Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db/bc426fed-fada-323e-8db0-afd0fab751de.roa
File:                     bc426fed-fada-323e-8db0-afd0fab751de.roa (raw, json)
Hash identifier:          JeMQkCPEZvEEcEXTZoPciq8PcMnDOX50IwLt3TQ/dkc=
Subject key identifier:   10:AF:27:05:67:97:4B:4F:38:64:6E:FC:5B:A4:00:95:8C:2E:12:6C
Certificate issuer:       /CN=6aca9c18-e31c-4eb9-b651-d49d41d3a6db
Certificate serial:       010D0C9F4328584F2ABD21E981650D775B056BC0
Authority key identifier: AE:A2:37:87:2E:2B:AC:A0:BF:D8:32:33:50:97:44:76:33:E4:0D:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db/bc426fed-fada-323e-8db0-afd0fab751de.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     36666
IP address blocks:        2620:c1:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db/6aca9c18-e31c-4eb9-b651-d49d41d3a6db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db/6aca9c18-e31c-4eb9-b651-d49d41d3a6db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:21:e9:81:65:0d:77:5b:05:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aca9c18-e31c-4eb9-b651-d49d41d3a6db
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=e121a65f-73b4-42d9-a57c-9ce68aeb4f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5f:70:d2:ff:5e:0c:22:03:6d:a0:02:40:e9:
                    de:79:e4:61:bb:0e:7d:f0:94:e7:96:71:f7:3f:c6:
                    93:5d:37:ea:2d:0f:59:12:70:f0:58:46:23:18:8d:
                    68:a2:bd:f0:16:95:c1:2d:c0:ab:19:e2:60:32:aa:
                    f4:13:a4:45:4a:c9:66:81:7c:7b:b2:b9:16:7d:a0:
                    57:d0:14:be:6c:e8:bf:5c:e3:dd:22:c2:d0:82:97:
                    e6:14:63:b3:58:f9:7d:3a:ad:c3:c6:b5:0a:f1:3e:
                    b6:8e:0e:43:dd:73:c7:f7:9a:34:66:dd:2b:d4:62:
                    fa:ca:65:10:a7:6e:49:ad:14:85:17:d1:81:58:2a:
                    15:e1:13:bd:bd:c1:81:38:15:dc:fa:5e:72:14:cf:
                    e6:6d:13:1c:24:30:a3:b7:0d:96:77:c0:9b:8b:5b:
                    92:2f:d9:c8:71:12:4c:7c:42:75:81:50:cd:31:bf:
                    09:70:94:6c:30:9e:4b:4b:32:ee:33:01:b4:0b:8f:
                    94:8c:06:a7:cd:3c:fe:b9:11:15:eb:58:33:72:b5:
                    84:56:b1:f9:ff:ce:b8:ea:97:92:d5:43:14:49:53:
                    e2:72:05:20:db:fe:99:49:5e:42:fd:3a:8b:38:45:
                    92:0b:ba:85:e0:16:12:e0:67:82:50:62:01:0d:b7:
                    9e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AF:27:05:67:97:4B:4F:38:64:6E:FC:5B:A4:00:95:8C:2E:12:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db/bc426fed-fada-323e-8db0-afd0fab751de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db/6aca9c18-e31c-4eb9-b651-d49d41d3a6db.crl

            X509v3 Authority Key Identifier:
                keyid:AE:A2:37:87:2E:2B:AC:A0:BF:D8:32:33:50:97:44:76:33:E4:0D:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6aca9c18-e31c-4eb9-b651-d49d41d3a6db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c1:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:74:5b:8f:f6:c4:93:17:06:13:63:3c:35:f8:67:03:57:46:
         db:66:b1:c5:91:24:60:dd:53:e7:6f:36:d1:83:42:4d:9a:5e:
         bb:c2:55:44:90:46:30:27:ed:6c:ee:8a:8c:59:65:9c:80:51:
         87:2a:b8:4b:12:ec:cc:24:9d:12:19:81:b4:59:ce:1a:23:fc:
         95:64:95:c9:69:f2:7c:9b:c3:96:43:88:44:bc:ca:d1:8c:f5:
         af:33:9b:ff:91:2b:2c:d3:43:89:dc:eb:47:f7:80:86:ea:b1:
         86:7a:9a:31:75:ac:7b:51:23:90:48:8d:85:24:e8:e0:bb:64:
         9a:3a:de:46:2e:7f:02:03:0f:c1:5f:ba:6e:40:d5:36:55:c1:
         db:ea:cf:a6:c0:33:b9:3c:8b:68:a4:6a:49:07:91:7b:2a:79:
         9e:70:1d:c4:86:fb:37:83:c0:c5:ab:2d:d4:a3:19:2a:fc:34:
         57:a7:63:81:83:f0:c7:03:e8:6b:48:44:4d:5a:ce:01:16:50:
         63:11:30:17:40:67:3b:f9:2b:59:8d:1a:6c:54:34:21:4d:46:
         06:62:e2:14:19:50:bc:c9:17:44:79:93:fe:b7:17:df:2a:09:
         8a:0b:39:84:46:a7:52:6c:a4:af:d5:6a:88:22:36:b0:46:12:
         3f:50:5c:d1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8qvSHpgWUNd1sFa8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmFjYTljMTgtZTMxYy00ZWI5LWI2NTEtZDQ5ZDQxZDNh
NmRiMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk
ZTEyMWE2NWYtNzNiNC00MmQ5LWE1N2MtOWNlNjhhZWI0ZjNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV9w0v9eDCIDbaACQOneeeRhuw598JTnlnH3
P8aTXTfqLQ9ZEnDwWEYjGI1oor3wFpXBLcCrGeJgMqr0E6RFSslmgXx7srkWfaBX
0BS+bOi/XOPdIsLQgpfmFGOzWPl9Oq3DxrUK8T62jg5D3XPH95o0Zt0r1GL6ymUQ
p25JrRSFF9GBWCoV4RO9vcGBOBXc+l5yFM/mbRMcJDCjtw2Wd8Cbi1uSL9nIcRJM
fEJ1gVDNMb8JcJRsMJ5LSzLuMwG0C4+UjAanzTz+uREV61gzcrWEVrH5/8646peS
1UMUSVPicgUg2/6ZSV5C/TqLOEWSC7qF4BYS4GeCUGIBDbeeDwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBCvJwVnl0tPOGRu/FukAJWMLhJsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82YWNh
OWMxOC1lMzFjLTRlYjktYjY1MS1kNDlkNDFkM2E2ZGIvYmM0MjZmZWQtZmFkYS0z
MjNlLThkYjAtYWZkMGZhYjc1MWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNmFjYTljMTgtZTMxYy00ZWI5LWI2
NTEtZDQ5ZDQxZDNhNmRiLzZhY2E5YzE4LWUzMWMtNGViOS1iNjUxLWQ0OWQ0MWQz
YTZkYi5jcmwwHwYDVR0jBBgwFoAUrqI3hy4rrKC/2DIzUJdEdjPkDSwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82YWNhOWMxOC1lMzFjLTRlYjktYjY1MS1kNDlk
NDFkM2E2ZGIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAwWAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFh0W4/2xJMXBhNjPDX4ZwNXRttmscWRJGDdU+dvNtGDQk2aXrvC
VUSQRjAn7WzuioxZZZyAUYcquEsS7MwknRIZgbRZzhoj/JVklclp8nybw5ZDiES8
ytGM9a8zm/+RKyzTQ4nc60f3gIbqsYZ6mjF1rHtRI5BIjYUk6OC7ZJo63kYufwID
D8Ffum5A1TZVwdvqz6bAM7k8i2ikakkHkXsqeZ5wHcSG+zeDwMWrLdSjGSr8NFen
Y4GD8McD6GtIRE1azgEWUGMRMBdAZzv5K1mNGmxUNCFNRgZi4hQZULzJF0R5k/63
F98qCYoLOYRGp1JspK/VaogiNrBGEj9QXNE=
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:35:50 2026 by rpki-client