Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/fae98359-f003-3f79-a8ba-12ae14bdda4d.roa
File:                     fae98359-f003-3f79-a8ba-12ae14bdda4d.roa (raw, json)
Hash identifier:          /33uKe86jMVvA9jvXxjtiVueN73ytlXLbU+/1BgmLmw=
Subject key identifier:   EF:23:32:96:B4:E2:2C:D2:BB:6A:9E:CF:97:56:A1:54:31:5B:A5:35
Certificate issuer:       /CN=70b47ad9-010b-4764-8cef-4d3e66669003
Certificate serial:       010D0C9F4328584F18979A7DB912C8B48A8E2400
Authority key identifier: 37:56:35:08:DC:09:93:B8:89:6B:FF:F2:2B:9F:A0:44:00:78:06:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/fae98359-f003-3f79-a8ba-12ae14bdda4d.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        2620:8:4300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:9a:7d:b9:12:c8:b4:8a:8e:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70b47ad9-010b-4764-8cef-4d3e66669003
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=a324c71c-0c88-4d3d-91c4-62b1c3e708a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:24:b5:3e:a3:d7:35:40:b9:67:d2:f3:aa:f3:
                    cb:f9:39:ec:5e:d2:80:fb:f0:a9:e6:f8:19:71:f6:
                    69:65:70:b1:4b:df:bc:56:d8:e2:a5:73:2c:8e:59:
                    62:f7:2a:44:25:bf:66:7f:cf:a3:d7:69:db:25:d0:
                    bb:48:d4:fb:23:31:55:da:e0:56:e2:b7:d8:51:a8:
                    7c:c3:e5:19:65:e9:f7:18:74:6b:77:36:88:eb:5d:
                    c8:41:d5:17:8e:df:fc:7e:1e:11:8d:b1:fa:b6:a3:
                    ed:2e:6a:0a:81:ff:fd:c2:a3:25:2d:a8:ae:b7:71:
                    18:08:26:f8:02:ce:e1:71:2a:35:4e:6a:e3:89:d4:
                    4e:a7:65:50:62:0e:a2:73:52:64:31:f3:49:03:9f:
                    2e:3a:8a:88:bf:d7:03:a0:99:2b:29:5e:78:25:d8:
                    82:65:31:13:0f:7b:2c:74:91:22:71:2c:c9:db:d4:
                    bf:30:3a:f3:51:07:6e:ed:f0:3b:d7:f9:ab:85:6c:
                    a7:3d:17:de:e7:2d:d8:7f:73:12:a1:16:fb:b0:b4:
                    d7:5d:e6:5d:c5:2b:98:05:3f:70:8f:01:a9:bf:9c:
                    f2:10:59:61:ad:58:37:87:6a:eb:50:30:d6:f8:56:
                    e5:a3:43:ce:ae:db:23:0a:71:b8:d8:eb:a3:ff:15:
                    d2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:23:32:96:B4:E2:2C:D2:BB:6A:9E:CF:97:56:A1:54:31:5B:A5:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/fae98359-f003-3f79-a8ba-12ae14bdda4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.crl

            X509v3 Authority Key Identifier:
                keyid:37:56:35:08:DC:09:93:B8:89:6B:FF:F2:2B:9F:A0:44:00:78:06:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8:4300::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:6d:68:0b:57:3c:03:ac:c4:30:b7:94:fd:d3:9a:eb:58:e9:
         9c:23:cf:85:1c:8a:5a:3f:34:a4:8d:f2:ae:e7:cf:27:eb:24:
         fe:48:c6:b1:79:1f:b2:62:7f:f1:cf:01:fd:97:94:98:32:18:
         7b:f7:d4:07:75:5b:81:06:67:26:16:1d:9b:74:ae:36:32:b3:
         92:9a:66:bd:a1:28:fc:2b:28:bb:78:60:be:52:b1:e0:b9:bf:
         04:9e:75:a2:8a:5c:26:3d:28:14:b6:3d:76:43:39:23:58:af:
         bb:e4:09:a2:fe:7b:e6:64:26:aa:90:a1:2e:05:7d:51:e1:a1:
         c0:b0:98:18:ea:82:f4:89:eb:92:20:78:26:9c:a4:a1:c9:86:
         42:f7:20:8d:d6:2c:79:d2:cb:67:09:bb:d7:63:46:ef:6d:26:
         99:55:ab:57:55:1b:93:e3:1d:7a:f0:ee:40:a3:ef:c8:db:d1:
         83:56:e4:f4:e7:b6:90:51:2c:4a:e2:28:36:b6:1e:65:8c:75:
         96:90:04:42:24:52:8c:70:ed:b7:c0:55:82:d1:38:c5:e2:3c:
         e2:ea:8d:15:00:92:90:48:e8:46:0c:78:84:6a:6c:e5:97:1e:
         cd:50:f7:72:7d:0d:e9:a5:15:a7:51:47:51:29:bd:0f:0f:13:
         a4:6b:9e:71
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Yl5p9uRLItIqOJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzBiNDdhZDktMDEwYi00NzY0LThjZWYtNGQzZTY2NjY5
MDAzMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk
YTMyNGM3MWMtMGM4OC00ZDNkLTkxYzQtNjJiMWMzZTcwOGE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiS1PqPXNUC5Z9LzqvPL+TnsXtKA+/Cp5vgZ
cfZpZXCxS9+8VtjipXMsjlli9ypEJb9mf8+j12nbJdC7SNT7IzFV2uBW4rfYUah8
w+UZZen3GHRrdzaI613IQdUXjt/8fh4RjbH6tqPtLmoKgf/9wqMlLaiut3EYCCb4
As7hcSo1TmrjidROp2VQYg6ic1JkMfNJA58uOoqIv9cDoJkrKV54JdiCZTETD3ss
dJEicSzJ29S/MDrzUQdu7fA71/mrhWynPRfe5y3Yf3MSoRb7sLTXXeZdxSuYBT9w
jwGpv5zyEFlhrVg3h2rrUDDW+Fblo0POrtsjCnG42Ouj/xXSgwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFO8jMpa04izSu2qez5dWoVQxW6U1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MGI0
N2FkOS0wMTBiLTQ3NjQtOGNlZi00ZDNlNjY2NjkwMDMvZmFlOTgzNTktZjAwMy0z
Zjc5LWE4YmEtMTJhZTE0YmRkYTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzBiNDdhZDktMDEwYi00NzY0LThj
ZWYtNGQzZTY2NjY5MDAzLzcwYjQ3YWQ5LTAxMGItNDc2NC04Y2VmLTRkM2U2NjY2
OTAwMy5jcmwwHwYDVR0jBBgwFoAUN1Y1CNwJk7iJa//yK5+gRAB4BrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MGI0N2FkOS0wMTBiLTQ3NjQtOGNlZi00ZDNl
NjY2NjkwMDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAACEMA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFNtaAtXPAOsxDC3lP3TmutY6Zwjz4Ucilo/NKSN8q7nzyfrJP5I
xrF5H7Jif/HPAf2XlJgyGHv31Ad1W4EGZyYWHZt0rjYys5KaZr2hKPwrKLt4YL5S
seC5vwSedaKKXCY9KBS2PXZDOSNYr7vkCaL+e+ZkJqqQoS4FfVHhocCwmBjqgvSJ
65IgeCacpKHJhkL3II3WLHnSy2cJu9djRu9tJplVq1dVG5PjHXrw7kCj78jb0YNW
5PTntpBRLEriKDa2HmWMdZaQBEIkUoxw7bfAVYLROMXiPOLqjRUAkpBI6EYMeIRq
bOWXHs1Q93J9DemlFadRR1EpvQ8PE6RrnnE=
-----END CERTIFICATE-----
Generated at Thu Oct 8 03:39:57 2026 by rpki-client