Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/2b9fadd7-6848-32b6-8eb8-31a82067c269.roa
File:                     2b9fadd7-6848-32b6-8eb8-31a82067c269.roa (raw, json)
Hash identifier:          LUYW+I/fktVT9r81w1mCilhrw8xvOHtCir7J5965QpY=
Subject key identifier:   5F:9E:86:E4:23:38:AE:3E:E1:CC:FE:A7:4B:30:6B:45:3F:89:57:56
Certificate issuer:       /CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
Certificate serial:       010D0C9F4328584F995267D915782E066C36B400
Authority key identifier: A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/2b9fadd7-6848-32b6-8eb8-31a82067c269.roa
Signing time:             Fri 23 Oct 2026 15:40:10 +0000
ROA not before:           Fri 23 Oct 2026 15:40:10 +0000
ROA not after:            Thu 21 Jan 2027 16:40:10 +0000
asID:                     63129
IP address blocks:        2602:f87f:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:99:52:67:d9:15:78:2e:06:6c:36:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
        Validity
            Not Before: Oct 23 15:40:10 2026 GMT
            Not After : Jan 21 16:40:10 2027 GMT
        Subject: CN=97242aae-cb2c-4e54-abdd-35bb7e8559e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:07:23:85:62:89:8c:4d:46:36:49:70:37:c8:
                    20:97:ac:a2:66:92:e4:dc:fe:dd:67:06:23:48:6d:
                    79:7d:50:3a:a3:98:c1:8b:df:09:f4:f1:09:08:dc:
                    8d:dc:2f:a1:cc:d9:2f:ff:7a:0a:bc:f6:f3:ca:2f:
                    27:15:6a:72:90:e9:60:ca:a3:c8:54:f6:5b:cc:e0:
                    d9:13:bb:d7:f2:65:03:de:de:eb:77:d7:23:4a:36:
                    1f:12:61:63:9d:e3:cf:65:92:42:92:f1:71:1f:ff:
                    ea:06:2f:ae:a4:cd:b9:30:65:ec:ba:90:c9:a1:9f:
                    04:86:73:1a:9e:3a:c7:a0:b0:ad:df:e4:9f:b2:45:
                    8b:c0:f2:95:60:e5:96:a7:25:55:f3:cd:6d:31:a1:
                    69:32:76:4d:2c:dc:82:47:c8:05:fc:ed:fd:b3:6c:
                    f6:64:03:4d:90:0c:80:76:d3:14:f3:d1:49:b7:3c:
                    12:10:fe:09:24:e4:c0:26:a6:d9:76:ca:5b:9d:93:
                    5e:1d:cf:e2:07:80:0c:4a:d7:38:41:9f:81:83:cd:
                    8a:52:79:aa:f5:40:e9:75:bf:aa:50:06:f6:e9:6c:
                    74:49:3c:00:e7:3e:ab:64:1d:a1:57:ab:f8:6f:1c:
                    ef:72:fd:b8:00:38:4a:37:17:71:89:71:9b:79:a1:
                    ae:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9E:86:E4:23:38:AE:3E:E1:CC:FE:A7:4B:30:6B:45:3F:89:57:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/2b9fadd7-6848-32b6-8eb8-31a82067c269.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl

            X509v3 Authority Key Identifier:
                keyid:A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f87f:d000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:10:a8:82:10:c5:ff:66:eb:b2:8e:e0:27:51:cf:bd:7f:5e:
         4b:c5:ed:bb:9c:73:3b:d6:69:94:fb:b5:58:8f:ba:7b:06:56:
         03:71:55:b1:8d:82:ac:46:27:0c:9a:94:35:7e:a6:ab:82:ea:
         67:83:59:bb:20:7b:f5:52:41:b3:8f:ae:09:b6:ae:2c:88:15:
         f7:46:80:a1:ed:70:b0:a8:8d:f0:2c:9a:66:dc:14:46:a0:09:
         e5:b0:f1:4e:26:86:ce:19:ed:6f:56:32:48:bf:ae:cf:bb:fc:
         ed:84:5b:79:b1:b0:38:b8:28:55:78:f1:66:2f:1f:03:65:45:
         b5:dc:c5:6a:b3:16:94:29:50:06:97:72:9d:b0:42:38:c5:f5:
         ff:40:4d:ab:5e:99:0a:f6:13:c1:62:c4:c5:00:09:6b:d1:62:
         97:4e:43:cc:c7:3a:12:91:0c:94:46:86:8f:ab:9f:e3:38:58:
         18:ef:cd:72:75:1b:f4:ad:42:ba:12:11:74:10:77:47:33:7b:
         b5:9a:08:ce:2f:1a:20:f6:d4:7a:ce:08:c3:df:4e:3f:83:d9:
         1a:22:05:4f:53:f0:71:1c:cc:05:43:d8:41:ec:0c:14:66:d1:
         db:6a:e6:25:74:5d:c1:28:43:63:f7:d8:ae:3c:81:61:c4:a7:
         3e:56:a2:09
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+ZUmfZFXguBmw2tAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTU5YjgyNjgtNjRjZS00N2VmLTk5M2QtYTNiYjc4MmJk
N2E5MB4XDTI2MTAyMzE1NDAxMFoXDTI3MDEyMTE2NDAxMFowLzEtMCsGA1UEAxMk
OTcyNDJhYWUtY2IyYy00ZTU0LWFiZGQtMzViYjdlODU1OWUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQcjhWKJjE1GNklwN8ggl6yiZpLk3P7dZwYj
SG15fVA6o5jBi98J9PEJCNyN3C+hzNkv/3oKvPbzyi8nFWpykOlgyqPIVPZbzODZ
E7vX8mUD3t7rd9cjSjYfEmFjnePPZZJCkvFxH//qBi+upM25MGXsupDJoZ8EhnMa
njrHoLCt3+SfskWLwPKVYOWWpyVV881tMaFpMnZNLNyCR8gF/O39s2z2ZANNkAyA
dtMU89FJtzwSEP4JJOTAJqbZdspbnZNeHc/iB4AMStc4QZ+Bg82KUnmq9UDpdb+q
UAb26Wx0STwA5z6rZB2hV6v4bxzvcv24ADhKNxdxiXGbeaGulQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFF+ehuQjOK4+4cz+p0swa0U/iVdWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNTli
ODI2OC02NGNlLTQ3ZWYtOTkzZC1hM2JiNzgyYmQ3YTkvMmI5ZmFkZDctNjg0OC0z
MmI2LThlYjgtMzFhODIwNjdjMjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTU5YjgyNjgtNjRjZS00N2VmLTk5
M2QtYTNiYjc4MmJkN2E5LzE1OWI4MjY4LTY0Y2UtNDdlZi05OTNkLWEzYmI3ODJi
ZDdhOS5jcmwwHwYDVR0jBBgwFoAUoN/rIMKe9QONZjwZATOREHKcd1IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNTliODI2OC02NGNlLTQ3ZWYtOTkzZC1hM2Ji
NzgyYmQ3YTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL4f9Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAyBCoghDF/2brso7gJ1HPvX9eS8Xtu5xzO9ZplPu1WI+6ewZWA3FV
sY2CrEYnDJqUNX6mq4LqZ4NZuyB79VJBs4+uCbauLIgV90aAoe1wsKiN8CyaZtwU
RqAJ5bDxTiaGzhntb1YySL+uz7v87YRbebGwOLgoVXjxZi8fA2VFtdzFarMWlClQ
BpdynbBCOMX1/0BNq16ZCvYTwWLExQAJa9Fil05DzMc6EpEMlEaGj6uf4zhYGO/N
cnUb9K1CuhIRdBB3RzN7tZoIzi8aIPbUes4Iw99OP4PZGiIFT1PwcRzMBUPYQewM
FGbR22rmJXRdwShDY/fYrjyBYcSnPlaiCQ==
-----END CERTIFICATE-----
Generated at Fri Oct 30 10:16:28 2026 by rpki-client