Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/59db3ffb-5a5f-3afc-a5f0-cacbec4b2414.roa
File:                     59db3ffb-5a5f-3afc-a5f0-cacbec4b2414.roa (raw, json)
Hash identifier:          XOPGY2qcuKldJ9XLetEXhWCizfbgMKBjsDRM5GACri8=
Subject key identifier:   B1:38:2E:C9:57:5F:7B:CE:5E:9E:C1:13:B6:C5:53:25:0D:D9:A7:B6
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655DACF34AC9C0A679694FC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/59db3ffb-5a5f-3afc-a5f0-cacbec4b2414.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20001
IP address blocks:        2605:e000:e800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:ac:f3:4a:c9:c0:a6:79:69:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=31bdbf38-873c-4ed4-a808-003e24cb4739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d1:da:72:94:3f:4b:18:f7:bb:7e:5c:c9:84:
                    59:97:ec:4d:43:f1:a4:99:32:74:d6:9b:c1:8f:8e:
                    25:ff:b8:12:48:05:d4:98:61:7b:e0:4f:57:08:50:
                    7a:73:8c:c9:93:88:3b:ce:19:6f:b7:3f:29:3f:d0:
                    45:d7:3b:07:11:22:0a:82:8a:18:eb:13:15:5a:40:
                    75:52:75:a6:03:fd:66:20:ab:f6:ce:73:a9:4e:25:
                    ef:44:d9:94:84:40:ba:db:5b:7e:c8:76:a4:8f:c5:
                    e2:25:47:93:a6:e2:44:1f:5f:c9:c4:ae:d7:64:67:
                    38:c4:60:95:7f:a1:ce:19:14:16:00:4a:39:3d:9b:
                    e4:1d:bc:53:69:e6:f8:a3:ad:74:d5:0c:d3:c7:5a:
                    c9:60:60:9d:a9:0a:87:f0:47:d6:2a:a7:97:a2:dc:
                    6e:6e:d1:c9:73:23:90:23:0e:87:05:79:53:50:66:
                    ea:db:be:7a:6a:fc:0b:3d:12:63:05:13:49:0b:af:
                    a7:1e:ce:87:ca:52:41:fb:1e:f8:29:e0:ab:18:f5:
                    26:b7:26:fe:8b:82:23:d7:64:3d:b2:06:bd:4f:d9:
                    96:be:79:eb:5e:1f:db:d1:e3:2a:87:ce:d8:7c:9c:
                    90:53:fe:54:65:e6:3e:de:de:60:38:70:57:4a:8d:
                    94:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:38:2E:C9:57:5F:7B:CE:5E:9E:C1:13:B6:C5:53:25:0D:D9:A7:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/59db3ffb-5a5f-3afc-a5f0-cacbec4b2414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e000:e800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:62:7c:57:9f:db:52:e4:45:37:f6:bb:50:c4:c5:57:42:dc:
         72:40:41:72:2f:42:7e:de:17:1b:32:9a:db:61:5e:0e:16:7b:
         8c:15:2e:8a:72:33:b8:1a:c4:43:80:36:f6:d5:69:1c:32:ae:
         7d:9e:cc:54:24:7f:f2:6e:1f:59:90:39:7a:b7:c1:96:7c:f4:
         99:ea:c8:a0:e3:47:47:43:ba:5e:23:2e:d7:d3:7a:68:7a:94:
         f0:0a:fb:05:5c:e0:97:7b:80:a4:bf:ca:b8:54:dc:14:09:05:
         5e:2f:51:ad:9f:ed:c0:62:ca:91:3a:6d:39:06:6f:2c:a6:d7:
         2d:49:ae:63:a0:7d:7c:92:01:17:5d:8e:51:38:42:0a:8d:c1:
         55:9d:c4:45:83:7b:3c:6f:e3:25:fd:a5:62:45:09:fc:48:b1:
         62:87:4d:b4:ea:2a:1c:38:e3:7c:40:06:ac:37:09:50:2a:c5:
         3d:78:95:01:52:5f:e3:ed:7f:b2:57:44:92:c5:f8:d2:35:42:
         29:30:80:c4:ac:5b:39:df:f6:16:2f:dc:8e:5c:a4:c7:8a:41:
         2a:d2:ce:f2:23:5e:c5:34:05:93:7f:ab:07:a4:80:36:45:bd:
         ee:48:d0:13:65:fc:b8:39:81:ab:86:85:2e:bc:ec:f2:2f:fa:
         6c:a4:8f:cc
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9lXazzSsnApnlpT8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
MzFiZGJmMzgtODczYy00ZWQ0LWE4MDgtMDAzZTI0Y2I0NzM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdHacpQ/Sxj3u35cyYRZl+xNQ/GkmTJ01pvB
j44l/7gSSAXUmGF74E9XCFB6c4zJk4g7zhlvtz8pP9BF1zsHESIKgooY6xMVWkB1
UnWmA/1mIKv2znOpTiXvRNmUhEC621t+yHakj8XiJUeTpuJEH1/JxK7XZGc4xGCV
f6HOGRQWAEo5PZvkHbxTaeb4o6101QzTx1rJYGCdqQqH8EfWKqeXotxubtHJcyOQ
Iw6HBXlTUGbq2756avwLPRJjBRNJC6+nHs6HylJB+x74KeCrGPUmtyb+i4Ij12Q9
sga9T9mWvnnrXh/b0eMqh87YfJyQU/5UZeY+3t5gOHBXSo2U8wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLE4LslXX3vOXp7BE7bFUyUN2ae2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNTlkYjNmZmItNWE1Zi0z
YWZjLWE1ZjAtY2FjYmVjNGIyNDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgXgAOgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEABGJ8V5/bUuRFN/a7UMTFV0LcckBBci9Cft4XGzKa22FeDhZ7jBUu
inIzuBrEQ4A29tVpHDKufZ7MVCR/8m4fWZA5erfBlnz0merIoONHR0O6XiMu19N6
aHqU8Ar7BVzgl3uApL/KuFTcFAkFXi9RrZ/twGLKkTptOQZvLKbXLUmuY6B9fJIB
F12OUThCCo3BVZ3ERYN7PG/jJf2lYkUJ/EixYodNtOoqHDjjfEAGrDcJUCrFPXiV
AVJf4+1/sldEksX40jVCKTCAxKxbOd/2Fi/cjlykx4pBKtLO8iNexTQFk3+rB6SA
NkW97kjQE2X8uDmBq4aFLrzs8i/6bKSPzA==
-----END CERTIFICATE-----
Generated at Fri Oct 9 04:40:46 2026 by rpki-client