Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa
File:                     ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa (raw, json)
Hash identifier:          zES8ZDn1RWwl8FOFF4bTXTySc10CygAjx64o/RCby58=
Subject key identifier:   D0:D5:0F:E0:B9:37:52:53:8A:22:A8:9B:3D:E3:DA:68:73:36:75:81
Certificate issuer:       /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial:       010D0C9F4328584F9A687EA82D0BF78940233A80
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     14618
IP address blocks:        2607:d540:fc0::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:7e:a8:2d:0b:f7:89:40:23:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=e796b749-2285-4cc0-8b3f-56a08aaf81c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8e:e5:b4:9e:c2:ff:1b:d6:82:dd:7f:c4:a3:
                    eb:70:7d:b8:89:3e:4c:c9:5d:12:fa:99:71:59:fd:
                    47:95:76:13:00:7b:7b:af:51:4e:a7:47:4b:5b:75:
                    84:30:94:a3:d8:6e:32:15:75:b2:71:a9:0f:5f:e0:
                    e3:44:5e:f8:74:7c:6b:52:93:5a:39:b7:07:5a:b0:
                    e6:5d:f6:d5:5a:aa:8d:07:41:ef:19:13:28:41:a7:
                    ae:85:aa:cc:d4:c0:f6:0c:a0:18:89:04:f8:10:38:
                    4e:9e:dc:08:1e:22:49:45:f4:2d:33:34:fe:c4:75:
                    48:0d:a5:b1:d5:5c:21:5a:ed:a5:e0:ff:43:80:80:
                    24:f5:15:96:3d:39:eb:c8:53:87:ff:f1:06:95:13:
                    74:70:72:5b:76:c1:5a:a9:35:d8:19:d6:88:c7:47:
                    4f:17:9c:c8:6f:0a:00:14:f6:66:55:68:b1:12:bd:
                    bc:bb:3c:c7:0d:f5:c9:22:10:3e:56:98:0f:8b:bd:
                    12:2f:d2:14:27:16:68:07:0f:3c:e7:14:51:43:0f:
                    2d:4f:41:4f:b0:10:d7:b1:c4:6d:8d:7b:93:a3:89:
                    c0:12:43:85:5a:4b:2a:2e:d2:1c:7e:21:e5:ff:8c:
                    80:fc:ba:2e:88:09:6a:5d:cc:75:c8:19:69:22:9a:
                    7b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D5:0F:E0:B9:37:52:53:8A:22:A8:9B:3D:E3:DA:68:73:36:75:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl

            X509v3 Authority Key Identifier:
                keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d540:fc0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:1c:c8:ef:e3:e2:c2:b0:33:57:96:47:6c:69:9d:30:99:6f:
         d0:98:9d:fd:ea:2b:19:56:85:54:a1:ea:0b:72:0c:7e:7b:a4:
         25:e9:ab:9b:11:f8:7c:fc:6d:cf:7a:77:e5:0d:4f:71:a4:dc:
         5f:a4:a8:33:f9:ed:18:5e:e8:51:7c:b1:59:42:9f:ad:c5:ce:
         83:c0:6a:97:26:4b:92:3a:4c:49:15:0d:dc:17:ac:9f:6f:ff:
         6e:ca:bb:32:01:1f:01:c4:e2:0d:b9:bd:0e:dd:74:f4:f1:6a:
         38:98:95:1b:0b:71:10:ad:13:90:c8:f9:d6:23:92:68:dc:0e:
         94:cb:7f:d6:7c:f8:81:3f:a3:ef:9d:df:81:2b:b0:0d:98:6f:
         04:61:80:23:31:67:98:cb:ac:ff:b7:1b:7f:89:91:dd:ee:17:
         4e:65:1a:ef:ce:a6:5d:ec:e4:ce:e3:5d:2a:70:a6:45:7d:e1:
         47:ac:76:20:b4:f1:37:76:d9:27:8a:2c:85:3f:91:6c:a6:c2:
         c6:d2:33:42:ed:cc:6b:15:46:ce:d8:1f:6a:bd:d7:e0:53:e1:
         a7:0c:f4:1a:3c:98:9a:8a:2d:25:3b:1d:c6:a9:4a:07:90:99:
         4e:1b:4f:09:fc:aa:83:e1:95:91:37:4f:9d:ff:70:b7:b5:b0:
         9c:75:d9:49
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+aaH6oLQv3iUAjOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGQ4MGRhYTUtNzlkYy00YzJhLTg4NzktMjQ4YTNmM2Uz
MzljMB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk
ZTc5NmI3NDktMjI4NS00Y2MwLThiM2YtNTZhMDhhYWY4MWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3I7ltJ7C/xvWgt1/xKPrcH24iT5MyV0S+plx
Wf1HlXYTAHt7r1FOp0dLW3WEMJSj2G4yFXWycakPX+DjRF74dHxrUpNaObcHWrDm
XfbVWqqNB0HvGRMoQaeuharM1MD2DKAYiQT4EDhOntwIHiJJRfQtMzT+xHVIDaWx
1VwhWu2l4P9DgIAk9RWWPTnryFOH//EGlRN0cHJbdsFaqTXYGdaIx0dPF5zIbwoA
FPZmVWixEr28uzzHDfXJIhA+VpgPi70SL9IUJxZoBw885xRRQw8tT0FPsBDXscRt
jXuTo4nAEkOFWksqLtIcfiHl/4yA/LouiAlqXcx1yBlpIpp7LQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNDVD+C5N1JTiiKomz3j2mhzNnWBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80ZDgw
ZGFhNS03OWRjLTRjMmEtODg3OS0yNDhhM2YzZTMzOWMvY2VhZjViNmMtNzY1OS0z
YWZhLWIzNWEtMDExZmQxZDdhYWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGQ4MGRhYTUtNzlkYy00YzJhLTg4
NzktMjQ4YTNmM2UzMzljLzRkODBkYWE1LTc5ZGMtNGMyYS04ODc5LTI0OGEzZjNl
MzM5Yy5jcmwwHwYDVR0jBBgwFoAURSS0Po4TMO3Vlg05oMUNPZbAVvowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80ZDgwZGFhNS03OWRjLTRjMmEtODg3OS0yNDhh
M2YzZTMzOWMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgfVQA/A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFQcyO/j4sKwM1eWR2xpnTCZb9CYnf3qKxlWhVSh6gtyDH57pCXp
q5sR+Hz8bc96d+UNT3Gk3F+kqDP57Rhe6FF8sVlCn63FzoPAapcmS5I6TEkVDdwX
rJ9v/27KuzIBHwHE4g25vQ7ddPTxajiYlRsLcRCtE5DI+dYjkmjcDpTLf9Z8+IE/
o++d34ErsA2YbwRhgCMxZ5jLrP+3G3+Jkd3uF05lGu/Opl3s5M7jXSpwpkV94Ues
diC08Td22SeKLIU/kWymwsbSM0LtzGsVRs7YH2q91+BT4acM9Bo8mJqKLSU7Hcap
SgeQmU4bTwn8qoPhlZE3T53/cLe1sJx12Uk=
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:42:36 2026 by rpki-client