Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/aef4a375-5763-3dc9-a93d-84c1250fef41.roa
File:                     aef4a375-5763-3dc9-a93d-84c1250fef41.roa (raw, json)
Hash identifier:          mEHrN9dwH4j03teqgKddyJM7MbBuJdZXY04p9g8+fls=
Subject key identifier:   02:41:BE:21:9B:DE:A2:38:5F:2B:EB:94:3C:EE:5A:11:B7:7C:23:8A
Certificate issuer:       /CN=4920092f-307e-44b3-b55a-cc5a8c6224dc
Certificate serial:       010D0C9F4328584F5360E1C3CA5D210807052760
Authority key identifier: DA:E1:0A:D3:80:D5:CB:93:08:68:20:0B:23:8C:28:D3:C8:96:0C:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/aef4a375-5763-3dc9-a93d-84c1250fef41.roa
Signing time:             Mon 28 Sep 2026 14:22:45 +0000
ROA not before:           Mon 28 Sep 2026 14:22:45 +0000
ROA not after:            Sun 27 Dec 2026 15:22:45 +0000
asID:                     16509
IP address blocks:        2606:69c1:1301::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:60:e1:c3:ca:5d:21:08:07:05:27:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4920092f-307e-44b3-b55a-cc5a8c6224dc
        Validity
            Not Before: Sep 28 14:22:45 2026 GMT
            Not After : Dec 27 15:22:45 2026 GMT
        Subject: CN=91cd8705-44dd-4f70-94b2-82e18ffebe58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:29:59:81:c4:ac:76:57:93:33:e6:de:86:f1:
                    58:fe:41:52:dd:cd:d6:03:69:39:f0:df:39:0a:8b:
                    db:9b:09:80:f9:9f:d4:05:a4:8c:e7:f1:f0:10:df:
                    21:a9:57:d9:f5:4f:32:ed:42:a7:9e:22:83:6c:1d:
                    b1:f1:2e:46:1d:ac:fa:8f:dc:63:d0:db:ee:e1:68:
                    b5:a1:05:61:06:d0:d6:70:71:68:8e:2a:e2:e7:d4:
                    ca:10:28:6f:c3:ae:2c:6e:86:9d:26:4a:3b:a0:c4:
                    7b:9b:97:60:32:fd:a7:0c:5a:8d:90:6b:0d:55:f3:
                    f3:c3:aa:46:95:ad:65:41:36:e0:75:1a:8a:2b:74:
                    5c:f1:5a:5b:32:e8:57:63:73:5a:8f:07:11:48:04:
                    9b:1b:44:80:9f:db:f3:ef:bc:30:09:8a:e3:9b:44:
                    08:6d:8f:3e:10:f5:54:00:32:0c:de:8b:b1:21:e5:
                    69:f8:2a:5c:9c:15:be:13:3c:1a:68:85:b0:3c:e7:
                    5c:93:90:3b:f7:c3:4a:23:0f:76:d8:42:c8:4c:6a:
                    0a:fe:bd:ad:1e:74:67:78:66:36:8e:ae:0c:92:ee:
                    97:46:d0:cf:f9:62:90:44:b6:f1:7e:59:54:18:6a:
                    da:f3:a7:ef:f1:12:5b:07:02:9f:a3:c4:94:8c:30:
                    12:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:41:BE:21:9B:DE:A2:38:5F:2B:EB:94:3C:EE:5A:11:B7:7C:23:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/aef4a375-5763-3dc9-a93d-84c1250fef41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.crl

            X509v3 Authority Key Identifier:
                keyid:DA:E1:0A:D3:80:D5:CB:93:08:68:20:0B:23:8C:28:D3:C8:96:0C:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:69c1:1301::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:6d:a8:24:bf:c6:06:be:56:c2:47:f5:c7:6c:0e:92:ed:79:
         37:78:0c:74:22:e0:51:b1:f2:e7:17:7a:23:bb:a0:b2:a3:06:
         4d:a0:29:b1:61:d5:a1:83:ab:6c:4a:0a:b9:85:82:2e:4c:a7:
         7e:9d:c5:01:ea:df:a1:de:a2:47:86:b3:13:12:5b:e7:e6:28:
         24:bf:f6:bf:c7:13:9b:ba:61:ac:98:46:69:78:b2:ea:f8:ff:
         43:73:36:9a:c3:1a:4a:9c:17:a8:df:7f:bd:03:04:fa:2c:1e:
         0d:d4:8c:3e:64:b0:9e:e3:2f:9b:37:47:53:15:0c:40:33:ab:
         48:2c:8b:e8:d6:65:50:cf:f5:6f:88:67:0e:1d:0d:60:b2:f5:
         a2:c2:9a:c4:9d:f3:9f:29:e1:0e:10:83:e0:3b:25:3a:28:58:
         93:9d:ce:b7:ba:40:e0:c3:60:da:27:ab:0b:33:91:5d:f9:a7:
         14:5a:fa:4f:8e:81:eb:a9:ca:15:c5:df:79:45:74:eb:50:b3:
         65:24:bb:e9:96:03:64:0a:b5:73:5a:de:3d:0f:b7:e7:7d:31:
         b1:3e:bd:79:6a:5d:0e:c5:dc:4f:cb:69:6f:be:d7:ab:45:b5:
         7a:a2:84:b6:53:db:cb:0a:c6:cc:86:59:65:b2:06:d4:58:0e:
         fe:a3:08:ee
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9TYOHDyl0hCAcFJ2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDkyMDA5MmYtMzA3ZS00NGIzLWI1NWEtY2M1YThjNjIy
NGRjMB4XDTI2MDkyODE0MjI0NVoXDTI2MTIyNzE1MjI0NVowLzEtMCsGA1UEAxMk
OTFjZDg3MDUtNDRkZC00ZjcwLTk0YjItODJlMThmZmViZTU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgilZgcSsdleTM+behvFY/kFS3c3WA2k58N85
CovbmwmA+Z/UBaSM5/HwEN8hqVfZ9U8y7UKnniKDbB2x8S5GHaz6j9xj0Nvu4Wi1
oQVhBtDWcHFojiri59TKEChvw64sboadJko7oMR7m5dgMv2nDFqNkGsNVfPzw6pG
la1lQTbgdRqKK3Rc8VpbMuhXY3NajwcRSASbG0SAn9vz77wwCYrjm0QIbY8+EPVU
ADIM3ouxIeVp+CpcnBW+EzwaaIWwPOdck5A798NKIw922ELITGoK/r2tHnRneGY2
jq4Mku6XRtDP+WKQRLbxfllUGGra86fv8RJbBwKfo8SUjDASBQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAJBviGb3qI4XyvrlDzuWhG3fCOKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80OTIw
MDkyZi0zMDdlLTQ0YjMtYjU1YS1jYzVhOGM2MjI0ZGMvYWVmNGEzNzUtNTc2My0z
ZGM5LWE5M2QtODRjMTI1MGZlZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDkyMDA5MmYtMzA3ZS00NGIzLWI1
NWEtY2M1YThjNjIyNGRjLzQ5MjAwOTJmLTMwN2UtNDRiMy1iNTVhLWNjNWE4YzYy
MjRkYy5jcmwwHwYDVR0jBBgwFoAU2uEK04DVy5MIaCALI4wo08iWDL0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80OTIwMDkyZi0zMDdlLTQ0YjMtYjU1YS1jYzVh
OGM2MjI0ZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZpwRMB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAL1tqCS/xga+VsJH9cdsDpLteTd4DHQi4FGx8ucXeiO7oLKjBk2g
KbFh1aGDq2xKCrmFgi5Mp36dxQHq36HeokeGsxMSW+fmKCS/9r/HE5u6YayYRml4
sur4/0NzNprDGkqcF6jff70DBPosHg3UjD5ksJ7jL5s3R1MVDEAzq0gsi+jWZVDP
9W+IZw4dDWCy9aLCmsSd858p4Q4Qg+A7JTooWJOdzre6QODDYNonqwszkV35pxRa
+k+OgeupyhXF33lFdOtQs2Uku+mWA2QKtXNa3j0Pt+d9MbE+vXlqXQ7F3E/LaW++
16tFtXqihLZT28sKxsyGWWWyBtRYDv6jCO4=
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:03:56 2026 by rpki-client