Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9910ff82-1e15-413c-b2ed-3e1266f587a8/ada0a16b-78f0-3a7e-8f47-090101d8edbf.roa
File:                     ada0a16b-78f0-3a7e-8f47-090101d8edbf.roa (raw, json)
Hash identifier:          toLTVw8s0rIHjmGpZbNdo1lq+et92bNORVPwcDI7jSw=
Subject key identifier:   2E:D8:15:C6:F2:6E:46:96:37:99:FF:D7:C5:37:EA:CA:E2:62:CA:ED
Certificate issuer:       /CN=9910ff82-1e15-413c-b2ed-3e1266f587a8
Certificate serial:       010D0C9F4328584F71ED730E7BDC70113DF24180
Authority key identifier: 31:8B:70:02:BD:69:C0:C4:69:AA:B2:F9:11:DA:47:7E:68:AE:45:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9910ff82-1e15-413c-b2ed-3e1266f587a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9910ff82-1e15-413c-b2ed-3e1266f587a8/ada0a16b-78f0-3a7e-8f47-090101d8edbf.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     395668
IP address blocks:        2620:2a:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9910ff82-1e15-413c-b2ed-3e1266f587a8/9910ff82-1e15-413c-b2ed-3e1266f587a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9910ff82-1e15-413c-b2ed-3e1266f587a8/9910ff82-1e15-413c-b2ed-3e1266f587a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9910ff82-1e15-413c-b2ed-3e1266f587a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:73:0e:7b:dc:70:11:3d:f2:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9910ff82-1e15-413c-b2ed-3e1266f587a8
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=fa478eb9-1b26-48dd-b83f-43a949c75ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:d4:71:af:0d:9a:29:66:af:4b:1a:31:b1:
                    1f:8f:7f:41:5d:ec:e2:d3:d6:ab:67:d7:ae:cf:67:
                    ae:2c:b5:c2:bb:f1:9b:c1:65:ae:20:37:a2:eb:63:
                    f6:2a:7d:c7:da:96:5d:d0:b6:1f:31:b3:22:4c:6f:
                    2d:46:29:c0:69:6d:dd:87:f1:90:8b:15:c6:4d:8c:
                    f5:7e:46:45:da:2e:15:78:7e:69:c1:7f:99:e4:ba:
                    b4:93:8d:59:eb:21:14:a4:a4:ae:da:65:41:87:ec:
                    92:de:3a:1a:0f:39:2b:53:b9:95:66:27:9d:4e:17:
                    31:c5:32:a2:bf:75:02:7a:07:29:4b:97:6c:e7:3b:
                    a0:21:da:6a:ec:7c:3f:81:6d:2a:dc:cd:90:0b:5e:
                    fc:1a:8c:e4:f0:2d:31:a7:2a:1f:aa:7b:48:c7:e7:
                    79:21:34:25:87:19:ab:17:c7:99:6f:09:c9:48:27:
                    20:04:e7:53:ca:23:62:e7:e0:ba:1e:4c:6a:db:b9:
                    8e:23:7e:0c:75:80:67:d6:5d:39:67:9b:15:f1:6e:
                    26:4f:94:ac:3c:99:4a:6e:87:9a:5f:b4:d0:28:56:
                    3b:e9:05:78:e5:b9:e1:36:92:f3:8b:1a:53:44:53:
                    7b:a8:01:02:3d:17:8b:c4:f2:6f:64:9e:a7:28:94:
                    3b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D8:15:C6:F2:6E:46:96:37:99:FF:D7:C5:37:EA:CA:E2:62:CA:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9910ff82-1e15-413c-b2ed-3e1266f587a8/ada0a16b-78f0-3a7e-8f47-090101d8edbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9910ff82-1e15-413c-b2ed-3e1266f587a8/9910ff82-1e15-413c-b2ed-3e1266f587a8.crl

            X509v3 Authority Key Identifier:
                keyid:31:8B:70:02:BD:69:C0:C4:69:AA:B2:F9:11:DA:47:7E:68:AE:45:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9910ff82-1e15-413c-b2ed-3e1266f587a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:2a:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:2b:37:8d:2b:a8:28:8e:3e:ac:2e:b2:00:05:b7:4f:3d:a8:
         e0:2d:c8:e5:f0:d9:bf:37:4b:d5:f6:d6:40:78:64:c2:96:59:
         18:05:5d:8c:e3:72:f7:41:fd:12:2b:18:de:b2:ad:e2:b9:dc:
         a9:d9:af:22:fc:7d:9d:7f:54:3b:9a:d4:62:5c:63:9e:79:48:
         1f:c9:0a:d2:2f:b1:0f:bb:f7:66:61:0f:12:48:ff:33:32:10:
         35:f9:df:c5:59:ed:b9:36:64:7c:2d:2e:5d:bb:8a:b9:f9:63:
         78:f2:68:87:0d:0e:ff:64:47:7b:66:c3:57:fa:23:de:8f:97:
         e8:29:3a:c7:9b:77:39:1a:88:1e:40:94:e1:8b:b2:3a:f9:5e:
         2f:72:4f:10:ab:81:73:78:e7:b5:c3:b6:4d:43:a6:00:4b:16:
         af:c2:9e:78:41:16:5b:1e:ea:ee:eb:5e:a9:e9:de:6b:b4:1c:
         bd:18:3b:89:57:be:47:fc:7b:8b:25:1c:4e:dc:bd:54:dd:82:
         d9:61:f9:e6:fe:aa:61:4e:71:fd:9c:31:de:0d:02:c8:97:21:
         aa:9c:04:a4:e2:0d:79:34:52:7c:60:2c:ee:cf:94:c1:98:93:
         4c:27:b7:31:59:e3:9b:64:5e:70:4c:07:0a:24:f3:78:de:2a:
         f9:88:55:0f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9x7XMOe9xwET3yQYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTkxMGZmODItMWUxNS00MTNjLWIyZWQtM2UxMjY2ZjU4
N2E4MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk
ZmE0NzhlYjktMWIyNi00OGRkLWI4M2YtNDNhOTQ5Yzc1Y2UzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAbUca8Nmilmr0saMbEfj39BXezi09arZ9eu
z2euLLXCu/GbwWWuIDei62P2Kn3H2pZd0LYfMbMiTG8tRinAaW3dh/GQixXGTYz1
fkZF2i4VeH5pwX+Z5Lq0k41Z6yEUpKSu2mVBh+yS3joaDzkrU7mVZiedThcxxTKi
v3UCegcpS5ds5zugIdpq7Hw/gW0q3M2QC178Gozk8C0xpyofqntIx+d5ITQlhxmr
F8eZbwnJSCcgBOdTyiNi5+C6Hkxq27mOI34MdYBn1l05Z5sV8W4mT5SsPJlKboea
X7TQKFY76QV45bnhNpLzixpTRFN7qAECPReLxPJvZJ6nKJQ7BQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC7YFcbybkaWN5n/18U36sriYsrtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi85OTEw
ZmY4Mi0xZTE1LTQxM2MtYjJlZC0zZTEyNjZmNTg3YTgvYWRhMGExNmItNzhmMC0z
YTdlLThmNDctMDkwMTAxZDhlZGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvOTkxMGZmODItMWUxNS00MTNjLWIy
ZWQtM2UxMjY2ZjU4N2E4Lzk5MTBmZjgyLTFlMTUtNDEzYy1iMmVkLTNlMTI2NmY1
ODdhOC5jcmwwHwYDVR0jBBgwFoAUMYtwAr1pwMRpqrL5EdpHfmiuRXkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi85OTEwZmY4Mi0xZTE1LTQxM2MtYjJlZC0zZTEy
NjZmNTg3YTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAKiAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA0rN40rqCiOPqwusgAFt089qOAtyOXw2b83S9X21kB4ZMKWWRgF
XYzjcvdB/RIrGN6yreK53KnZryL8fZ1/VDua1GJcY555SB/JCtIvsQ+792ZhDxJI
/zMyEDX538VZ7bk2ZHwtLl27irn5Y3jyaIcNDv9kR3tmw1f6I96Pl+gpOsebdzka
iB5AlOGLsjr5Xi9yTxCrgXN457XDtk1DpgBLFq/CnnhBFlse6u7rXqnp3mu0HL0Y
O4lXvkf8e4slHE7cvVTdgtlh+eb+qmFOcf2cMd4NAsiXIaqcBKTiDXk0UnxgLO7P
lMGYk0wntzFZ45tkXnBMBwok83jeKvmIVQ8=
-----END CERTIFICATE-----
Generated at Sat Oct 10 02:56:13 2026 by rpki-client