Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bca96b09-e170-3659-abb9-52dfeaf972fd.roa
File:                     bca96b09-e170-3659-abb9-52dfeaf972fd.roa (raw, json)
Hash identifier:          qKmQCh6VkI12uyqYMxaxqlklfDtLGuznGM2FJx4EyqQ=
Subject key identifier:   4D:F3:83:55:C6:4C:87:68:11:4D:C1:1C:0B:9A:0D:BA:7F:60:71:02
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584F4973A57DDCD62008E383C780
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bca96b09-e170-3659-abb9-52dfeaf972fd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6643
IP address blocks:        2606:cb00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:a5:7d:dc:d6:20:08:e3:83:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4ff546da-2d03-4bdc-ab06-aa5e9673d629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6b:63:1c:a2:34:bc:43:70:f0:a6:24:6d:8c:
                    af:9c:27:83:5f:8d:3b:d5:78:d5:4e:43:48:ca:b1:
                    7d:7d:c3:80:b4:09:21:8a:89:23:07:93:c8:82:ad:
                    dd:89:6e:79:58:f3:4b:ba:19:49:d7:a7:24:b3:15:
                    50:d5:6d:5a:0c:d6:e7:55:4c:eb:d8:6b:38:ea:a0:
                    85:1a:b0:3d:b5:15:0c:9e:5f:ab:5e:b5:97:11:16:
                    02:98:a5:6f:33:af:51:48:be:6b:a3:2c:5a:2d:da:
                    00:68:53:ba:14:fb:93:fe:6b:15:0d:77:c5:dc:7c:
                    5e:56:c9:67:0e:4f:76:ac:ed:e6:87:a4:77:25:c8:
                    2f:2a:da:0d:27:bd:44:17:29:8d:36:0e:e2:1a:4c:
                    22:dd:81:96:01:e3:ad:db:ef:83:02:ed:e8:e1:80:
                    c6:d8:59:3b:e4:44:af:93:97:a9:e8:97:e2:74:ee:
                    6b:8b:31:ae:88:21:9d:4c:dc:16:5f:51:f6:50:e6:
                    ae:2e:ac:7b:da:d3:74:86:2f:74:81:0e:02:dd:71:
                    b7:28:d0:44:cf:4a:21:eb:1b:60:01:29:bb:d6:ee:
                    40:fb:3f:6b:90:2a:1b:8a:df:a3:35:62:f2:1b:a8:
                    78:5e:a2:4e:1a:ff:b0:e7:ed:d9:70:d4:b4:a8:b2:
                    26:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F3:83:55:C6:4C:87:68:11:4D:C1:1C:0B:9A:0D:BA:7F:60:71:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bca96b09-e170-3659-abb9-52dfeaf972fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:cb00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:15:60:d6:a0:2d:a3:9f:3c:35:20:67:c8:c5:82:ce:37:08:
         88:77:01:57:f1:5a:6d:23:57:55:58:dd:e0:18:18:7f:e8:db:
         6b:42:a1:53:09:32:2c:27:9e:20:5b:24:ed:c4:e5:b1:0b:a2:
         e5:b1:34:46:89:19:e4:c5:5b:71:3a:c2:64:c9:d3:42:5b:1f:
         eb:48:d0:ee:99:09:6c:95:d7:45:10:27:c2:4c:b7:ca:30:fd:
         d3:22:9e:df:d3:5e:a9:87:4a:b4:72:ac:b5:24:d7:e0:21:c7:
         86:43:af:b7:de:61:d7:0c:7a:5c:f2:b5:16:ab:f2:0b:0c:0a:
         8d:db:c6:d2:0c:15:d7:ad:d0:78:8d:7d:dd:c3:e2:01:39:39:
         b7:de:89:52:af:cc:79:99:46:2b:fc:45:2c:00:b4:10:c3:0f:
         3c:6c:e1:39:0d:4a:dd:ca:9d:da:84:02:69:c4:4a:98:49:86:
         99:5c:65:8b:73:5d:a5:4a:fc:8d:92:c2:34:15:16:ff:25:81:
         10:37:c2:2e:fc:ae:4f:d3:79:22:23:9d:cd:c8:bf:74:03:6b:
         b3:bf:53:b9:d5:f2:ca:1e:f0:8f:a5:bd:16:94:09:05:77:5e:
         a5:34:d4:67:ad:8b:4f:bc:f3:65:e2:9f:db:de:09:77:e0:45:
         03:4a:48:83
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jc6V93NYgCOODx4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NGZmNTQ2ZGEtMmQwMy00YmRjLWFiMDYtYWE1ZTk2NzNkNjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGtjHKI0vENw8KYkbYyvnCeDX4071XjVTkNI
yrF9fcOAtAkhiokjB5PIgq3diW55WPNLuhlJ16cksxVQ1W1aDNbnVUzr2Gs46qCF
GrA9tRUMnl+rXrWXERYCmKVvM69RSL5royxaLdoAaFO6FPuT/msVDXfF3HxeVsln
Dk92rO3mh6R3JcgvKtoNJ71EFymNNg7iGkwi3YGWAeOt2++DAu3o4YDG2Fk75ESv
k5ep6JfidO5rizGuiCGdTNwWX1H2UOauLqx72tN0hi90gQ4C3XG3KNBEz0oh6xtg
ASm71u5A+z9rkCobit+jNWLyG6h4XqJOGv+w5+3ZcNS0qLIm2wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFE3zg1XGTIdoEU3BHAuaDbp/YHECMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYmNhOTZiMDktZTE3MC0z
NjU5LWFiYjktNTJkZmVhZjk3MmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbLADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA0FWDWoC2jnzw1IGfIxYLONwiIdwFX8VptI1dVWN3gGBh/6NtrQqFT
CTIsJ54gWyTtxOWxC6LlsTRGiRnkxVtxOsJkydNCWx/rSNDumQlslddFECfCTLfK
MP3TIp7f016ph0q0cqy1JNfgIceGQ6+33mHXDHpc8rUWq/ILDAqN28bSDBXXrdB4
jX3dw+IBOTm33olSr8x5mUYr/EUsALQQww88bOE5DUrdyp3ahAJpxEqYSYaZXGWL
c12lSvyNksI0FRb/JYEQN8Iu/K5P03kiI53NyL90A2uzv1O51fLKHvCPpb0WlAkF
d16lNNRnrYtPvPNl4p/b3gl34EUDSkiD
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:34:54 2026 by rpki-client