Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/48a22f09-39fe-35fe-9a18-55a71448b023.roa
File:                     48a22f09-39fe-35fe-9a18-55a71448b023.roa (raw, json)
Hash identifier:          RtRdfI4ZUT1GpnRo0kW5SCtaBVXIPS82m4D25roQHno=
Subject key identifier:   F0:60:99:78:DB:FF:69:EA:A2:5F:4D:78:D4:0B:4C:71:EA:A1:67:7A
Certificate issuer:       /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial:       010D0C9F4328584F15CCE819CF40DC6FA2315A00
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/48a22f09-39fe-35fe-9a18-55a71448b023.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     32133
IP address blocks:        2606:8e80:5000::/37 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:e8:19:cf:40:dc:6f:a2:31:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=d03ab3a1-f41d-43da-9493-b78e1db721c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:01:35:89:c9:83:eb:b7:81:d2:69:72:f0:ce:
                    86:9d:f6:7d:a7:e2:d2:53:e0:ee:d2:bd:f7:f1:d9:
                    fa:ea:ff:ff:e5:7f:f3:4a:38:cf:db:f4:5e:d5:d7:
                    f8:c8:18:45:99:1b:63:d3:50:f8:b3:9d:47:ad:35:
                    70:9c:2c:b6:5b:44:28:b7:b6:8e:15:b4:42:9e:26:
                    b0:3f:d8:b6:34:49:2b:d6:3e:e4:3d:c6:8e:d1:e0:
                    34:9c:02:51:72:13:ba:69:37:93:c5:52:70:1e:f6:
                    e9:3e:cf:f3:9f:ff:3e:ff:88:6a:68:1c:65:e9:92:
                    3e:c3:f9:da:51:78:c0:e5:fc:9e:b4:92:25:c6:4d:
                    14:71:74:00:cf:a6:71:d0:86:3f:7e:5b:b4:95:18:
                    29:e0:f5:fd:46:3a:fc:27:f8:95:c0:22:1d:0d:bb:
                    88:21:7d:bb:49:ef:08:a8:3e:5a:d3:2f:c3:f4:98:
                    e6:1f:bc:3b:8d:d3:24:73:f1:66:d1:4a:2d:ba:5a:
                    83:05:01:b7:d2:fe:c2:ad:70:62:d6:85:bd:d5:eb:
                    14:07:b5:8a:bc:ec:cf:b5:ec:8f:5b:74:ff:76:65:
                    90:2b:26:09:28:15:77:60:8c:f4:db:c5:18:0f:de:
                    22:17:b4:0d:59:6c:2f:db:16:9a:65:44:d0:a1:51:
                    0f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:60:99:78:DB:FF:69:EA:A2:5F:4D:78:D4:0B:4C:71:EA:A1:67:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/48a22f09-39fe-35fe-9a18-55a71448b023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl

            X509v3 Authority Key Identifier:
                keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8e80:5000::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:cc:6b:d3:f5:72:66:a2:f9:e7:b6:18:4e:f4:28:02:44:1b:
         41:c5:cc:ef:f1:7f:ba:ef:81:40:1b:fc:f3:c5:84:2d:7e:59:
         81:1f:94:04:4e:0e:a7:4f:79:b3:3b:ba:e9:4a:0e:7d:bd:5c:
         82:73:80:61:46:75:46:b5:55:5a:fb:fa:a7:73:38:47:9b:a1:
         9e:94:6d:b8:f4:e2:58:63:b0:0f:d2:4a:37:5b:2c:af:65:98:
         1b:97:92:11:91:92:fd:71:45:9a:53:bf:8c:67:27:9b:54:6a:
         be:b9:82:2f:78:63:33:ec:47:ed:b7:88:54:07:72:d8:c8:9b:
         9c:0d:c5:8b:08:71:62:2c:b4:8a:57:24:58:59:f4:09:91:56:
         ef:60:74:89:fd:25:66:d4:e5:6e:23:df:cd:25:62:37:ac:9f:
         d4:70:91:75:43:05:08:83:29:64:82:73:32:a0:47:14:11:a9:
         68:5d:d6:e3:8e:9a:94:a9:7d:02:66:b1:bb:16:70:f4:aa:9a:
         80:b8:27:1b:63:b3:6e:7b:6d:eb:16:e5:f0:5d:16:42:8f:43:
         7b:68:c8:71:a2:22:1d:7f:38:be:d5:fd:52:2d:51:2f:aa:8b:
         fa:e0:a7:2e:b2:77:d1:4d:0b:50:41:dc:d1:92:9a:81:61:c4:
         29:71:34:36
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8VzOgZz0Dcb6IxWgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0
NjljMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk
ZDAzYWIzYTEtZjQxZC00M2RhLTk0OTMtYjc4ZTFkYjcyMWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAE1icmD67eB0mly8M6GnfZ9p+LSU+Du0r33
8dn66v//5X/zSjjP2/Re1df4yBhFmRtj01D4s51HrTVwnCy2W0Qot7aOFbRCniaw
P9i2NEkr1j7kPcaO0eA0nAJRchO6aTeTxVJwHvbpPs/zn/8+/4hqaBxl6ZI+w/na
UXjA5fyetJIlxk0UcXQAz6Zx0IY/flu0lRgp4PX9Rjr8J/iVwCIdDbuIIX27Se8I
qD5a0y/D9JjmH7w7jdMkc/Fm0UotulqDBQG30v7CrXBi1oW91esUB7WKvOzPteyP
W3T/dmWQKyYJKBV3YIz028UYD94iF7QNWWwv2xaaZUTQoVEP9QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFPBgmXjb/2nqol9NeNQLTHHqoWd6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj
YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvNDhhMjJmMDktMzlmZS0z
NWZlLTlhMTgtNTVhNzE0NDhiMDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh
MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw
NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4
MjhjMDQ2OWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJgaOgFAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAlsxr0/VyZqL557YYTvQoAkQbQcXM7/F/uu+BQBv888WELX5ZgR+U
BE4Op095szu66UoOfb1cgnOAYUZ1RrVVWvv6p3M4R5uhnpRtuPTiWGOwD9JKN1ss
r2WYG5eSEZGS/XFFmlO/jGcnm1RqvrmCL3hjM+xH7beIVAdy2MibnA3FiwhxYiy0
ilckWFn0CZFW72B0if0lZtTlbiPfzSViN6yf1HCRdUMFCIMpZIJzMqBHFBGpaF3W
446alKl9AmaxuxZw9KqagLgnG2Ozbntt6xbl8F0WQo9De2jIcaIiHX84vtX9Ui1R
L6qL+uCnLrJ30U0LUEHc0ZKagWHEKXE0Ng==
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:31:26 2026 by rpki-client