Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/3a481de1-7f44-328e-aaaf-050f127ae342.roa
File:                     3a481de1-7f44-328e-aaaf-050f127ae342.roa (raw, json)
Hash identifier:          biqTkXAVUeubwtEACZo/09RIvorINfq5AXHvPQT2paY=
Subject key identifier:   C6:E3:B4:C0:95:33:0C:55:E2:7E:9C:0B:ED:24:D5:4B:5A:A6:B9:16
Certificate issuer:       /CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
Certificate serial:       010D0C9F4328584F995267A735B03A5F0E33F200
Authority key identifier: A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/3a481de1-7f44-328e-aaaf-050f127ae342.roa
Signing time:             Fri 23 Oct 2026 15:40:10 +0000
ROA not before:           Fri 23 Oct 2026 15:40:10 +0000
ROA not after:            Thu 21 Jan 2027 16:40:10 +0000
asID:                     63129
IP address blocks:        2602:f87f::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:99:52:67:a7:35:b0:3a:5f:0e:33:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159b8268-64ce-47ef-993d-a3bb782bd7a9
        Validity
            Not Before: Oct 23 15:40:10 2026 GMT
            Not After : Jan 21 16:40:10 2027 GMT
        Subject: CN=26cf0133-b97c-4eb3-8aca-c0df10d74547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4d:33:1e:b5:4e:96:89:c7:58:d7:77:a8:84:
                    94:34:fa:fe:fa:f3:11:1b:9e:7d:f4:18:c4:88:ca:
                    a0:7e:8b:4d:45:7f:66:ef:35:c3:33:38:2b:ce:87:
                    8d:e0:f6:a6:26:a4:56:f8:26:d2:ac:41:79:8e:14:
                    bf:de:68:02:25:d7:91:76:8e:43:a7:18:96:f4:9d:
                    b1:8b:fa:50:24:3b:71:13:ff:8b:d0:ed:d7:40:07:
                    a7:3a:7d:6e:b3:d7:19:a5:ef:54:09:b9:63:a0:ad:
                    7c:79:69:9e:be:d7:7e:48:e3:8b:13:85:48:90:a5:
                    8c:71:d3:95:1e:2a:9e:65:40:13:4c:97:88:63:93:
                    2a:ae:da:e6:e3:e5:5c:d7:ec:28:96:32:4f:91:b7:
                    3b:57:ed:f3:62:81:d9:1d:84:76:b3:b8:7e:68:f4:
                    b8:00:2a:9c:f8:6e:01:6d:b7:ee:70:c0:0c:8d:46:
                    1a:f5:08:94:85:fd:02:2e:c3:6a:5f:37:2e:25:e7:
                    0a:22:01:9b:c0:07:62:b9:b7:83:af:f1:ee:5c:58:
                    1b:8b:95:a8:85:96:a3:d7:e1:3d:2c:e5:72:98:c6:
                    a3:c1:69:a9:c7:ff:bf:9a:6a:e6:88:58:aa:40:59:
                    9f:25:42:79:ad:3c:e4:19:fb:5d:92:5f:2a:7e:34:
                    9a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E3:B4:C0:95:33:0C:55:E2:7E:9C:0B:ED:24:D5:4B:5A:A6:B9:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/3a481de1-7f44-328e-aaaf-050f127ae342.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9/159b8268-64ce-47ef-993d-a3bb782bd7a9.crl

            X509v3 Authority Key Identifier:
                keyid:A0:DF:EB:20:C2:9E:F5:03:8D:66:3C:19:01:33:91:10:72:9C:77:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/159b8268-64ce-47ef-993d-a3bb782bd7a9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f87f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:3f:d0:d7:d4:8f:79:ee:25:66:b2:67:65:02:bf:90:c9:d8:
         d2:7b:37:c6:73:49:97:5a:ac:c9:e9:49:96:59:ec:eb:b8:ee:
         94:eb:2c:c5:9b:90:9a:e3:bc:f2:82:a3:68:cb:40:c5:a7:11:
         40:49:d2:ab:d5:02:5f:9f:ea:95:fe:55:44:a8:7b:55:bc:31:
         2a:98:6a:2c:bf:05:73:ac:bb:6f:d5:39:cb:47:90:33:62:4f:
         a0:45:c7:fa:b1:65:5c:24:bc:c3:6c:c1:0f:58:f0:64:ad:b6:
         fd:5a:1f:a8:30:e5:76:f5:d2:d8:a0:19:a6:0f:48:2f:89:93:
         17:e5:78:1e:d8:64:0d:99:c4:e6:e0:9d:cd:e1:50:e9:90:e4:
         7b:8b:53:75:1e:75:a3:05:1b:fa:1c:f3:44:40:12:79:85:a0:
         8d:6b:57:bb:d7:16:0c:f3:34:7c:c0:83:bf:b9:00:06:fb:7a:
         1b:e9:00:f9:f0:c1:62:36:6a:a5:55:29:06:89:95:70:e3:fd:
         e3:c5:ac:88:90:91:13:7c:25:13:63:bf:6d:a5:f6:a9:45:c8:
         f1:4c:ff:b5:83:37:ce:6b:9e:38:ac:2d:a6:4f:f2:d9:c1:be:
         23:d1:0c:6a:64:24:c7:83:17:5b:fa:70:83:e8:f0:5f:2c:3c:
         00:3a:22:db
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE+ZUmenNbA6Xw4z8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTU5YjgyNjgtNjRjZS00N2VmLTk5M2QtYTNiYjc4MmJk
N2E5MB4XDTI2MTAyMzE1NDAxMFoXDTI3MDEyMTE2NDAxMFowLzEtMCsGA1UEAxMk
MjZjZjAxMzMtYjk3Yy00ZWIzLThhY2EtYzBkZjEwZDc0NTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk0zHrVOlonHWNd3qISUNPr++vMRG5599BjE
iMqgfotNRX9m7zXDMzgrzoeN4PamJqRW+CbSrEF5jhS/3mgCJdeRdo5DpxiW9J2x
i/pQJDtxE/+L0O3XQAenOn1us9cZpe9UCbljoK18eWmevtd+SOOLE4VIkKWMcdOV
HiqeZUATTJeIY5Mqrtrm4+Vc1+woljJPkbc7V+3zYoHZHYR2s7h+aPS4ACqc+G4B
bbfucMAMjUYa9QiUhf0CLsNqXzcuJecKIgGbwAdiubeDr/HuXFgbi5WohZaj1+E9
LOVymMajwWmpx/+/mmrmiFiqQFmfJUJ5rTzkGftdkl8qfjSanwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMbjtMCVMwxV4n6cC+0k1UtaprkWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNTli
ODI2OC02NGNlLTQ3ZWYtOTkzZC1hM2JiNzgyYmQ3YTkvM2E0ODFkZTEtN2Y0NC0z
MjhlLWFhYWYtMDUwZjEyN2FlMzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTU5YjgyNjgtNjRjZS00N2VmLTk5
M2QtYTNiYjc4MmJkN2E5LzE1OWI4MjY4LTY0Y2UtNDdlZi05OTNkLWEzYmI3ODJi
ZDdhOS5jcmwwHwYDVR0jBBgwFoAUoN/rIMKe9QONZjwZATOREHKcd1IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNTliODI2OC02NGNlLTQ3ZWYtOTkzZC1hM2Ji
NzgyYmQ3YTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL4fwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAJj/Q19SPee4lZrJnZQK/kMnY0ns3xnNJl1qsyelJllns67julOss
xZuQmuO88oKjaMtAxacRQEnSq9UCX5/qlf5VRKh7VbwxKphqLL8Fc6y7b9U5y0eQ
M2JPoEXH+rFlXCS8w2zBD1jwZK22/VofqDDldvXS2KAZpg9IL4mTF+V4HthkDZnE
5uCdzeFQ6ZDke4tTdR51owUb+hzzREASeYWgjWtXu9cWDPM0fMCDv7kABvt6G+kA
+fDBYjZqpVUpBomVcOP948WsiJCRE3wlE2O/baX2qUXI8Uz/tYM3zmueOKwtpk/y
2cG+I9EMamQkx4MXW/pwg+jwXyw8ADoi2w==
-----END CERTIFICATE-----
Generated at Fri Oct 30 10:16:19 2026 by rpki-client