Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/68e8e840-a656-3ad6-aea8-71835d66921c.roa
File:                     68e8e840-a656-3ad6-aea8-71835d66921c.roa (raw, json)
Hash identifier:          CFpOpURYgVf3/lTLj0JLY+bWF1dHWTFcVdqMhajbxoY=
Subject key identifier:   50:A8:72:39:FD:03:23:A2:45:C8:C8:E8:65:3C:1C:63:54:DC:A8:BB
Certificate issuer:       /CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae
Certificate serial:       010D0C9F4328584E683F634564275F7899DA7280
Authority key identifier: E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/68e8e840-a656-3ad6-aea8-71835d66921c.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     36832
IP address blocks:        2602:f9bd:f01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:63:45:64:27:5f:78:99:da:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=f3be87fa-4d52-41f7-8df1-4e971114d903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:48:63:0f:98:bc:92:c8:fc:b7:ad:8c:1a:69:
                    98:f4:e3:c9:7c:e6:09:b9:74:5e:7d:f5:8f:0f:7b:
                    96:4b:09:99:c5:b1:f0:d2:cf:42:c7:a8:79:2d:6a:
                    e0:62:89:8e:11:7d:38:18:b4:79:2a:66:96:de:4b:
                    a9:50:9a:62:53:4a:20:37:8c:a9:58:d5:d7:d7:09:
                    18:ab:7b:2f:d5:b4:27:7f:95:f3:42:0a:be:db:8a:
                    d4:96:03:1e:a8:79:a3:21:c3:38:0c:a5:5a:2f:06:
                    3a:c6:10:46:11:8f:15:97:98:5a:b3:a6:a4:ef:b5:
                    c1:a6:9f:92:b0:b1:3e:e0:66:1f:23:f4:b6:38:6f:
                    17:44:b7:14:59:7d:2a:38:e5:9f:5e:f0:88:80:7a:
                    68:38:9f:60:bb:5f:ed:04:9a:cb:fc:71:af:eb:56:
                    c0:85:5b:62:06:56:92:fe:a6:03:a9:02:23:95:5b:
                    e1:0b:20:35:b8:02:13:ef:ec:92:b5:14:5c:c4:db:
                    01:50:93:d0:db:da:03:2b:dd:76:e3:41:0e:82:db:
                    c8:91:6a:81:6f:ad:05:f3:ee:3b:2b:33:01:6f:54:
                    cf:90:36:3e:82:fa:3b:2c:5b:42:fd:d9:03:2e:be:
                    ff:5c:39:69:dd:a7:73:2f:5c:74:53:d7:e6:d1:71:
                    47:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A8:72:39:FD:03:23:A2:45:C8:C8:E8:65:3C:1C:63:54:DC:A8:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/68e8e840-a656-3ad6-aea8-71835d66921c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl

            X509v3 Authority Key Identifier:
                keyid:E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9bd:f01::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:87:57:ba:45:4e:73:6b:11:33:a3:98:7e:56:6b:18:df:29:
         2b:9d:f4:60:30:e8:09:3b:43:c6:8a:73:f6:f3:f5:ff:30:1d:
         48:47:8d:01:81:44:fc:5f:16:0c:22:b7:2e:9e:0c:ae:08:48:
         55:9b:24:d9:94:8f:2b:dd:e4:33:c4:ee:a7:e2:97:64:52:dc:
         8b:72:04:3f:e1:fe:6f:44:b6:1d:cb:51:77:49:99:5f:42:ae:
         66:cb:a7:f0:59:c6:85:81:32:0c:fd:3e:a0:8f:c5:fa:46:b5:
         b4:8c:7f:ae:89:60:b6:19:4b:02:20:f3:e9:6c:c1:55:1f:5e:
         d2:f1:e5:28:80:c8:2d:31:db:84:f5:be:6c:5e:9d:d6:99:f3:
         3d:44:14:74:e7:48:c2:23:2c:51:d8:27:09:ba:48:95:bb:2e:
         82:21:d0:29:ae:37:c2:dc:f2:2b:a8:f4:0d:93:e4:8c:64:40:
         21:26:ac:dd:a4:3c:06:b5:61:0f:4b:73:85:02:a8:44:b3:f9:
         14:07:7c:50:4d:38:22:29:a8:00:29:1e:4c:44:78:d2:a6:20:
         d8:28:08:26:fc:be:fd:17:1f:e0:ba:19:0e:ac:a5:96:73:a8:
         dd:9d:b2:66:eb:a8:dc:06:2f:b3:e1:33:92:62:6b:e3:97:0d:
         95:ad:93:dc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5oP2NFZCdfeJnacoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWViNjgxYWMtY2U4My00NTg4LWJiZWQtMjg3N2JmNWE0
M2FlMB4XDTI2MDcwNjA5MDAxMloXDTI2MTAwNDA5MDAxMlowLzEtMCsGA1UEAxMk
ZjNiZTg3ZmEtNGQ1Mi00MWY3LThkZjEtNGU5NzExMTRkOTAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkhjD5i8ksj8t62MGmmY9OPJfOYJuXReffWP
D3uWSwmZxbHw0s9Cx6h5LWrgYomOEX04GLR5KmaW3kupUJpiU0ogN4ypWNXX1wkY
q3sv1bQnf5XzQgq+24rUlgMeqHmjIcM4DKVaLwY6xhBGEY8Vl5has6ak77XBpp+S
sLE+4GYfI/S2OG8XRLcUWX0qOOWfXvCIgHpoOJ9gu1/tBJrL/HGv61bAhVtiBlaS
/qYDqQIjlVvhCyA1uAIT7+yStRRcxNsBUJPQ29oDK91240EOgtvIkWqBb60F8+47
KzMBb1TPkDY+gvo7LFtC/dkDLr7/XDlp3adzL1x0U9fm0XFHEQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFCocjn9AyOiRcjI6GU8HGNU3Ki7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hZWI2
ODFhYy1jZTgzLTQ1ODgtYmJlZC0yODc3YmY1YTQzYWUvNjhlOGU4NDAtYTY1Ni0z
YWQ2LWFlYTgtNzE4MzVkNjY5MjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWViNjgxYWMtY2U4My00NTg4LWJi
ZWQtMjg3N2JmNWE0M2FlL2FlYjY4MWFjLWNlODMtNDU4OC1iYmVkLTI4NzdiZjVh
NDNhZS5jcmwwHwYDVR0jBBgwFoAU6UnX34qG5dZ/rJgDrsJvSwjdC0UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hZWI2ODFhYy1jZTgzLTQ1ODgtYmJlZC0yODc3
YmY1YTQzYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5vQ8B
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHSHV7pFTnNrETOjmH5WaxjfKSud9GAw6Ak7Q8aKc/bz9f8wHUhH
jQGBRPxfFgwity6eDK4ISFWbJNmUjyvd5DPE7qfil2RS3ItyBD/h/m9Eth3LUXdJ
mV9CrmbLp/BZxoWBMgz9PqCPxfpGtbSMf66JYLYZSwIg8+lswVUfXtLx5SiAyC0x
24T1vmxendaZ8z1EFHTnSMIjLFHYJwm6SJW7LoIh0CmuN8Lc8iuo9A2T5IxkQCEm
rN2kPAa1YQ9Lc4UCqESz+RQHfFBNOCIpqAApHkxEeNKmINgoCCb8vv0XH+C6GQ6s
pZZzqN2dsmbrqNwGL7PhM5Jia+OXDZWtk9w=
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:54:02 2026 by rpki-client