Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/af9aadcf-6f07-308b-b9f5-80d31839fc3c.roa
File:                     af9aadcf-6f07-308b-b9f5-80d31839fc3c.roa (raw, json)
Hash identifier:          svNudO3NPIg5Gg6TDtwyIrJbqP18jli+/C1gUHJ7dLk=
Subject key identifier:   0E:97:48:B7:8C:2F:2E:04:A7:74:5B:D6:35:89:8F:2A:58:CF:08:14
Certificate issuer:       /CN=469597d0-a870-46e2-b0a1-04a71dad0b25
Certificate serial:       010D0C9F4328584D1509234BA5BFBFBBE389A400
Authority key identifier: D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/af9aadcf-6f07-308b-b9f5-80d31839fc3c.roa
Signing time:             Fri 06 Mar 2026 20:51:58 +0000
ROA not before:           Fri 06 Mar 2026 20:51:58 +0000
ROA not after:            Thu 04 Jun 2026 19:51:58 +0000
asID:                     21867
IP address blocks:        2606:2e80:101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:09:23:4b:a5:bf:bf:bb:e3:89:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469597d0-a870-46e2-b0a1-04a71dad0b25
        Validity
            Not Before: Mar  6 20:51:58 2026 GMT
            Not After : Jun  4 19:51:58 2026 GMT
        Subject: CN=30914791-f939-4dd8-a46c-ad58df17f403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:58:b3:63:10:75:4d:ac:48:b6:55:c4:39:19:
                    75:81:40:c9:90:7b:13:ab:26:a1:9b:06:c9:0d:be:
                    5b:68:20:1a:d1:10:56:50:d7:e9:34:61:09:4a:3d:
                    df:8c:4a:89:c8:15:d1:30:af:18:08:c7:f6:51:b7:
                    de:ab:03:5f:97:5b:16:41:a7:61:11:70:dd:78:a6:
                    64:21:c0:86:92:1a:32:62:a0:20:c6:31:ec:83:ae:
                    b9:d1:61:2d:36:cd:cf:1d:37:3a:59:78:86:85:79:
                    1a:d4:36:37:c3:a2:e0:e8:c3:e6:62:10:31:93:5e:
                    36:6e:13:4e:77:bc:36:e3:cd:1e:36:74:9e:19:a5:
                    97:2c:1d:ad:d6:95:14:31:a0:d8:68:20:3e:03:f7:
                    cc:eb:1a:40:72:ed:d5:5e:da:98:dc:62:79:1b:2a:
                    ba:f4:96:93:4b:43:bf:76:74:9a:b1:e5:1a:ef:bd:
                    e4:35:cb:48:62:2c:db:0c:f9:4c:30:56:7c:d0:c4:
                    25:ae:56:aa:f4:6f:fd:59:86:c3:26:59:f9:91:7e:
                    ff:e7:65:48:2c:e5:5c:b5:bd:52:58:11:29:6c:62:
                    03:7b:2d:c4:86:3d:f7:f3:41:5f:7f:da:ec:85:28:
                    ac:bd:25:e1:1c:9d:1a:b6:43:49:22:ad:58:e6:28:
                    b5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:97:48:B7:8C:2F:2E:04:A7:74:5B:D6:35:89:8F:2A:58:CF:08:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/af9aadcf-6f07-308b-b9f5-80d31839fc3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl

            X509v3 Authority Key Identifier:
                keyid:D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2e80:101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:63:ec:8c:f4:85:09:bc:23:2e:84:cb:a2:76:fb:f5:74:62:
         59:75:96:c8:bb:f7:b3:f8:d0:0b:d7:44:33:df:32:42:71:ac:
         e7:95:8a:32:f5:fb:ae:e7:1c:6a:2a:ce:95:72:12:7b:a3:31:
         0a:1f:4b:87:ad:16:b5:b3:5a:9b:03:57:0e:76:42:eb:87:1a:
         99:0f:20:df:e7:99:91:93:ce:92:ea:12:1e:91:df:00:ab:1f:
         59:21:13:02:4e:3d:4b:9f:29:f4:c8:4c:ac:14:17:46:16:72:
         14:0a:25:b2:d7:d5:21:ee:38:fb:ab:77:62:36:7e:18:29:55:
         e5:21:ac:7a:f2:09:1e:e2:42:0b:60:0e:a7:22:4f:2f:4e:d1:
         3b:b6:d6:02:a2:83:f4:f4:2f:1e:bc:0b:85:b8:5c:90:d8:ee:
         14:6c:59:d2:12:52:a8:63:0f:94:91:8d:7e:47:a6:ff:8d:e7:
         90:51:a0:8b:02:e0:cd:04:8f:82:cf:05:a3:3b:2f:28:b9:23:
         5e:ea:05:28:f7:8e:cf:c2:d6:c3:00:de:64:e9:6c:df:5c:65:
         a4:43:62:a5:4c:03:64:47:c8:e3:c6:c1:92:ef:29:59:11:1b:
         a2:36:f1:1b:45:1f:e3:a2:c2:a8:0e:7b:72:df:34:5b:77:5a:
         8a:dd:f3:79
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0VCSNLpb+/u+OJpAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY5NTk3ZDAtYTg3MC00NmUyLWIwYTEtMDRhNzFkYWQw
YjI1MB4XDTI2MDMwNjIwNTE1OFoXDTI2MDYwNDE5NTE1OFowLzEtMCsGA1UEAxMk
MzA5MTQ3OTEtZjkzOS00ZGQ4LWE0NmMtYWQ1OGRmMTdmNDAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglizYxB1TaxItlXEORl1gUDJkHsTqyahmwbJ
Db5baCAa0RBWUNfpNGEJSj3fjEqJyBXRMK8YCMf2UbfeqwNfl1sWQadhEXDdeKZk
IcCGkhoyYqAgxjHsg6650WEtNs3PHTc6WXiGhXka1DY3w6Lg6MPmYhAxk142bhNO
d7w2480eNnSeGaWXLB2t1pUUMaDYaCA+A/fM6xpAcu3VXtqY3GJ5Gyq69JaTS0O/
dnSaseUa773kNctIYizbDPlMMFZ80MQlrlaq9G/9WYbDJln5kX7/52VILOVctb1S
WBEpbGIDey3Ehj3380Fff9rshSisvSXhHJ0atkNJIq1Y5ii1VwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA6XSLeMLy4Ep3Rb1jWJjypYzwgUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80Njk1
OTdkMC1hODcwLTQ2ZTItYjBhMS0wNGE3MWRhZDBiMjUvYWY5YWFkY2YtNmYwNy0z
MDhiLWI5ZjUtODBkMzE4MzlmYzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNDY5NTk3ZDAtYTg3MC00NmUyLWIw
YTEtMDRhNzFkYWQwYjI1LzQ2OTU5N2QwLWE4NzAtNDZlMi1iMGExLTA0YTcxZGFk
MGIyNS5jcmwwHwYDVR0jBBgwFoAU2SL0wRQKf5Mk9glTOVzXFf12erQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS80Njk1OTdkMC1hODcwLTQ2ZTItYjBhMS0wNGE3
MWRhZDBiMjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgYugAEB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADlj7Iz0hQm8Iy6Ey6J2+/V0Yll1lsi797P40AvXRDPfMkJxrOeV
ijL1+67nHGoqzpVyEnujMQofS4etFrWzWpsDVw52QuuHGpkPIN/nmZGTzpLqEh6R
3wCrH1khEwJOPUufKfTITKwUF0YWchQKJbLX1SHuOPurd2I2fhgpVeUhrHryCR7i
QgtgDqciTy9O0Tu21gKig/T0Lx68C4W4XJDY7hRsWdISUqhjD5SRjX5Hpv+N55BR
oIsC4M0Ej4LPBaM7Lyi5I17qBSj3js/C1sMA3mTpbN9cZaRDYqVMA2RHyOPGwZLv
KVkRG6I28RtFH+OiwqgOe3LfNFt3Word83k=
-----END CERTIFICATE-----
Generated at Sun Mar 8 00:48:49 2026 by rpki-client