Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aef48fa2-d8c0-4397-b35d-275703760a6c/2e34c7aa-1720-30ac-964f-e2958715b880.roa
File:                     2e34c7aa-1720-30ac-964f-e2958715b880.roa (raw, json)
Hash identifier:          Z8HAW5h9JbQvcBLVJoRyjCrW4CAVPQZ84hJ6iCtjkXA=
Subject key identifier:   97:E9:B7:E7:5F:4F:13:36:F9:E3:6C:9D:E9:B8:80:AF:26:15:43:BA
Certificate issuer:       /CN=aef48fa2-d8c0-4397-b35d-275703760a6c
Certificate serial:       010D0C9F4328584EEEB7563B7361118A33148980
Authority key identifier: 05:36:0D:57:63:17:9E:9A:87:E0:04:83:AC:79:65:A5:A6:76:7A:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aef48fa2-d8c0-4397-b35d-275703760a6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aef48fa2-d8c0-4397-b35d-275703760a6c/2e34c7aa-1720-30ac-964f-e2958715b880.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     30013
IP address blocks:        2620:79::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aef48fa2-d8c0-4397-b35d-275703760a6c/aef48fa2-d8c0-4397-b35d-275703760a6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aef48fa2-d8c0-4397-b35d-275703760a6c/aef48fa2-d8c0-4397-b35d-275703760a6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aef48fa2-d8c0-4397-b35d-275703760a6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:56:3b:73:61:11:8a:33:14:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aef48fa2-d8c0-4397-b35d-275703760a6c
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=b39b276e-2143-4247-866d-5c4523ce21e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:20:65:1e:9c:2f:50:12:e2:95:74:68:47:2b:
                    ac:d7:1b:1a:86:64:bb:df:3f:ad:8a:4f:8a:37:89:
                    20:2c:2f:05:1c:87:8b:70:99:59:c0:cd:96:81:ba:
                    8e:df:62:ca:3d:de:c4:94:22:47:8e:4d:54:b1:63:
                    56:38:d1:03:20:00:92:f6:83:a3:93:6f:e0:bc:de:
                    11:1c:b3:ad:94:45:2b:f0:17:24:5a:cf:3c:9c:bf:
                    12:ea:59:1f:53:27:f4:63:37:ad:5a:f4:f9:56:ec:
                    16:45:5b:a4:09:64:37:9d:d1:96:23:8d:8c:ab:65:
                    ba:89:11:b5:b4:b9:b7:85:91:a4:2b:2b:0d:21:af:
                    08:05:b6:89:8c:ac:24:2e:0b:f2:5b:c1:36:9f:ae:
                    49:96:92:be:a9:ed:4a:2a:c2:a8:be:bf:47:97:2f:
                    c4:68:42:c8:c2:81:10:d0:82:b1:db:f5:fc:d7:88:
                    ed:b5:89:39:28:42:a5:f2:d1:cc:22:f6:4e:05:3e:
                    a1:72:26:80:f7:28:fd:40:90:f5:98:1f:11:f1:49:
                    9a:f6:15:ff:42:b2:13:76:59:fe:8e:7b:e2:61:ad:
                    e2:20:5f:b0:8a:a7:33:52:a4:07:93:9e:a6:5b:67:
                    b9:a6:05:91:33:1a:ea:9f:7d:c5:79:84:32:6b:80:
                    ed:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E9:B7:E7:5F:4F:13:36:F9:E3:6C:9D:E9:B8:80:AF:26:15:43:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aef48fa2-d8c0-4397-b35d-275703760a6c/2e34c7aa-1720-30ac-964f-e2958715b880.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aef48fa2-d8c0-4397-b35d-275703760a6c/aef48fa2-d8c0-4397-b35d-275703760a6c.crl

            X509v3 Authority Key Identifier:
                keyid:05:36:0D:57:63:17:9E:9A:87:E0:04:83:AC:79:65:A5:A6:76:7A:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aef48fa2-d8c0-4397-b35d-275703760a6c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:79::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:2c:b9:2e:8d:09:9a:15:0f:19:3c:92:77:92:72:73:e2:23:
         4d:45:a6:fc:b2:23:8e:20:31:1e:d5:b7:de:d3:c3:6d:a9:5b:
         3d:fe:2f:19:c4:91:fe:fc:1e:07:69:1a:51:b6:f0:bf:5f:a2:
         4d:33:3d:b3:3d:8c:c3:42:b8:15:1c:bf:48:3d:70:bb:2d:ec:
         d3:46:e7:fd:d7:30:2e:4d:61:a0:bc:4e:b7:3e:04:36:63:20:
         8c:2e:5c:7a:a0:3c:ca:58:95:82:6c:32:dd:ac:53:11:26:7b:
         33:eb:ef:98:06:dd:a8:f6:6d:6f:63:da:c6:06:c6:c5:e9:ef:
         e3:97:14:de:78:66:0b:60:1f:b3:13:e0:31:e9:58:aa:0c:9c:
         47:18:66:9a:9b:e5:4e:b8:c0:46:b6:7e:a7:50:e3:50:4c:8e:
         d5:a7:30:ce:ab:d2:3e:85:3c:4e:1e:a4:4f:bc:e7:f4:77:76:
         af:9b:15:f1:ab:b9:a6:87:bd:2e:7e:12:de:69:9e:16:dd:49:
         f5:29:95:a3:26:5c:3c:5a:74:8c:d4:71:57:63:8e:d6:5a:97:
         11:f3:0a:69:24:3f:f2:8b:69:27:2f:11:6f:cc:5f:f6:3a:c7:
         94:ac:41:22:81:80:37:35:a8:9b:52:62:11:40:34:24:c6:16:
         d0:5a:10:62
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ut1Y7c2ERijMUiYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWVmNDhmYTItZDhjMC00Mzk3LWIzNWQtMjc1NzAzNzYw
YTZjMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk
YjM5YjI3NmUtMjE0My00MjQ3LTg2NmQtNWM0NTIzY2UyMWUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CBlHpwvUBLilXRoRyus1xsahmS73z+tik+K
N4kgLC8FHIeLcJlZwM2WgbqO32LKPd7ElCJHjk1UsWNWONEDIACS9oOjk2/gvN4R
HLOtlEUr8BckWs88nL8S6lkfUyf0YzetWvT5VuwWRVukCWQ3ndGWI42Mq2W6iRG1
tLm3hZGkKysNIa8IBbaJjKwkLgvyW8E2n65JlpK+qe1KKsKovr9Hly/EaELIwoEQ
0IKx2/X814jttYk5KEKl8tHMIvZOBT6hciaA9yj9QJD1mB8R8Uma9hX/QrITdln+
jnviYa3iIF+wiqczUqQHk56mW2e5pgWRMxrqn33FeYQya4DtbQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJfpt+dfTxM2+eNsnem4gK8mFUO6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZWY0
OGZhMi1kOGMwLTQzOTctYjM1ZC0yNzU3MDM3NjBhNmMvMmUzNGM3YWEtMTcyMC0z
MGFjLTk2NGYtZTI5NTg3MTViODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWVmNDhmYTItZDhjMC00Mzk3LWIz
NWQtMjc1NzAzNzYwYTZjL2FlZjQ4ZmEyLWQ4YzAtNDM5Ny1iMzVkLTI3NTcwMzc2
MGE2Yy5jcmwwHwYDVR0jBBgwFoAUBTYNV2MXnpqH4ASDrHllpaZ2ej8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZWY0OGZhMi1kOGMwLTQzOTctYjM1ZC0yNzU3
MDM3NjBhNmMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAeQAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMwsuS6NCZoVDxk8kneScnPiI01FpvyyI44gMR7Vt97Tw22pWz3+
LxnEkf78HgdpGlG28L9fok0zPbM9jMNCuBUcv0g9cLst7NNG5/3XMC5NYaC8Trc+
BDZjIIwuXHqgPMpYlYJsMt2sUxEmezPr75gG3aj2bW9j2sYGxsXp7+OXFN54Zgtg
H7MT4DHpWKoMnEcYZpqb5U64wEa2fqdQ41BMjtWnMM6r0j6FPE4epE+85/R3dq+b
FfGruaaHvS5+Et5pnhbdSfUplaMmXDxadIzUcVdjjtZalxHzCmkkP/KLaScvEW/M
X/Y6x5SsQSKBgDc1qJtSYhFANCTGFtBaEGI=
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:20:52 2026 by rpki-client