Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/aedb9b56-9def-3067-905e-0decec5cf92b.roa
File:                     aedb9b56-9def-3067-905e-0decec5cf92b.roa (raw, json)
Hash identifier:          NHWx6ktiADNW5j8GcMU3otRXICjsqgBwuu3Qz1Rh4mc=
Subject key identifier:   FB:5D:34:35:50:EF:FB:8F:7E:60:B0:B6:B2:19:F3:F5:0A:EA:0F:ED
Certificate issuer:       /CN=6c4fd986-1af7-4389-bf91-d4b92edc9ac9
Certificate serial:       010D0C9F4328584EA79BAE05E268AD9743973E80
Authority key identifier: 93:DE:D5:D0:1E:64:B5:DE:A0:FC:8D:39:1C:47:AD:FA:B2:4A:51:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/aedb9b56-9def-3067-905e-0decec5cf92b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     149513
IP address blocks:        2602:fa33:ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:ae:05:e2:68:ad:97:43:97:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4fd986-1af7-4389-bf91-d4b92edc9ac9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ff704fa2-b31e-480f-9595-206a2e0ab7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2a:69:d8:cc:1a:34:00:89:45:d5:05:3f:b4:
                    87:b3:4b:fa:89:03:6f:e3:54:5c:e1:9c:9e:ce:b7:
                    a9:33:01:0c:49:62:89:af:1a:5c:36:c4:35:2e:3f:
                    fc:3e:c0:9c:89:3a:51:17:6e:ff:ca:64:15:7f:f2:
                    5d:4a:09:b8:c6:a0:63:dd:ef:ee:d6:f1:71:63:78:
                    f0:f0:4e:e5:2e:32:03:67:67:59:93:e1:e6:df:2d:
                    06:f4:5b:48:b7:eb:64:d5:c8:d8:38:97:61:9b:ad:
                    e1:54:c3:fb:dd:5b:13:44:bc:e4:35:f6:63:97:f1:
                    a3:25:84:5c:f0:b6:7e:f8:53:a6:d7:8a:64:3c:3d:
                    94:51:a6:ff:cc:2a:ad:45:e3:81:4d:65:fb:8d:9b:
                    6e:3a:6d:7a:58:01:53:26:71:37:6b:d0:b9:82:a4:
                    00:ac:83:d0:8f:19:20:37:7d:71:8c:2d:c4:d4:b1:
                    ac:0a:ad:dd:b9:b8:14:6e:ea:a1:68:95:65:10:3e:
                    74:62:14:09:2b:d0:9a:47:9c:88:0a:95:c0:fd:17:
                    7d:3b:3c:42:02:43:1d:70:0f:91:69:49:55:f3:8e:
                    12:c7:72:d3:e0:aa:46:fb:65:fb:b2:7e:cb:d9:a9:
                    12:50:0c:31:47:0e:ff:53:31:77:8a:d4:ec:bc:3e:
                    cb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5D:34:35:50:EF:FB:8F:7E:60:B0:B6:B2:19:F3:F5:0A:EA:0F:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/aedb9b56-9def-3067-905e-0decec5cf92b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.crl

            X509v3 Authority Key Identifier:
                keyid:93:DE:D5:D0:1E:64:B5:DE:A0:FC:8D:39:1C:47:AD:FA:B2:4A:51:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa33:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:dd:af:32:24:15:38:5d:57:e1:e7:eb:aa:0b:bf:13:46:e8:
         bb:dc:b4:a2:ba:a3:2e:1f:68:66:2a:e4:13:bd:be:d5:8f:27:
         7c:58:f3:a2:08:88:ba:b1:f7:58:e2:b7:fe:75:f1:c7:87:31:
         46:39:51:02:18:03:d7:80:f7:33:97:f0:c5:c1:e4:b0:8c:39:
         53:04:bb:28:c3:6d:8a:35:95:f2:d2:41:c8:3d:43:02:8d:1c:
         74:ef:12:6b:7c:74:a3:77:eb:d4:20:f9:f6:a6:7b:3a:85:82:
         b4:47:bf:a6:60:3c:47:c5:be:7e:00:93:87:d6:96:a5:b4:41:
         d3:45:56:9b:df:90:d8:e9:2b:5d:75:90:2d:97:b0:b3:f8:cd:
         e8:41:b2:12:83:66:90:aa:34:8c:97:5b:9d:64:db:18:aa:8a:
         96:42:78:39:e3:ea:bb:a0:dc:48:7d:d8:26:c4:ed:69:9e:cc:
         31:87:61:75:7f:d0:a8:32:bc:a7:62:fc:86:09:58:46:4f:3e:
         6a:93:59:a4:79:71:0e:33:f8:5d:a8:a5:fb:76:5d:33:03:29:
         72:f7:6f:8d:3a:35:ab:2e:5a:e2:26:a4:71:63:8b:41:f5:7d:
         30:bc:7a:38:7d:0a:fe:cf:38:9c:23:c4:59:85:fe:81:21:60:
         ca:8b:07:d3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nm64F4mitl0OXPoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmM0ZmQ5ODYtMWFmNy00Mzg5LWJmOTEtZDRiOTJlZGM5
YWM5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZmY3MDRmYTItYjMxZS00ODBmLTk1OTUtMjA2YTJlMGFiN2Q3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ypp2MwaNACJRdUFP7SHs0v6iQNv41Rc4Zye
zrepMwEMSWKJrxpcNsQ1Lj/8PsCciTpRF27/ymQVf/JdSgm4xqBj3e/u1vFxY3jw
8E7lLjIDZ2dZk+Hm3y0G9FtIt+tk1cjYOJdhm63hVMP73VsTRLzkNfZjl/GjJYRc
8LZ++FOm14pkPD2UUab/zCqtReOBTWX7jZtuOm16WAFTJnE3a9C5gqQArIPQjxkg
N31xjC3E1LGsCq3dubgUbuqhaJVlED50YhQJK9CaR5yICpXA/Rd9OzxCAkMdcA+R
aUlV844Sx3LT4KpG+2X7sn7L2akSUAwxRw7/UzF3itTsvD7LhwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPtdNDVQ7/uPfmCwtrIZ8/UK6g/tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82YzRm
ZDk4Ni0xYWY3LTQzODktYmY5MS1kNGI5MmVkYzlhYzkvYWVkYjliNTYtOWRlZi0z
MDY3LTkwNWUtMGRlY2VjNWNmOTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNmM0ZmQ5ODYtMWFmNy00Mzg5LWJm
OTEtZDRiOTJlZGM5YWM5LzZjNGZkOTg2LTFhZjctNDM4OS1iZjkxLWQ0YjkyZWRj
OWFjOS5jcmwwHwYDVR0jBBgwFoAUk97V0B5ktd6g/I05HEet+rJKUaAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82YzRmZDk4Ni0xYWY3LTQzODktYmY5MS1kNGI5
MmVkYzlhYzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6MwD/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD/drzIkFThdV+Hn66oLvxNG6LvctKK6oy4faGYq5BO9vtWPJ3xY
86IIiLqx91jit/518ceHMUY5UQIYA9eA9zOX8MXB5LCMOVMEuyjDbYo1lfLSQcg9
QwKNHHTvEmt8dKN369Qg+famezqFgrRHv6ZgPEfFvn4Ak4fWlqW0QdNFVpvfkNjp
K111kC2XsLP4zehBshKDZpCqNIyXW51k2xiqipZCeDnj6rug3Eh92CbE7WmezDGH
YXV/0KgyvKdi/IYJWEZPPmqTWaR5cQ4z+F2opft2XTMDKXL3b406NasuWuImpHFj
i0H1fTC8ejh9Cv7POJwjxFmF/oEhYMqLB9M=
-----END CERTIFICATE-----
Generated at Thu Aug 13 22:00:41 2026 by rpki-client