Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2eed118e-1a68-3d2c-beb9-6e8f19d3e244.roa
File:                     2eed118e-1a68-3d2c-beb9-6e8f19d3e244.roa (raw, json)
Hash identifier:          gX2Mv15ll5oTqtD5vdsLrUI62+2TzEn5Utcm8jzJ3mM=
Subject key identifier:   AA:E5:A0:F2:5F:F1:48:B1:1D:1C:09:A1:77:A5:67:AB:7A:20:13:61
Certificate issuer:       /CN=2046a800-c379-4c3b-b702-fb1712b4c5c9
Certificate serial:       010D0C9F4328584F89A8777BC77790BE2A5BB440
Authority key identifier: 1B:7C:FA:4A:E5:64:A0:93:02:4D:1E:9F:44:C2:64:A1:D8:FA:6F:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2eed118e-1a68-3d2c-beb9-6e8f19d3e244.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     14618
IP address blocks:        2620:113:80a0::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:77:7b:c7:77:90:be:2a:5b:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2046a800-c379-4c3b-b702-fb1712b4c5c9
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=28c26bdb-1c94-4a99-944b-00e565f371d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3f:0e:bb:f4:20:47:2b:9f:f4:19:ab:69:0a:
                    a6:37:e4:68:56:25:8a:dd:34:c1:dc:8f:f4:1f:61:
                    d2:b3:d7:73:b2:93:1d:ba:ab:14:48:ad:86:b3:48:
                    96:48:f3:85:9e:33:34:12:b7:d6:74:9d:b4:03:7c:
                    25:22:0c:fc:39:0f:ef:68:63:04:7e:99:05:d1:2e:
                    20:82:37:ae:4a:1a:09:de:a9:7b:aa:e4:6e:8a:94:
                    31:54:c7:26:f4:df:93:c6:d0:00:c9:01:42:52:cf:
                    b5:53:88:91:58:b2:f1:b5:59:47:07:6e:56:a6:e7:
                    54:e8:d3:9f:80:4f:24:4f:7f:bb:58:1b:72:60:3a:
                    b2:07:31:23:6d:4d:05:fa:30:58:dd:05:6e:5e:24:
                    3a:dd:34:4b:a9:98:fe:7e:44:f4:92:2a:68:78:b7:
                    c3:8c:55:67:a6:e1:46:b3:9f:ed:49:3e:d1:54:64:
                    b0:62:34:fb:1b:1d:44:c3:c6:fe:af:ff:ed:84:58:
                    42:08:93:7e:77:52:f2:b2:1c:b1:cc:a5:e7:01:1b:
                    7f:b7:da:57:e4:f2:54:f8:9a:b7:cd:ba:36:ac:35:
                    1f:0f:4a:bd:5c:94:6e:09:47:31:fd:29:50:7c:4a:
                    24:1b:50:1f:ee:a6:d6:43:e7:56:17:0c:4e:03:ed:
                    e9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E5:A0:F2:5F:F1:48:B1:1D:1C:09:A1:77:A5:67:AB:7A:20:13:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2eed118e-1a68-3d2c-beb9-6e8f19d3e244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.crl

            X509v3 Authority Key Identifier:
                keyid:1B:7C:FA:4A:E5:64:A0:93:02:4D:1E:9F:44:C2:64:A1:D8:FA:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:113:80a0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:9b:fa:63:f2:02:3a:0f:3b:89:b4:df:a1:de:1b:e1:8e:9e:
         6d:33:0c:6e:f1:d2:dc:8b:77:b2:d3:2f:7a:da:5b:d9:2a:c1:
         7c:90:ac:a2:80:cc:02:c4:db:e3:49:26:84:94:09:d1:eb:f1:
         60:a0:ba:31:45:64:6c:61:7c:b8:32:cc:e0:c4:05:ab:f2:d6:
         9e:de:81:1c:10:f6:e9:ba:8e:55:2b:2f:e8:a1:2e:2d:6d:db:
         ae:99:34:1a:7e:68:15:4e:5f:52:15:63:46:34:92:dd:91:c8:
         c6:be:6b:98:01:fd:21:86:a9:ca:19:cc:6e:39:48:5a:50:28:
         1d:07:81:31:e9:f4:67:8e:10:21:35:7b:cc:4b:1a:56:4a:c2:
         69:a1:aa:85:14:ec:70:41:5a:81:03:8a:5d:ca:ed:90:03:7b:
         42:db:5b:8d:d1:09:d9:87:59:f3:f0:06:3f:ba:8a:a2:77:e2:
         da:dc:e2:8a:8b:75:93:d9:2e:c2:2f:c5:de:fb:82:13:67:04:
         ec:71:48:40:df:a6:a5:73:c3:0c:4c:44:8f:ef:ef:65:57:ac:
         1f:e8:56:1d:0c:65:c6:ee:3f:a9:25:c8:b5:09:74:b2:7a:eb:
         43:e2:6f:4d:a3:ae:63:ba:9b:c6:5b:4f:87:7d:9e:e8:23:4c:
         be:3a:5f:48
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+JqHd7x3eQvipbtEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA0NmE4MDAtYzM3OS00YzNiLWI3MDItZmIxNzEyYjRj
NWM5MB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk
MjhjMjZiZGItMWM5NC00YTk5LTk0NGItMDBlNTY1ZjM3MWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkz8Ou/QgRyuf9BmraQqmN+RoViWK3TTB3I/0
H2HSs9dzspMduqsUSK2Gs0iWSPOFnjM0ErfWdJ20A3wlIgz8OQ/vaGMEfpkF0S4g
gjeuShoJ3ql7quRuipQxVMcm9N+TxtAAyQFCUs+1U4iRWLLxtVlHB25WpudU6NOf
gE8kT3+7WBtyYDqyBzEjbU0F+jBY3QVuXiQ63TRLqZj+fkT0kipoeLfDjFVnpuFG
s5/tST7RVGSwYjT7Gx1Ew8b+r//thFhCCJN+d1LyshyxzKXnARt/t9pX5PJU+Jq3
zbo2rDUfD0q9XJRuCUcx/SlQfEokG1Af7qbWQ+dWFwxOA+3pRQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKrloPJf8UixHRwJoXelZ6t6IBNhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMDQ2
YTgwMC1jMzc5LTRjM2ItYjcwMi1mYjE3MTJiNGM1YzkvMmVlZDExOGUtMWE2OC0z
ZDJjLWJlYjktNmU4ZjE5ZDNlMjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjA0NmE4MDAtYzM3OS00YzNiLWI3
MDItZmIxNzEyYjRjNWM5LzIwNDZhODAwLWMzNzktNGMzYi1iNzAyLWZiMTcxMmI0
YzVjOS5jcmwwHwYDVR0jBBgwFoAUG3z6SuVkoJMCTR6fRMJkodj6b6UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yMDQ2YTgwMC1jMzc5LTRjM2ItYjcwMi1mYjE3
MTJiNGM1YzkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiABE4Cg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG6b+mPyAjoPO4m036HeG+GOnm0zDG7x0tyLd7LTL3raW9kqwXyQ
rKKAzALE2+NJJoSUCdHr8WCgujFFZGxhfLgyzODEBavy1p7egRwQ9um6jlUrL+ih
Li1t266ZNBp+aBVOX1IVY0Y0kt2RyMa+a5gB/SGGqcoZzG45SFpQKB0HgTHp9GeO
ECE1e8xLGlZKwmmhqoUU7HBBWoEDil3K7ZADe0LbW43RCdmHWfPwBj+6iqJ34trc
4oqLdZPZLsIvxd77ghNnBOxxSEDfpqVzwwxMRI/v72VXrB/oVh0MZcbuP6klyLUJ
dLJ660Pib02jrmO6m8ZbT4d9nugjTL46X0g=
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:41:45 2026 by rpki-client