Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/fa3db38d-2973-332b-9416-9816f962db4c.roa
File:                     fa3db38d-2973-332b-9416-9816f962db4c.roa (raw, json)
Hash identifier:          Ezj0XtWly3AgKQLcPpI1790vpn4UJ+fzqTKkjwgq3/E=
Subject key identifier:   0E:7A:7B:25:95:2F:4B:03:4A:0B:AD:BC:3E:4B:65:4F:9B:31:17:85
Certificate issuer:       /CN=08d14a9b-0dce-4576-8d20-8da4bc15fb7a
Certificate serial:       010D0C9F4328584F3CE2B22955A831D5D4F1A740
Authority key identifier: E7:5F:01:26:E5:6F:7A:55:FE:4C:1A:B7:AB:E7:BB:EF:A3:CE:DE:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/fa3db38d-2973-332b-9416-9816f962db4c.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     3599
IP address blocks:        2607:fee0:a000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:b2:29:55:a8:31:d5:d4:f1:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d14a9b-0dce-4576-8d20-8da4bc15fb7a
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=e079ce09-f584-4a27-9324-4eaa20cd0d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:02:e4:53:98:49:19:96:b7:a9:1b:37:48:a6:
                    85:aa:6d:65:2c:2f:c3:e0:c9:9d:a7:57:45:c3:05:
                    63:7a:78:2f:ef:18:b5:cf:c0:f3:96:5c:e6:b8:99:
                    1d:12:58:ac:cc:cb:a6:db:fb:d4:96:3c:2c:b6:ab:
                    7c:48:e3:7f:0b:45:cf:d9:10:c1:bf:4c:f4:6b:94:
                    7a:66:7a:d0:6d:4b:0e:37:81:cb:d6:0e:fe:03:7a:
                    7b:d3:0c:de:66:9d:be:5b:43:81:23:35:fb:89:c7:
                    b9:27:1c:d7:f1:02:d2:52:03:3f:2d:57:57:0b:1d:
                    38:a1:ca:4f:c8:73:e7:44:7d:42:a5:0c:1e:40:96:
                    42:14:90:b1:f9:b2:40:da:96:1b:ac:72:ca:ce:4c:
                    c5:9b:65:f5:b6:b6:6d:cf:6f:5a:d4:52:d8:d6:24:
                    ab:29:bb:33:91:26:6a:d5:fd:27:16:0e:3a:81:cf:
                    3a:14:80:57:b9:ca:1e:f2:97:b4:96:f7:35:f8:36:
                    38:f7:68:90:7e:42:32:6e:6e:8b:76:9f:4b:c1:21:
                    a7:97:45:46:a8:ff:64:ba:ab:42:ce:00:98:be:41:
                    55:d6:54:f9:a6:5c:e3:fa:6d:f5:91:81:d1:af:23:
                    21:b6:a2:d1:4d:6d:8a:1b:c5:f7:a0:1d:02:19:08:
                    6d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7A:7B:25:95:2F:4B:03:4A:0B:AD:BC:3E:4B:65:4F:9B:31:17:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/fa3db38d-2973-332b-9416-9816f962db4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.crl

            X509v3 Authority Key Identifier:
                keyid:E7:5F:01:26:E5:6F:7A:55:FE:4C:1A:B7:AB:E7:BB:EF:A3:CE:DE:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fee0:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:8d:98:2a:9f:c4:4b:1b:f2:cf:49:ad:48:aa:20:09:ad:bc:
         83:1f:dc:37:a6:cc:61:61:56:7d:13:23:7f:ff:79:60:f8:22:
         d0:d8:6b:27:d3:2f:8f:55:58:e8:3e:68:e6:81:ab:ec:01:bd:
         3c:f3:b8:e9:26:e7:a8:3d:c1:e3:d2:97:2c:8c:93:b2:32:dd:
         62:d6:1a:7a:e9:2f:96:e9:62:bd:18:e9:f1:05:c5:c0:ea:11:
         20:23:23:5c:15:74:45:7a:44:19:2a:32:02:6c:45:0a:ba:4d:
         9b:d1:05:71:a2:8b:4a:29:9f:a6:ca:89:fc:7d:30:bf:70:a5:
         9d:7c:8d:9b:5e:b6:e8:f2:df:59:5c:ac:59:4a:82:c8:70:7d:
         5f:63:7f:25:1b:77:ef:a0:ed:ed:0b:8a:fb:d3:a9:3f:8d:88:
         b2:38:24:8a:41:5c:e5:79:57:4a:8c:39:34:89:2c:f7:dd:93:
         61:4c:5b:dc:43:d5:3b:6b:5c:1a:7d:07:fe:f9:5b:31:35:74:
         d4:a2:f6:8f:04:bd:db:52:b0:b6:e1:6d:8e:ff:b0:79:61:b0:
         ec:91:48:df:6c:a9:64:ae:6d:52:f7:05:e1:d0:b3:bd:9d:1a:
         04:49:20:89:57:d9:da:1d:87:23:29:59:98:72:2e:ba:e3:8d:
         db:75:1b:0c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE884rIpVagx1dTxp0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDhkMTRhOWItMGRjZS00NTc2LThkMjAtOGRhNGJjMTVm
YjdhMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk
ZTA3OWNlMDktZjU4NC00YTI3LTkzMjQtNGVhYTIwY2QwZDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgLkU5hJGZa3qRs3SKaFqm1lLC/D4Mmdp1dF
wwVjengv7xi1z8DzllzmuJkdEliszMum2/vUljwstqt8SON/C0XP2RDBv0z0a5R6
ZnrQbUsON4HL1g7+A3p70wzeZp2+W0OBIzX7ice5JxzX8QLSUgM/LVdXCx04ocpP
yHPnRH1CpQweQJZCFJCx+bJA2pYbrHLKzkzFm2X1trZtz29a1FLY1iSrKbszkSZq
1f0nFg46gc86FIBXucoe8pe0lvc1+DY492iQfkIybm6Ldp9LwSGnl0VGqP9kuqtC
zgCYvkFV1lT5plzj+m31kYHRryMhtqLRTW2KG8X3oB0CGQhtqQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFA56eyWVL0sDSgutvD5LZU+bMReFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wOGQx
NGE5Yi0wZGNlLTQ1NzYtOGQyMC04ZGE0YmMxNWZiN2EvZmEzZGIzOGQtMjk3My0z
MzJiLTk0MTYtOTgxNmY5NjJkYjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMDhkMTRhOWItMGRjZS00NTc2LThk
MjAtOGRhNGJjMTVmYjdhLzA4ZDE0YTliLTBkY2UtNDU3Ni04ZDIwLThkYTRiYzE1
ZmI3YS5jcmwwHwYDVR0jBBgwFoAU518BJuVvelX+TBq3q+e776PO3jMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wOGQxNGE5Yi0wZGNlLTQ1NzYtOGQyMC04ZGE0
YmMxNWZiN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf+4KAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEApo2YKp/ESxvyz0mtSKogCa28gx/cN6bMYWFWfRMjf/95YPgi0Nhr
J9Mvj1VY6D5o5oGr7AG9PPO46SbnqD3B49KXLIyTsjLdYtYaeukvlulivRjp8QXF
wOoRICMjXBV0RXpEGSoyAmxFCrpNm9EFcaKLSimfpsqJ/H0wv3ClnXyNm1626PLf
WVysWUqCyHB9X2N/JRt376Dt7QuK+9OpP42IsjgkikFc5XlXSow5NIks992TYUxb
3EPVO2tcGn0H/vlbMTV01KL2jwS921KwtuFtjv+weWGw7JFI32ypZK5tUvcF4dCz
vZ0aBEkgiVfZ2h2HIylZmHIuuuON23UbDA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:56:21 2026 by rpki-client