Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/ae3e4a96-006f-3dac-a4b3-65461b2a734e.roa
File:                     ae3e4a96-006f-3dac-a4b3-65461b2a734e.roa (raw, json)
Hash identifier:          GDdRUkxc2yzRHwT11oKkcQCZiNst+Xfd37hAtJHegAI=
Subject key identifier:   86:D5:DA:98:DB:58:67:24:2F:29:39:E7:A6:5F:BC:E0:BC:26:99:93
Certificate issuer:       /CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
Certificate serial:       010D0C9F4328584F49755A18C7EAD55C06582740
Authority key identifier: 15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/ae3e4a96-006f-3dac-a4b3-65461b2a734e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     40916
IP address blocks:        2602:fcff::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:5a:18:c7:ea:d5:5c:06:58:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=68cbb98c-fa82-431e-a34c-2ac586b5a327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f3:0b:58:f9:02:12:2e:cc:f8:5a:bd:a2:2f:
                    90:09:d7:fd:a9:10:61:22:21:4d:87:dd:aa:1b:3f:
                    f5:de:af:49:0f:c8:66:b2:27:fb:5e:7c:76:05:40:
                    7d:64:4c:13:fe:d3:c2:af:2a:3a:41:6a:ee:5d:10:
                    58:02:40:3d:f7:23:eb:cd:e7:e6:5c:cc:d1:84:c3:
                    8f:58:07:78:cc:56:45:7e:cf:25:52:5b:63:f8:09:
                    74:cb:fc:a8:0b:d4:b6:06:b6:25:5f:8d:ab:c2:c3:
                    94:50:dc:c9:99:20:f0:53:e4:c1:b9:68:68:7a:9b:
                    9c:06:79:65:2e:eb:a1:fb:41:36:09:59:cc:6b:94:
                    56:38:ce:27:5a:25:27:9d:f1:13:1b:73:70:b2:7a:
                    0e:c7:a3:d4:52:a6:7c:f7:a3:e4:08:86:5f:db:9f:
                    3d:2f:f7:d4:10:a2:7e:c7:c5:1d:b7:8c:59:a4:ec:
                    66:cc:17:13:35:f0:e3:a4:f2:cd:00:dd:d8:f3:9c:
                    37:bf:de:33:6e:f2:f8:f8:98:52:88:9a:ef:ec:30:
                    d9:11:20:58:a3:c8:d5:af:70:20:c6:73:f5:aa:23:
                    77:26:52:96:eb:6f:5a:ff:34:79:94:14:7f:40:74:
                    9a:da:d6:60:c3:66:2d:3f:6f:16:73:db:fc:19:9e:
                    0b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D5:DA:98:DB:58:67:24:2F:29:39:E7:A6:5F:BC:E0:BC:26:99:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/ae3e4a96-006f-3dac-a4b3-65461b2a734e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl

            X509v3 Authority Key Identifier:
                keyid:15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcff::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:31:71:5a:c0:63:65:38:ee:79:c5:3c:2d:65:bb:63:08:9a:
         34:ca:6c:76:1c:68:d5:21:0a:b7:a8:6b:4c:42:79:e3:60:c2:
         83:4b:b2:6e:da:e3:46:53:0a:ff:e0:fb:83:23:b8:9f:63:a7:
         ec:33:d5:58:92:df:a0:30:26:a7:27:83:de:79:c2:80:4a:9d:
         23:88:df:e7:37:c7:d0:b3:a6:07:b4:1a:05:bc:45:58:a7:5e:
         36:92:4b:66:a9:bc:6f:c4:16:0e:99:8f:67:65:7e:47:3a:56:
         23:0e:bd:46:bc:eb:21:7a:96:57:5a:8e:a8:e2:cf:06:be:9f:
         aa:db:f0:f2:da:a8:18:87:c2:20:db:f8:21:c6:41:56:b0:51:
         83:76:54:69:b7:90:25:c5:7d:db:8e:04:91:5e:00:13:1d:02:
         c2:4a:fb:70:d9:4a:c1:bd:4d:44:ce:9b:7e:d7:a9:0d:cf:b3:
         a6:76:ff:83:20:12:cb:b6:7b:37:04:9f:ef:6f:65:8e:d6:59:
         12:46:ac:10:28:e5:42:cc:7a:c7:c8:3d:0d:74:19:e4:51:17:
         86:2e:f6:61:6b:70:f8:a1:2d:cb:95:a9:85:55:79:98:dc:cc:
         34:d2:9c:ae:83:41:5b:d5:5d:e3:7a:1a:ed:11:f4:5e:cb:3d:
         52:b1:79:e0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdVoYx+rVXAZYJ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFjNTQwNmQtNGMyMC00YjA4LTgzYWMtYThlYWZjMDU5
ZmUwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NjhjYmI5OGMtZmE4Mi00MzFlLWEzNGMtMmFjNTg2YjVhMzI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvMLWPkCEi7M+Fq9oi+QCdf9qRBhIiFNh92q
Gz/13q9JD8hmsif7Xnx2BUB9ZEwT/tPCryo6QWruXRBYAkA99yPrzefmXMzRhMOP
WAd4zFZFfs8lUltj+Al0y/yoC9S2BrYlX42rwsOUUNzJmSDwU+TBuWhoepucBnll
Luuh+0E2CVnMa5RWOM4nWiUnnfETG3NwsnoOx6PUUqZ896PkCIZf2589L/fUEKJ+
x8Udt4xZpOxmzBcTNfDjpPLNAN3Y85w3v94zbvL4+JhSiJrv7DDZESBYo8jVr3Ag
xnP1qiN3JlKW629a/zR5lBR/QHSa2tZgw2YtP28Wc9v8GZ4LBQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIbV2pjbWGckLyk556ZfvOC8JpmTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYWM1
NDA2ZC00YzIwLTRiMDgtODNhYy1hOGVhZmMwNTlmZTAvYWUzZTRhOTYtMDA2Zi0z
ZGFjLWE0YjMtNjU0NjFiMmE3MzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWFjNTQwNmQtNGMyMC00YjA4LTgz
YWMtYThlYWZjMDU5ZmUwL2FhYzU0MDZkLTRjMjAtNGIwOC04M2FjLWE4ZWFmYzA1
OWZlMC5jcmwwHwYDVR0jBBgwFoAUFah4QJKZIPQmB6VJqTsXWf7TSscwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYWM1NDA2ZC00YzIwLTRiMDgtODNhYy1hOGVh
ZmMwNTlmZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8/wAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAMzFxWsBjZTjuecU8LWW7YwiaNMpsdhxo1SEKt6hrTEJ542DCg0uy
btrjRlMK/+D7gyO4n2On7DPVWJLfoDAmpyeD3nnCgEqdI4jf5zfH0LOmB7QaBbxF
WKdeNpJLZqm8b8QWDpmPZ2V+RzpWIw69RrzrIXqWV1qOqOLPBr6fqtvw8tqoGIfC
INv4IcZBVrBRg3ZUabeQJcV9244EkV4AEx0Cwkr7cNlKwb1NRM6bftepDc+zpnb/
gyASy7Z7NwSf729ljtZZEkasECjlQsx6x8g9DXQZ5FEXhi72YWtw+KEty5WphVV5
mNzMNNKcroNBW9Vd43oa7RH0Xss9UrF54A==
-----END CERTIFICATE-----
Generated at Tue Oct 6 11:33:31 2026 by rpki-client