Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/2e854990-c559-3b0c-b63d-01b8d5f8f818.roa
File:                     2e854990-c559-3b0c-b63d-01b8d5f8f818.roa (raw, json)
Hash identifier:          RKppXgX+uxTxJP5j+U4iMiakREhTWhKU2ATfs1Z/rh0=
Subject key identifier:   CA:27:C0:E8:E1:A1:8F:36:22:F3:1C:C7:ED:98:0A:E6:BA:9F:8E:19
Certificate issuer:       /CN=418526d5-2aa2-4d2f-8cb1-5c417728a97d
Certificate serial:       010D0C9F4328584D7A05325D5171DF44AD602580
Authority key identifier: 8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/2e854990-c559-3b0c-b63d-01b8d5f8f818.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        2607:aa40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:32:5d:51:71:df:44:ad:60:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418526d5-2aa2-4d2f-8cb1-5c417728a97d
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=055b0526-3909-45d5-a85e-622d8a2eef98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:50:72:5d:03:0c:d1:39:f5:b8:38:f8:e9:14:
                    4e:76:c9:12:82:58:21:44:ef:b7:43:4b:36:15:2f:
                    ff:4d:2e:7b:9a:b0:cd:a0:1f:83:4e:45:7c:8c:5a:
                    42:dd:84:23:82:52:a3:d5:a8:17:72:d0:44:f4:0c:
                    91:47:5d:76:d9:66:71:03:2f:8b:fc:04:da:3f:0c:
                    20:7d:9c:ec:0e:58:b9:64:66:ab:1e:6b:e0:63:e4:
                    a7:bc:42:86:db:6c:4b:66:8c:21:ca:76:fb:8a:c5:
                    f9:19:ce:9c:6d:93:7a:ae:6c:d5:85:0c:d6:ae:ba:
                    55:da:1f:39:40:59:f9:57:c4:3f:ea:3e:e0:49:9b:
                    46:3a:48:d9:db:b4:63:c2:6b:ff:db:2a:42:68:b7:
                    ee:99:b7:61:c4:36:24:4a:1d:80:ef:ab:d2:ba:38:
                    dd:a2:39:a1:39:3f:7c:6e:c2:90:aa:2e:37:97:96:
                    6e:a5:a3:b4:bf:4f:f6:a9:8a:41:c5:af:27:f5:7e:
                    8b:40:2d:fb:38:ee:5c:b6:d5:83:31:8d:2e:13:11:
                    b5:72:70:d5:1a:d1:99:c2:d6:d5:de:1f:67:6d:e1:
                    17:53:9b:c4:16:d7:e3:fb:3e:f6:fe:a3:ad:10:33:
                    4a:40:1f:3f:3f:49:0a:35:cd:46:75:64:ce:c0:0f:
                    50:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:27:C0:E8:E1:A1:8F:36:22:F3:1C:C7:ED:98:0A:E6:BA:9F:8E:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/2e854990-c559-3b0c-b63d-01b8d5f8f818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:aa40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:cc:eb:db:65:30:e5:f5:ab:89:ef:0f:91:b6:0e:82:e5:18:
         ab:b5:7c:e9:27:71:9e:ad:35:f2:d8:0f:61:f9:3d:ba:b1:d5:
         f9:90:15:bd:53:36:43:4a:a6:a3:55:58:b3:db:c1:af:94:7e:
         24:bf:b6:e3:fb:61:f2:00:ac:b1:23:23:d2:d4:66:72:89:84:
         2b:06:a9:69:23:99:03:69:cb:82:d4:26:94:57:ad:e8:aa:9c:
         84:a8:1b:bb:55:0c:a4:54:8b:e1:13:b2:13:87:b3:29:1d:a1:
         b6:6e:cd:87:fe:ed:34:fa:80:c5:18:4c:ef:a3:89:ca:2c:52:
         b8:80:e6:35:e8:61:ce:e4:aa:46:a9:10:05:c4:8a:0c:13:59:
         13:2e:1f:6f:f6:fd:e0:21:79:de:3a:2c:9a:08:bf:db:ea:3e:
         ee:2a:2c:59:4a:8d:60:e3:c4:8f:34:9b:e0:ff:c9:0b:25:50:
         d0:0e:09:8a:7d:0d:af:9d:88:a6:d9:91:d9:6a:e0:cd:e6:b7:
         e1:fe:80:52:0b:ef:49:08:b6:ab:cd:81:45:a2:d3:f7:9b:9c:
         e7:41:c6:28:89:84:51:67:a6:c6:3d:52:06:90:b7:81:ac:38:
         7c:25:ef:6e:7c:8a:b8:67:c6:70:16:a9:b6:0c:18:f8:2c:5e:
         97:ac:42:0f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE16BTJdUXHfRK1gJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDE4NTI2ZDUtMmFhMi00ZDJmLThjYjEtNWM0MTc3Mjhh
OTdkMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk
MDU1YjA1MjYtMzkwOS00NWQ1LWE4NWUtNjIyZDhhMmVlZjk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1ByXQMM0Tn1uDj46RROdskSglghRO+3Q0s2
FS//TS57mrDNoB+DTkV8jFpC3YQjglKj1agXctBE9AyRR1122WZxAy+L/ATaPwwg
fZzsDli5ZGarHmvgY+SnvEKG22xLZowhynb7isX5Gc6cbZN6rmzVhQzWrrpV2h85
QFn5V8Q/6j7gSZtGOkjZ27Rjwmv/2ypCaLfumbdhxDYkSh2A76vSujjdojmhOT98
bsKQqi43l5ZupaO0v0/2qYpBxa8n9X6LQC37OO5cttWDMY0uExG1cnDVGtGZwtbV
3h9nbeEXU5vEFtfj+z72/qOtEDNKQB8/P0kKNc1GdWTOwA9Q7QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMonwOjhoY82IvMcx+2YCua6n44ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MTg1
MjZkNS0yYWEyLTRkMmYtOGNiMS01YzQxNzcyOGE5N2QvMmU4NTQ5OTAtYzU1OS0z
YjBjLWI2M2QtMDFiOGQ1ZjhmODE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDE4NTI2ZDUtMmFhMi00ZDJmLThj
YjEtNWM0MTc3MjhhOTdkLzQxODUyNmQ1LTJhYTItNGQyZi04Y2IxLTVjNDE3NzI4
YTk3ZC5jcmwwHwYDVR0jBBgwFoAUiiN/rn53wAJd+TDx/Eb8Xh6ECRIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80MTg1MjZkNS0yYWEyLTRkMmYtOGNiMS01YzQx
NzcyOGE5N2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeqQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBWzOvbZTDl9auJ7w+Rtg6C5RirtXzpJ3GerTXy2A9h+T26sdX5kBW9
UzZDSqajVViz28GvlH4kv7bj+2HyAKyxIyPS1GZyiYQrBqlpI5kDacuC1CaUV63o
qpyEqBu7VQykVIvhE7ITh7MpHaG2bs2H/u00+oDFGEzvo4nKLFK4gOY16GHO5KpG
qRAFxIoME1kTLh9v9v3gIXneOiyaCL/b6j7uKixZSo1g48SPNJvg/8kLJVDQDgmK
fQ2vnYim2ZHZauDN5rfh/oBSC+9JCLarzYFFotP3m5znQcYoiYRRZ6bGPVIGkLeB
rDh8Je9ufIq4Z8ZwFqm2DBj4LF6XrEIP
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:20 2026 by rpki-client