Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/56685eeb-742b-350e-9c07-26887bba137f.roa
File:                     56685eeb-742b-350e-9c07-26887bba137f.roa (raw, json)
Hash identifier:          ulqNjL6wWhqk/FUnTaVpVQzRjmcCc99v/8SL75lGbdE=
Subject key identifier:   5A:FA:48:E8:11:84:5B:11:C7:80:67:6A:EF:19:13:5E:75:19:0B:6D
Certificate issuer:       /CN=91a20fbd-d241-4454-b2ba-4938f807efb0
Certificate serial:       010D0C9F4328584EC0A72532D683536AFC92E200
Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/56685eeb-742b-350e-9c07-26887bba137f.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     18464
IP address blocks:        2602:2a4:9f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:25:32:d6:83:53:6a:fc:92:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=c91b8b05-740e-4df6-8d85-a8b83d3ad73b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1f:ef:41:0f:30:77:87:e5:64:00:62:85:69:
                    81:52:6e:ec:fb:98:f4:e4:0a:b3:c3:26:d5:02:e5:
                    d8:e1:a8:f3:1f:3f:fb:f0:86:d7:ed:94:20:a2:8e:
                    f5:4d:f6:0e:50:26:e6:c3:9e:75:a8:cf:5f:67:a9:
                    17:77:ce:da:67:39:96:e0:06:af:e7:4a:06:74:43:
                    cb:09:bc:9d:6a:42:4a:f1:db:f5:1e:37:f1:2e:27:
                    42:ff:df:24:af:19:af:18:3d:b3:71:c4:4c:65:f7:
                    d1:b1:3b:67:2e:46:09:94:da:7d:dd:11:ac:f0:77:
                    2e:b3:c0:23:30:15:ff:6f:33:1a:47:37:1c:4f:d7:
                    60:c9:3d:58:d6:97:19:3a:d0:06:29:0d:f4:f4:ee:
                    81:ac:ce:e0:42:7e:db:af:a9:38:39:79:16:4a:37:
                    5c:da:65:37:83:f4:ef:3a:97:ce:44:cf:df:4a:47:
                    d8:c5:41:b1:25:71:ea:0d:c5:75:ac:6f:43:c3:13:
                    d1:0d:6b:d7:0d:0f:05:96:3b:d1:1d:f6:b1:6a:45:
                    db:53:b4:0f:b7:7a:1e:d8:97:d0:3a:18:40:58:da:
                    52:63:05:f5:0e:35:b7:19:7d:78:82:ba:32:f0:50:
                    55:05:46:f1:ae:5a:c7:e9:7c:06:0a:61:a6:bd:a5:
                    ac:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FA:48:E8:11:84:5B:11:C7:80:67:6A:EF:19:13:5E:75:19:0B:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/56685eeb-742b-350e-9c07-26887bba137f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a4:9f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:95:06:66:1a:8d:a4:cb:aa:c8:30:bc:dc:bd:4b:49:a6:94:
         e7:3f:1d:d8:35:d4:86:62:e6:ea:29:d4:e1:6e:78:e4:66:4f:
         f5:15:df:e3:ba:73:3c:da:b3:94:80:68:bc:96:c0:94:b9:f5:
         04:a0:2a:2f:dd:51:5b:c9:b6:58:cc:c5:40:85:3c:41:2a:ea:
         5d:6d:61:d4:ec:10:83:54:c0:8b:52:b4:13:42:93:9d:0d:4f:
         fd:5e:79:d5:30:53:37:71:d5:e8:20:1e:3d:1a:0a:93:a3:50:
         f9:2f:0f:17:04:d1:87:a8:08:eb:76:f2:9e:d7:a5:8b:9a:81:
         14:ef:fa:7d:31:0a:7a:f4:d2:a9:54:e4:f3:84:f0:44:6d:e6:
         47:ee:9b:7a:c1:e5:73:a5:2f:48:66:09:20:77:30:4d:33:f7:
         81:e8:e6:83:89:63:9e:79:9e:3a:52:0e:84:b5:00:80:f0:92:
         31:5d:98:75:22:95:08:56:b6:66:82:d9:72:73:e7:b5:50:7f:
         c7:5e:3e:da:bf:83:8a:f2:cf:31:fc:eb:87:40:83:ca:2d:67:
         c9:1d:1f:0d:f1:f9:39:31:fa:af:0b:19:98:83:6e:a1:c9:66:
         00:c2:70:5a:1e:43:a4:97:aa:4a:4d:56:a9:22:29:38:13:42:
         7d:a5:15:68
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ApyUy1oNTavyS4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTFhMjBmYmQtZDI0MS00NDU0LWIyYmEtNDkzOGY4MDdl
ZmIwMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk
YzkxYjhiMDUtNzQwZS00ZGY2LThkODUtYThiODNkM2FkNzNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB/vQQ8wd4flZABihWmBUm7s+5j05AqzwybV
AuXY4ajzHz/78IbX7ZQgoo71TfYOUCbmw551qM9fZ6kXd87aZzmW4Aav50oGdEPL
CbydakJK8dv1HjfxLidC/98krxmvGD2zccRMZffRsTtnLkYJlNp93RGs8Hcus8Aj
MBX/bzMaRzccT9dgyT1Y1pcZOtAGKQ309O6BrM7gQn7br6k4OXkWSjdc2mU3g/Tv
OpfORM/fSkfYxUGxJXHqDcV1rG9DwxPRDWvXDQ8FljvRHfaxakXbU7QPt3oe2JfQ
OhhAWNpSYwX1DjW3GX14groy8FBVBUbxrlrH6XwGCmGmvaWs+QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFr6SOgRhFsRx4Bnau8ZE151GQttMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MWEy
MGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4ZjgwN2VmYjAvNTY2ODVlZWItNzQyYi0z
NTBlLTljMDctMjY4ODdiYmExMzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTFhMjBmYmQtZDI0MS00NDU0LWIy
YmEtNDkzOGY4MDdlZmIwLzkxYTIwZmJkLWQyNDEtNDQ1NC1iMmJhLTQ5MzhmODA3
ZWZiMC5jcmwwHwYDVR0jBBgwFoAUtn7s2ynC3v5dSgA3ROxJkNFVVs4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85MWEyMGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4
ZjgwN2VmYjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICpACf
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACGVBmYajaTLqsgwvNy9S0mmlOc/Hdg11IZi5uop1OFueORmT/UV
3+O6czzas5SAaLyWwJS59QSgKi/dUVvJtljMxUCFPEEq6l1tYdTsEINUwItStBNC
k50NT/1eedUwUzdx1eggHj0aCpOjUPkvDxcE0YeoCOt28p7XpYuagRTv+n0xCnr0
0qlU5POE8ERt5kfum3rB5XOlL0hmCSB3ME0z94Ho5oOJY555njpSDoS1AIDwkjFd
mHUilQhWtmaC2XJz57VQf8dePtq/g4ryzzH864dAg8otZ8kdHw3x+Tkx+q8LGZiD
bqHJZgDCcFoeQ6SXqkpNVqkiKTgTQn2lFWg=
-----END CERTIFICATE-----
Generated at Fri Sep 11 03:34:58 2026 by rpki-client