Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/260e16b8-2e71-3dcc-b2f8-f3d79336d629.roa
File:                     260e16b8-2e71-3dcc-b2f8-f3d79336d629.roa (raw, json)
Hash identifier:          1N3nZ+4zBLZ76s14ktWl03oFI5v4UKItlzEtfQ3rAhM=
Subject key identifier:   53:CC:26:4A:26:F4:1A:C8:43:10:78:DD:86:89:12:09:F4:D0:1B:D4
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F497D301381AE031452FE3F90
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/260e16b8-2e71-3dcc-b2f8-f3d79336d629.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        2607:f8b0:400a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:30:13:81:ae:03:14:52:fe:3f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fe30bc6f-c4cf-4fba-898f-71da58c7e1a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c9:c6:ed:1c:89:b3:0d:b9:4d:cb:75:f9:b5:
                    5a:15:3f:e7:0b:40:85:dd:43:57:26:57:56:2b:28:
                    2a:7a:b6:f3:e5:c4:1e:94:ea:6a:b5:c0:c8:d0:0d:
                    89:1f:93:26:06:13:71:64:1e:bb:2b:89:0e:25:ee:
                    54:c3:94:cf:d8:19:eb:2e:c3:75:06:76:75:bd:1e:
                    95:b0:17:3e:f5:7d:5f:97:38:0c:9c:4f:8c:2b:bf:
                    09:5b:4d:01:40:01:d0:b1:39:cb:1b:4a:b0:6e:af:
                    17:cd:4b:16:29:18:cf:58:df:e6:73:94:5b:19:b6:
                    bb:42:f6:0f:11:04:00:29:71:36:cd:89:10:61:e0:
                    22:f5:39:eb:96:17:5e:74:7a:7e:c5:14:d6:39:2a:
                    ff:35:ae:47:d9:73:4d:90:bc:98:ee:22:35:46:38:
                    6e:a3:1a:2c:88:99:c7:23:b2:03:63:24:6e:d2:ee:
                    6d:45:d9:09:17:37:c7:d3:9d:7b:42:fe:61:c4:f1:
                    ef:9c:02:11:da:46:9a:77:3e:7f:b4:33:72:c9:0e:
                    03:02:e4:d1:10:86:18:cb:b6:20:e0:35:2b:ea:5d:
                    d0:ba:37:01:3e:4e:2f:6c:2d:a4:0c:16:dd:ab:53:
                    30:f8:f1:55:71:aa:9d:98:c9:46:52:f9:1c:d3:2a:
                    4a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CC:26:4A:26:F4:1A:C8:43:10:78:DD:86:89:12:09:F4:D0:1B:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/260e16b8-2e71-3dcc-b2f8-f3d79336d629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8b0:400a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f1:3c:91:eb:ae:e8:d2:c1:8f:c7:ba:79:4b:6b:30:eb:18:
         6c:cf:75:3d:01:6e:68:1b:9b:d2:47:e8:5f:25:27:73:8c:1b:
         9c:67:bb:30:fb:45:8b:19:ff:19:fc:b9:7d:84:ff:6f:8b:79:
         27:06:61:ad:b4:c2:34:b4:8d:54:1f:30:99:55:5f:83:ff:63:
         be:47:60:e4:36:00:82:09:70:b3:87:d5:5f:3b:9e:01:96:0c:
         e5:e4:3c:60:e6:6e:5c:e9:3b:91:a3:1b:df:c7:cd:72:a1:0c:
         5b:0a:f7:be:9b:54:2c:a9:ae:7b:c4:c2:e3:b5:01:2d:49:14:
         94:3e:72:28:65:f2:a2:81:0f:70:fe:5e:07:dc:c2:63:2f:95:
         90:16:72:49:75:bc:71:e5:c7:cc:b7:28:8b:aa:e5:b2:2f:bf:
         d1:6e:67:9a:37:2c:f7:31:4f:0d:3c:9f:a1:67:1b:76:ac:b0:
         8a:a0:79:5b:df:2f:bb:19:92:1f:ea:15:26:5b:7c:0c:9c:18:
         71:82:ad:2e:b8:d6:33:7c:4a:03:eb:f7:78:65:07:e1:07:d5:
         c4:10:5f:f6:3b:8d:36:81:96:24:10:9a:a0:34:83:df:b1:22:
         9d:64:38:dc:0f:46:44:09:2f:84:80:e1:a1:5a:c6:f3:2e:f5:
         eb:87:11:f9
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JfTATga4DFFL+P5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZmUzMGJjNmYtYzRjZi00ZmJhLTg5OGYtNzFkYTU4YzdlMWEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosnG7RyJsw25Tct1+bVaFT/nC0CF3UNXJldW
Kygqerbz5cQelOpqtcDI0A2JH5MmBhNxZB67K4kOJe5Uw5TP2BnrLsN1BnZ1vR6V
sBc+9X1flzgMnE+MK78JW00BQAHQsTnLG0qwbq8XzUsWKRjPWN/mc5RbGba7QvYP
EQQAKXE2zYkQYeAi9TnrlhdedHp+xRTWOSr/Na5H2XNNkLyY7iI1RjhuoxosiJnH
I7IDYyRu0u5tRdkJFzfH0517Qv5hxPHvnAIR2kaadz5/tDNyyQ4DAuTREIYYy7Yg
4DUr6l3QujcBPk4vbC2kDBbdq1Mw+PFVcaqdmMlGUvkc0ypKLQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFPMJkom9BrIQxB43YaJEgn00BvUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjYwZTE2YjgtMmU3MS0z
ZGNjLWIyZjgtZjNkNzkzMzZkNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAELxPJHrrujSwY/HunlLazDrGGzPdT0Bbmgbm9JH6F8lJ3OMG5xn
uzD7RYsZ/xn8uX2E/2+LeScGYa20wjS0jVQfMJlVX4P/Y75HYOQ2AIIJcLOH1V87
ngGWDOXkPGDmblzpO5GjG9/HzXKhDFsK976bVCyprnvEwuO1AS1JFJQ+cihl8qKB
D3D+XgfcwmMvlZAWckl1vHHlx8y3KIuq5bIvv9FuZ5o3LPcxTw08n6FnG3assIqg
eVvfL7sZkh/qFSZbfAycGHGCrS641jN8SgPr93hlB+EH1cQQX/Y7jTaBliQQmqA0
g9+xIp1kONwPRkQJL4SA4aFaxvMu9euHEfk=
-----END CERTIFICATE-----
Generated at Fri Sep 25 14:54:44 2026 by rpki-client