Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e69877ce-cb34-3a8a-b3fe-647ad5ad161d.roa
File:                     e69877ce-cb34-3a8a-b3fe-647ad5ad161d.roa (raw, json)
Hash identifier:          SJUTgVvSY7tTHjpasApAmBgjIAQxGXPAhf0T6PqjfRY=
Subject key identifier:   49:DE:32:A1:D0:7F:48:F5:A1:0A:25:37:1F:22:32:7B:FE:67:5D:52
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584F7FE2FC151C6FEEA017104980
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e69877ce-cb34-3a8a-b3fe-647ad5ad161d.roa
Signing time:             Wed 14 Oct 2026 13:00:12 +0000
ROA not before:           Wed 14 Oct 2026 13:00:12 +0000
ROA not after:            Tue 12 Jan 2027 14:00:12 +0000
asID:                     22616
IP address blocks:        2605:4300:2600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:e2:fc:15:1c:6f:ee:a0:17:10:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 14 13:00:12 2026 GMT
            Not After : Jan 12 14:00:12 2027 GMT
        Subject: CN=81da66f8-44f2-4273-af98-423a7358f404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:f8:24:3e:7c:bd:1a:fc:b1:ac:cb:52:3d:
                    1a:26:41:ff:ab:fd:91:f6:ac:60:93:5e:9c:96:18:
                    c1:e5:22:7b:99:44:6c:d7:a1:ff:b5:c2:ef:80:2a:
                    10:51:c0:35:15:8b:13:4e:17:6d:bf:df:90:ce:b5:
                    fc:81:5f:84:c1:27:2c:57:8c:b8:80:9d:52:28:5a:
                    c7:03:38:9c:86:ae:48:5e:77:ef:2d:02:45:26:3b:
                    56:52:dc:cc:1d:ee:4e:c2:96:bb:6c:10:a2:2b:0e:
                    92:24:97:44:04:92:49:87:26:e1:b8:ce:af:1c:c6:
                    93:39:b9:5a:84:4b:f9:b8:8d:a0:9a:06:33:d6:28:
                    2c:e5:cb:cd:15:f0:8a:96:16:33:d4:27:db:75:28:
                    d7:12:ef:32:66:08:47:1d:00:7e:c7:01:08:16:a9:
                    fb:25:73:08:22:02:16:b7:1c:cd:fa:cd:05:96:b9:
                    3a:cc:47:7a:28:7c:e7:e6:64:6d:e4:c7:1b:a7:4f:
                    61:cf:25:bd:64:b6:dc:18:19:fd:6d:92:23:88:8a:
                    0c:0c:35:fd:f3:ce:3d:16:69:93:49:f4:11:12:0f:
                    0b:fb:77:2a:0d:64:61:f9:cd:64:a1:b8:40:39:40:
                    1e:d8:3d:47:46:5c:2f:02:49:13:da:b9:15:c2:5b:
                    ae:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DE:32:A1:D0:7F:48:F5:A1:0A:25:37:1F:22:32:7B:FE:67:5D:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e69877ce-cb34-3a8a-b3fe-647ad5ad161d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:db:7b:34:32:13:60:a3:81:5c:39:ff:e6:83:7c:c4:b5:14:
         80:aa:e1:c1:08:f1:0f:21:16:a7:12:39:f7:e0:cd:ac:f9:3a:
         70:d8:6f:7f:e9:15:ab:81:ce:64:a9:96:7d:6e:36:1c:36:19:
         19:1b:a7:79:5c:f1:d0:87:f6:97:0f:be:6b:a4:a8:da:aa:ff:
         e6:36:0c:33:9a:e9:b4:8f:85:be:4e:c4:e1:3e:7c:28:23:78:
         f0:45:b2:25:f3:18:0e:20:9b:4f:fd:f3:b1:2f:14:03:11:06:
         1c:d5:0e:ba:14:d2:e8:5a:64:fe:3e:c6:01:8c:7c:9b:3d:5f:
         c4:91:43:67:06:ee:bc:af:02:5a:ce:b3:45:3a:2f:d4:4b:c8:
         f9:75:bd:7a:62:33:5b:82:30:ac:ba:e4:f9:2f:45:88:a4:f5:
         4f:45:05:3b:90:4f:26:c4:ae:b4:a0:1c:56:5e:0b:a5:f8:25:
         b0:92:bd:4e:ff:22:5d:7e:a7:17:d9:87:26:76:2d:fc:6e:c4:
         28:62:f7:d6:19:87:43:b0:3a:c6:2e:ca:3b:e4:8a:73:5f:b0:
         a6:8e:7a:95:e3:1d:8c:e2:bd:10:85:8c:c9:e8:0f:df:2f:34:
         aa:38:46:98:4d:02:ae:92:ac:13:29:37:cf:d8:97:c0:6c:04:
         48:70:bc:4f
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9/4vwVHG/uoBcQSYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk
ODFkYTY2ZjgtNDRmMi00MjczLWFmOTgtNDIzYTczNThmNDA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF34JD58vRr8sazLUj0aJkH/q/2R9qxgk16c
lhjB5SJ7mURs16H/tcLvgCoQUcA1FYsTThdtv9+QzrX8gV+EwScsV4y4gJ1SKFrH
Azichq5IXnfvLQJFJjtWUtzMHe5Owpa7bBCiKw6SJJdEBJJJhybhuM6vHMaTObla
hEv5uI2gmgYz1igs5cvNFfCKlhYz1CfbdSjXEu8yZghHHQB+xwEIFqn7JXMIIgIW
txzN+s0Flrk6zEd6KHzn5mRt5Mcbp09hzyW9ZLbcGBn9bZIjiIoMDDX98849FmmT
SfQREg8L+3cqDWRh+c1kobhAOUAe2D1HRlwvAkkT2rkVwluuTQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEneMqHQf0j1oQolNx8iMnv+Z11SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZTY5ODc3Y2UtY2IzNC0z
YThhLWIzZmUtNjQ3YWQ1YWQxNjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgVDACYw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEATdt7NDITYKOBXDn/5oN8xLUUgKrhwQjxDyEWpxI59+DNrPk6cNhv
f+kVq4HOZKmWfW42HDYZGRuneVzx0If2lw++a6So2qr/5jYMM5rptI+Fvk7E4T58
KCN48EWyJfMYDiCbT/3zsS8UAxEGHNUOuhTS6Fpk/j7GAYx8mz1fxJFDZwbuvK8C
Ws6zRTov1EvI+XW9emIzW4IwrLrk+S9FiKT1T0UFO5BPJsSutKAcVl4LpfglsJK9
Tv8iXX6nF9mHJnYt/G7EKGL31hmHQ7A6xi7KO+SKc1+wpo56leMdjOK9EIWMyegP
3y80qjhGmE0CrpKsEyk3z9iXwGwESHC8Tw==
-----END CERTIFICATE-----
Generated at Fri Oct 30 20:24:41 2026 by rpki-client