNVng4uiqC01wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMMeOCJ+f2h/1vQVybxCNk/uq4jcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wYjE4
Yjk0MS02OGRiLTQwY2YtOWFkNC1hMTQ4OGE3NGZjMTAvNWU1ODgwZTctNjhmYS0z
YzAyLTljYWMtZDAwZDM3OTMyYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMGIxOGI5NDEtNjhkYi00MGNmLTlh
ZDQtYTE0ODhhNzRmYzEwLzBiMThiOTQxLTY4ZGItNDBjZi05YWQ0LWExNDg4YTc0
ZmMxMC5jcmwwHwYDVR0jBBgwFoAUpq+9HRLWevtph714z3We+gpQj6wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8wYjE4Yjk0MS02OGRiLTQwY2YtOWFkNC1hMTQ4
OGE3NGZjMTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIHlAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFDK3SK+6yGnnbsPevhYb0g8Srrijh1F5HZftm4b0lCTzl4UyjWb
BwIz/YfGdrqdAMleUDPLX24ec+UaRMtEL0OVHOJBJY2paokLTmIP19/GRg+rm0hn
xIwULhGNJZnKX8yGfbKbDBUpLkXFaUxuPGjd7qsUfF0GadhjLzuMzRHe/dlT7DGW
2zDENT37pATUTu2AvxPY27G8zLCWxkFZ119Hc78LjwTOculCtapAjJ8/7HEK9r9Y
OUqQFd/uE4eGUvwOJlIrQWnHf7dQSYg+TE5jz9Y/j49+VeenGea/+oP8ij7oZRjO
NATnVxiWNrTeKhe4ER31T/p4LvXc2ZzokVk=
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:45:27 2026 by rpki-client