Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2dbac553-d876-3f48-b282-8d1a3b98c5bb.roa
File:                     2dbac553-d876-3f48-b282-8d1a3b98c5bb.roa (raw, json)
Hash identifier:          e1R8VEmMQm4c+2LwqbF9rfQxNqwuWVSvPkQSPf2C1NI=
Subject key identifier:   53:20:1D:60:06:42:BD:4E:EC:2D:0C:AF:33:EE:48:62:F7:10:1C:B8
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F2957AB2EDE3E19EDB95AF740
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2dbac553-d876-3f48-b282-8d1a3b98c5bb.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     23473
IP address blocks:        2607:f750:2017::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:ab:2e:de:3e:19:ed:b9:5a:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=8e2d7222-abe8-4c70-80af-8bd60d4f320d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d6:0b:59:73:4f:02:b5:8d:42:78:dd:dc:e5:
                    4f:bb:a2:7c:60:71:e0:98:34:05:4f:08:7b:cd:d6:
                    25:2d:eb:7b:f2:a3:34:56:ea:93:12:0d:17:ca:e0:
                    f4:7e:53:37:43:03:f4:e3:ef:54:bb:f1:13:44:46:
                    3a:23:4b:6a:5b:df:f3:ec:f4:3f:0a:da:7f:dc:2e:
                    43:00:48:46:5a:6e:7d:8d:c5:c3:55:d9:dc:b6:60:
                    15:65:a2:26:c6:80:f3:42:a9:46:fd:78:35:73:03:
                    ff:f8:22:ae:84:fd:79:fd:3c:f8:09:90:3e:03:40:
                    52:b5:cc:37:2a:19:f8:d5:fb:84:38:e6:53:01:21:
                    69:3e:b7:f3:9a:79:66:36:d9:91:a0:a5:6d:1d:d0:
                    2b:37:15:de:af:89:c4:47:7d:86:e2:b9:2c:ad:b6:
                    d3:8d:17:e2:d2:dc:1a:a1:64:03:9b:12:90:4f:3c:
                    44:16:29:40:af:96:0e:ca:f7:e9:30:b2:bd:9a:bc:
                    0a:a7:6e:eb:4d:8e:12:86:d9:e2:ba:ff:ef:f5:1b:
                    2d:5d:f2:e7:b4:e9:f3:ff:5a:c0:34:36:84:70:69:
                    ac:4a:2d:0b:1e:57:65:62:72:1b:d9:c4:7c:27:bd:
                    3b:8d:dd:03:69:28:5c:1c:10:27:8d:e6:1d:f7:8a:
                    f3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:20:1D:60:06:42:BD:4E:EC:2D:0C:AF:33:EE:48:62:F7:10:1C:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2dbac553-d876-3f48-b282-8d1a3b98c5bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:2017::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:bb:a6:db:45:3d:29:c6:e3:3f:89:42:90:c5:18:8d:8e:b6:
         b2:1a:f5:fa:08:2d:21:3c:f8:46:e3:30:34:d6:05:e9:78:b8:
         a8:c4:34:05:d6:30:36:44:75:f6:94:d2:a0:f2:0c:71:49:cc:
         d8:1a:d0:19:06:32:1d:c0:fc:69:64:c6:81:94:2d:f4:85:cb:
         cf:cb:8d:4b:9a:02:7d:4c:88:5f:32:5d:23:42:80:57:a5:bf:
         63:5d:4a:0f:92:42:03:c9:e5:65:92:e5:c9:a9:90:52:25:49:
         cc:35:57:ea:8c:8e:b1:4f:fb:0f:7a:26:75:1c:4c:25:62:4f:
         12:c2:a9:6e:16:0e:8f:be:b0:54:87:b9:82:c9:e7:c9:54:97:
         30:3a:50:14:ec:a7:fc:4b:e6:c9:2b:43:b0:00:7e:25:ea:30:
         66:9b:2e:ee:fb:97:23:05:13:03:76:21:b8:59:53:43:99:42:
         0a:19:e9:66:69:63:49:86:f7:1d:27:a5:49:ae:ac:c6:62:06:
         a9:4c:e9:1d:a4:13:7e:d5:ae:38:f6:4e:55:4c:e0:67:b7:7b:
         3d:b6:d3:9d:14:f0:e6:be:82:08:b3:07:df:4d:cf:97:47:e4:
         7e:d0:1d:b5:4a:7b:f1:c7:d1:9c:82:31:1b:d0:43:d2:92:90:
         7e:2f:7a:56
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8pV6su3j4Z7bla90AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk
OGUyZDcyMjItYWJlOC00YzcwLTgwYWYtOGJkNjBkNGYzMjBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtYLWXNPArWNQnjd3OVPu6J8YHHgmDQFTwh7
zdYlLet78qM0VuqTEg0XyuD0flM3QwP04+9Uu/ETREY6I0tqW9/z7PQ/Ctp/3C5D
AEhGWm59jcXDVdnctmAVZaImxoDzQqlG/Xg1cwP/+CKuhP15/Tz4CZA+A0BStcw3
Khn41fuEOOZTASFpPrfzmnlmNtmRoKVtHdArNxXer4nER32G4rksrbbTjRfi0twa
oWQDmxKQTzxEFilAr5YOyvfpMLK9mrwKp27rTY4Shtniuv/v9RstXfLntOnz/1rA
NDaEcGmsSi0LHldlYnIb2cR8J707jd0DaShcHBAnjeYd94rzpQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFMgHWAGQr1O7C0MrzPuSGL3EBy4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMmRiYWM1NTMtZDg3Ni0z
ZjQ4LWIyODItOGQxYTNiOThjNWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf3UCAX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFq7pttFPSnG4z+JQpDFGI2OtrIa9foILSE8+EbjMDTWBel4uKjE
NAXWMDZEdfaU0qDyDHFJzNga0BkGMh3A/GlkxoGULfSFy8/LjUuaAn1MiF8yXSNC
gFelv2NdSg+SQgPJ5WWS5cmpkFIlScw1V+qMjrFP+w96JnUcTCViTxLCqW4WDo++
sFSHuYLJ58lUlzA6UBTsp/xL5skrQ7AAfiXqMGabLu77lyMFEwN2IbhZU0OZQgoZ
6WZpY0mG9x0npUmurMZiBqlM6R2kE37Vrjj2TlVM4Ge3ez22050U8Oa+ggizB99N
z5dH5H7QHbVKe/HH0ZyCMRvQQ9KSkH4velY=
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:51:01 2026 by rpki-client