Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/aa1473b6-960d-3817-97b5-bf62bcaacb1c.roa
File:                     aa1473b6-960d-3817-97b5-bf62bcaacb1c.roa (raw, json)
Hash identifier:          r+ySY6k43DRXLC4iJlN+ar8zPn7srcwEVOwzVpuXTAQ=
Subject key identifier:   3B:50:13:22:91:FD:85:D8:22:5C:EB:63:97:11:FF:C0:B6:E7:8B:C1
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584F49890B13693088EF5E290B80
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/aa1473b6-960d-3817-97b5-bf62bcaacb1c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20473
IP address blocks:        2606:f180:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:0b:13:69:30:88:ef:5e:29:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=92f30214-30f3-4904-811a-91944040df70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:94:ce:1d:52:06:e7:3a:49:3f:c3:40:22:8c:
                    df:50:f1:9e:59:0d:95:b0:c2:09:b2:d3:01:0e:80:
                    92:e0:23:0d:49:85:98:f1:68:dd:a8:4a:06:e8:04:
                    36:a3:27:4a:01:81:2f:5c:b8:17:cf:36:2d:d3:df:
                    54:c4:18:d0:83:24:aa:c1:95:8c:d3:f8:65:18:9e:
                    f8:aa:38:0f:61:ec:4d:eb:07:da:ea:e6:78:f2:af:
                    70:c6:1b:27:f9:fa:e4:0c:d1:d9:9d:1f:c4:0b:2e:
                    72:d5:05:d6:78:6f:de:83:00:eb:4c:e6:d4:50:ba:
                    52:53:ea:54:fa:f2:55:89:f5:76:35:00:98:07:b3:
                    f0:09:5f:99:be:d7:27:30:b1:8a:d7:ab:61:60:d7:
                    5f:26:11:1d:83:4b:cd:90:ba:d0:c3:da:25:4a:ec:
                    ce:ac:f8:a0:4d:02:7b:73:56:1d:a5:da:49:bd:52:
                    33:cb:c5:52:c9:8e:3e:83:50:38:94:06:7e:a1:4c:
                    bb:05:7f:ef:12:7b:2b:73:16:32:2c:b3:97:91:d3:
                    67:76:e2:07:10:4d:d6:5b:b1:11:97:9d:4d:0f:8b:
                    6f:6b:ed:33:91:a2:fc:83:f2:2e:ef:b7:fa:a2:46:
                    f7:e1:1d:48:c8:92:69:1e:b2:6d:05:59:91:10:42:
                    5a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:50:13:22:91:FD:85:D8:22:5C:EB:63:97:11:FF:C0:B6:E7:8B:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/aa1473b6-960d-3817-97b5-bf62bcaacb1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f180:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:38:4e:e1:b2:c0:d1:55:7a:8c:0d:f5:d3:fa:2d:dd:4b:82:
         d5:65:10:53:83:5a:a8:b3:ff:a1:e8:de:e0:60:1f:63:7c:7a:
         17:85:63:14:be:80:e6:3a:c3:60:35:14:6d:65:3b:c4:c1:13:
         d6:73:88:32:9f:37:e0:d9:3d:5d:92:7f:ce:94:fb:33:32:9c:
         c0:d1:d4:ae:1f:84:1a:2f:cd:1b:f0:39:92:7f:35:3c:3a:85:
         36:7c:e6:40:71:ca:bc:9d:24:22:34:67:7e:92:d2:c0:c9:c1:
         f4:7b:a2:cf:34:2d:e7:b0:8f:b2:ed:10:39:d5:aa:00:be:be:
         55:5f:16:8f:7d:90:26:8b:60:95:c5:ad:4c:c6:8f:fc:e4:c1:
         91:2a:47:6f:81:11:f5:cd:b6:35:f1:91:a1:51:2e:78:c0:5b:
         a1:75:df:0d:8a:a8:28:1e:13:dc:b9:eb:9e:08:f0:2a:b7:36:
         2f:6a:85:36:b0:a3:bc:e8:7b:81:a9:2a:91:42:6a:cb:6b:0e:
         4f:dd:31:4d:21:0e:b6:3c:ce:ae:fe:64:f9:97:40:ff:f5:9e:
         a1:2e:fb:b9:02:89:f4:57:98:41:d0:0a:63:67:39:5b:ca:31:
         1a:91:9c:49:3f:35:6a:c6:73:a4:39:a1:09:e2:04:92:fc:36:
         56:86:f2:ee
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiQsTaTCI714pC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OTJmMzAyMTQtMzBmMy00OTA0LTgxMWEtOTE5NDQwNDBkZjcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpTOHVIG5zpJP8NAIozfUPGeWQ2VsMIJstMB
DoCS4CMNSYWY8WjdqEoG6AQ2oydKAYEvXLgXzzYt099UxBjQgySqwZWM0/hlGJ74
qjgPYexN6wfa6uZ48q9wxhsn+frkDNHZnR/ECy5y1QXWeG/egwDrTObUULpSU+pU
+vJVifV2NQCYB7PwCV+ZvtcnMLGK16thYNdfJhEdg0vNkLrQw9olSuzOrPigTQJ7
c1YdpdpJvVIzy8VSyY4+g1A4lAZ+oUy7BX/vEnsrcxYyLLOXkdNnduIHEE3WW7ER
l51ND4tva+0zkaL8g/Iu77f6okb34R1IyJJpHrJtBVmREEJagQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDtQEyKR/YXYIlzrY5cR/8C254vBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYWExNDczYjYtOTYwZC0z
ODE3LTk3YjUtYmY2MmJjYWFjYjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgbxgAAF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFk4TuGywNFVeowN9dP6Ld1LgtVlEFODWqiz/6Ho3uBgH2N8eheF
YxS+gOY6w2A1FG1lO8TBE9ZziDKfN+DZPV2Sf86U+zMynMDR1K4fhBovzRvwOZJ/
NTw6hTZ85kBxyrydJCI0Z36S0sDJwfR7os80Leewj7LtEDnVqgC+vlVfFo99kCaL
YJXFrUzGj/zkwZEqR2+BEfXNtjXxkaFRLnjAW6F13w2KqCgeE9y5654I8Cq3Ni9q
hTawo7zoe4GpKpFCastrDk/dMU0hDrY8zq7+ZPmXQP/1nqEu+7kCifRXmEHQCmNn
OVvKMRqRnEk/NWrGc6Q5oQniBJL8NlaG8u4=
-----END CERTIFICATE-----
Generated at Sat Sep 26 22:40:15 2026 by rpki-client