Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/dc6ec85f-fc08-33fa-9049-c8c3fb4d79b2.roa
File:                     dc6ec85f-fc08-33fa-9049-c8c3fb4d79b2.roa (raw, json)
Hash identifier:          IfTdh2K3zQj2Hm3NBEmwHWcyM1+/+fDeE/4UNho+ip0=
Subject key identifier:   CC:21:D6:74:05:EB:27:EA:07:36:13:FD:F2:46:14:5D:C4:3F:5D:52
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584E7E94EBEBAAECCB682ACC6D00
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/dc6ec85f-fc08-33fa-9049-c8c3fb4d79b2.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        2605:b040:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:eb:eb:aa:ec:cb:68:2a:cc:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=eec1d754-3922-46e6-a94e-338ec4375750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0d:cc:db:ef:e3:38:a9:69:10:8a:0f:3f:bc:
                    87:82:b8:3e:20:eb:f7:65:f9:74:69:47:dd:ff:72:
                    3e:8c:a8:16:7b:9a:57:d5:f4:2f:98:69:84:09:40:
                    8e:fb:31:2e:09:61:1e:9e:2c:f1:94:6d:51:dc:cc:
                    f1:ab:cb:7c:0f:e7:25:5a:3f:9b:76:b8:16:43:38:
                    a6:c0:c6:eb:6a:f8:17:d2:cf:05:fc:29:02:72:9e:
                    9e:a3:a8:07:5a:81:55:8a:08:c9:60:3c:dc:70:fa:
                    00:40:28:44:11:c7:70:b0:cc:4d:a4:16:2d:a5:01:
                    b7:7c:e1:52:51:64:8c:cd:d7:86:fe:0b:e8:02:e0:
                    84:be:b1:26:16:e1:16:90:46:1a:dd:16:6b:a2:77:
                    3a:71:55:db:45:3a:f5:9e:a3:94:a2:05:03:0a:1d:
                    89:d4:5a:2d:99:ce:b3:cb:71:66:34:6d:48:c6:bb:
                    b7:d3:90:24:59:bc:15:26:4a:83:42:31:21:63:c8:
                    fa:54:b4:94:c0:0b:3c:76:60:d5:8b:be:bb:3b:b8:
                    39:55:6d:54:38:b9:79:d0:65:cc:d1:48:7d:11:2e:
                    9a:e3:f8:47:c1:18:1d:67:f9:a5:b0:b1:b2:76:47:
                    80:15:5b:fa:95:0d:68:24:43:1e:ee:67:2a:5e:b1:
                    32:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:21:D6:74:05:EB:27:EA:07:36:13:FD:F2:46:14:5D:C4:3F:5D:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/dc6ec85f-fc08-33fa-9049-c8c3fb4d79b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b040:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:de:7e:1c:8a:72:4c:ec:15:7e:e8:2a:ef:30:00:9d:0c:64:
         f3:14:f0:3c:c5:44:2d:09:e6:2f:2a:40:3f:7a:ef:11:10:22:
         c8:e0:5f:36:0e:aa:86:71:81:20:94:5a:70:4c:5b:58:86:d2:
         a3:2f:d0:0b:17:15:40:d9:f6:19:05:19:d1:4b:55:41:fc:fa:
         3c:af:f7:dc:18:5e:71:d5:39:e4:b9:12:ab:c8:27:2c:57:01:
         12:60:c6:ac:6a:68:d4:64:06:0d:1e:40:08:b6:63:74:e6:e2:
         8e:8b:fd:4c:78:c5:a5:41:f2:42:0a:b3:5a:8d:6e:2f:88:64:
         f0:62:38:3b:ea:d3:ff:ea:69:c9:b3:70:f6:91:54:ad:dc:af:
         c7:25:cd:f3:95:87:5c:fc:d2:56:eb:7d:e5:45:e7:5a:f9:6e:
         21:f2:d6:92:cf:8f:e1:5a:94:7c:60:9d:97:60:ca:ba:96:8d:
         16:07:cf:92:7c:56:87:b6:48:bb:be:d7:5d:4f:d9:b0:d1:ca:
         ea:77:5a:4f:ca:00:3e:15:df:cd:db:67:22:8a:17:65:13:cb:
         4c:64:6b:3b:c2:34:52:35:58:3b:d2:6a:24:73:c6:6e:9f:7b:
         19:7f:fa:7d:07:fb:a2:54:6b:f7:5f:d5:73:d6:f5:4a:d6:76:
         e2:c0:bc:25
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5+lOvrquzLaCrMbQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk
N2M2MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk
ZWVjMWQ3NTQtMzkyMi00NmU2LWE5NGUtMzM4ZWM0Mzc1NzUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ3M2+/jOKlpEIoPP7yHgrg+IOv3Zfl0aUfd
/3I+jKgWe5pX1fQvmGmECUCO+zEuCWEenizxlG1R3Mzxq8t8D+clWj+bdrgWQzim
wMbravgX0s8F/CkCcp6eo6gHWoFVigjJYDzccPoAQChEEcdwsMxNpBYtpQG3fOFS
UWSMzdeG/gvoAuCEvrEmFuEWkEYa3RZronc6cVXbRTr1nqOUogUDCh2J1Fotmc6z
y3FmNG1Ixru305AkWbwVJkqDQjEhY8j6VLSUwAs8dmDVi767O7g5VW1UOLl50GXM
0Uh9ES6a4/hHwRgdZ/mlsLGydkeAFVv6lQ1oJEMe7mcqXrEyiQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMwh1nQF6yfqBzYT/fJGFF3EP11SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj
NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvZGM2ZWM4NWYtZmMwOC0z
M2ZhLTkwNDktYzhjM2ZiNGQ3OWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw
MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz
ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz
MjM2M2Q3YzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWwQAAI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ3efhyKckzsFX7oKu8wAJ0MZPMU8DzFRC0J5i8qQD967xEQIsjg
XzYOqoZxgSCUWnBMW1iG0qMv0AsXFUDZ9hkFGdFLVUH8+jyv99wYXnHVOeS5EqvI
JyxXARJgxqxqaNRkBg0eQAi2Y3Tm4o6L/Ux4xaVB8kIKs1qNbi+IZPBiODvq0//q
acmzcPaRVK3cr8clzfOVh1z80lbrfeVF51r5biHy1pLPj+FalHxgnZdgyrqWjRYH
z5J8Voe2SLu+111P2bDRyup3Wk/KAD4V383bZyKKF2UTy0xkazvCNFI1WDvSaiRz
xm6fexl/+n0H+6JUa/df1XPW9UrWduLAvCU=
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:17:34 2026 by rpki-client