Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/68e8e840-a656-3ad6-aea8-71835d66921c.roa
File:                     68e8e840-a656-3ad6-aea8-71835d66921c.roa (raw, json)
Hash identifier:          vEZRDY/aSEatGYsaPBAKXHWtAoLJ/l0q8q2nIFzM6eU=
Subject key identifier:   B1:EA:C7:C6:A4:6D:74:63:C8:53:C4:B8:46:E6:E1:C3:B3:3D:03:82
Certificate issuer:       /CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae
Certificate serial:       010D0C9F4328584FAC8DDE37FBD4E698B4C7CBA0
Authority key identifier: E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/68e8e840-a656-3ad6-aea8-71835d66921c.roa
Signing time:             Fri 30 Oct 2026 13:00:12 +0000
ROA not before:           Fri 30 Oct 2026 13:00:12 +0000
ROA not after:            Thu 28 Jan 2027 14:00:12 +0000
asID:                     36832
IP address blocks:        2602:f9bd:f01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ac:8d:de:37:fb:d4:e6:98:b4:c7:cb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae
        Validity
            Not Before: Oct 30 13:00:12 2026 GMT
            Not After : Jan 28 14:00:12 2027 GMT
        Subject: CN=53462334-3d42-462c-abca-c8cb847fbe00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:35:df:3e:70:95:d4:3b:2f:5f:03:04:b2:ec:
                    fd:bb:1f:ab:fd:0b:e0:78:ee:3b:9d:8f:8e:05:ca:
                    c8:4f:74:88:68:46:89:01:65:19:22:db:09:79:1e:
                    f3:3a:60:46:f4:24:e3:de:d3:5a:a1:86:a2:97:93:
                    32:11:6a:87:ce:e9:81:22:ad:42:7f:16:3b:84:aa:
                    28:d8:3c:b3:22:1c:10:3c:99:ac:4d:a6:de:0a:66:
                    25:7c:f8:6d:69:9c:43:c0:0b:ca:79:8e:81:b7:b2:
                    08:b7:a3:bd:ab:ad:a1:74:88:09:5a:db:33:24:bf:
                    3b:d6:00:1d:9c:d3:b9:86:8a:5f:29:16:f9:5f:40:
                    85:4c:6a:ec:00:9f:25:a3:c4:c1:03:0a:71:91:a5:
                    6b:70:f9:ff:eb:a2:2d:ff:d4:b4:a9:8d:c6:a2:33:
                    04:5b:74:c4:c9:77:c0:4a:1e:3f:b3:c7:13:87:31:
                    95:36:46:2a:ef:0c:45:d0:10:43:da:be:1b:bf:0b:
                    ab:ba:9d:a9:66:36:a8:e7:bd:8e:48:91:66:98:f5:
                    f7:c1:78:49:a9:c1:c6:9e:96:08:02:39:44:42:42:
                    6f:a1:10:00:4c:9d:75:17:4a:f5:8a:c9:2f:9a:12:
                    7f:b6:18:37:bc:48:91:83:ed:88:17:76:79:4b:90:
                    e5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EA:C7:C6:A4:6D:74:63:C8:53:C4:B8:46:E6:E1:C3:B3:3D:03:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/68e8e840-a656-3ad6-aea8-71835d66921c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl

            X509v3 Authority Key Identifier:
                keyid:E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9bd:f01::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:5e:b4:e9:b0:63:a5:15:64:70:8d:79:89:94:ab:a7:24:55:
         6e:0b:ec:be:cd:27:0a:88:d2:56:02:d4:24:a9:8e:92:57:48:
         b4:d6:d6:f7:3a:b7:1c:8f:9e:f1:94:3a:e9:f0:2a:d3:79:03:
         48:df:1d:49:c3:fd:bd:43:ff:ce:07:18:73:1e:92:37:27:56:
         20:a9:3a:40:e6:41:f7:df:e9:9f:08:bd:b0:fd:58:cd:29:73:
         e4:2e:8a:91:25:66:95:ac:ac:bb:b3:f5:ab:85:68:1e:a4:3f:
         b9:f2:5a:c7:3c:d1:f4:d4:79:22:1d:39:c9:58:33:7e:ec:58:
         9c:9c:af:28:a9:e6:f1:2c:af:15:99:21:6b:6d:ab:3c:10:45:
         d9:59:78:f8:3e:ee:25:ab:e9:01:58:af:a5:9e:8b:f8:fa:ce:
         3a:5b:d8:77:61:74:f1:31:ef:c2:8d:35:82:a5:9e:9a:4e:97:
         2d:46:14:96:e7:85:0f:6a:cc:23:d3:e8:21:0f:12:9c:51:d4:
         95:f2:34:7c:85:e1:f1:25:cf:72:cd:fa:6a:2b:28:91:33:77:
         77:39:23:60:37:ed:78:51:b0:3a:41:b2:62:17:f4:21:c4:53:
         44:a6:cb:30:b3:00:55:e0:70:08:c6:ce:24:b5:0c:de:5b:21:
         a2:b7:a9:82
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+sjd43+9TmmLTHy6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWViNjgxYWMtY2U4My00NTg4LWJiZWQtMjg3N2JmNWE0
M2FlMB4XDTI2MTAzMDEzMDAxMloXDTI3MDEyODE0MDAxMlowLzEtMCsGA1UEAxMk
NTM0NjIzMzQtM2Q0Mi00NjJjLWFiY2EtYzhjYjg0N2ZiZTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDXfPnCV1DsvXwMEsuz9ux+r/QvgeO47nY+O
BcrIT3SIaEaJAWUZItsJeR7zOmBG9CTj3tNaoYail5MyEWqHzumBIq1CfxY7hKoo
2DyzIhwQPJmsTabeCmYlfPhtaZxDwAvKeY6Bt7IIt6O9q62hdIgJWtszJL871gAd
nNO5hopfKRb5X0CFTGrsAJ8lo8TBAwpxkaVrcPn/66It/9S0qY3GojMEW3TEyXfA
Sh4/s8cThzGVNkYq7wxF0BBD2r4bvwurup2pZjao572OSJFmmPX3wXhJqcHGnpYI
AjlEQkJvoRAATJ11F0r1iskvmhJ/thg3vEiRg+2IF3Z5S5DlgwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLHqx8akbXRjyFPEuEbm4cOzPQOCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hZWI2
ODFhYy1jZTgzLTQ1ODgtYmJlZC0yODc3YmY1YTQzYWUvNjhlOGU4NDAtYTY1Ni0z
YWQ2LWFlYTgtNzE4MzVkNjY5MjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWViNjgxYWMtY2U4My00NTg4LWJi
ZWQtMjg3N2JmNWE0M2FlL2FlYjY4MWFjLWNlODMtNDU4OC1iYmVkLTI4NzdiZjVh
NDNhZS5jcmwwHwYDVR0jBBgwFoAU6UnX34qG5dZ/rJgDrsJvSwjdC0UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hZWI2ODFhYy1jZTgzLTQ1ODgtYmJlZC0yODc3
YmY1YTQzYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5vQ8B
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEZetOmwY6UVZHCNeYmUq6ckVW4L7L7NJwqI0lYC1CSpjpJXSLTW
1vc6txyPnvGUOunwKtN5A0jfHUnD/b1D/84HGHMekjcnViCpOkDmQfff6Z8IvbD9
WM0pc+QuipElZpWsrLuz9auFaB6kP7nyWsc80fTUeSIdOclYM37sWJycryip5vEs
rxWZIWttqzwQRdlZePg+7iWr6QFYr6Wei/j6zjpb2HdhdPEx78KNNYKlnppOly1G
FJbnhQ9qzCPT6CEPEpxR1JXyNHyF4fElz3LN+morKJEzd3c5I2A37XhRsDpBsmIX
9CHEU0SmyzCzAFXgcAjGziS1DN5bIaK3qYI=
-----END CERTIFICATE-----
Generated at Sun Nov 1 03:03:26 2026 by rpki-client