Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/885b3a77-fcc4-3ab3-96fb-a4ddce6f0b20.roa
File:                     885b3a77-fcc4-3ab3-96fb-a4ddce6f0b20.roa (raw, json)
Hash identifier:          U+pgP4KYjlkVZ/X5dEb49H3VruY68fFHDjJO+CyiCwY=
Subject key identifier:   B6:98:B8:B5:0B:F8:58:68:AE:6C:1C:0C:87:30:83:5C:5E:66:46:41
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ED9C74A9EBF43634573F40400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/885b3a77-fcc4-3ab3-96fb-a4ddce6f0b20.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     33905
IP address blocks:        2600:1480:c000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:4a:9e:bf:43:63:45:73:f4:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=d805ec55-741a-49b2-8fb0-43e973281ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8a:97:0a:d5:fa:4a:15:ce:0f:66:49:df:a2:
                    9c:bc:f9:1a:82:4e:2d:5a:fc:4e:fd:9b:47:3f:fc:
                    1d:f6:40:9d:d6:a8:a8:d8:ff:ff:20:75:fe:cc:08:
                    86:5e:75:43:97:04:dc:77:9a:91:6b:96:e3:06:89:
                    04:c4:72:fb:ac:c5:9e:b7:31:0d:27:3f:f0:7a:86:
                    ed:68:c2:5f:b5:15:90:5a:16:de:02:f4:2b:24:77:
                    d2:2c:2b:3b:90:f0:df:e9:7f:c3:db:d8:73:01:2c:
                    e6:f6:15:e1:13:94:29:21:b2:fd:91:c2:17:b3:12:
                    e1:00:c9:07:91:bc:ba:5f:bb:f4:33:36:61:02:da:
                    77:75:5f:31:e2:49:21:28:16:42:fc:b5:2e:3c:c6:
                    35:52:89:0e:93:a1:7b:dc:4a:5f:f9:08:39:d5:e8:
                    80:c4:d5:77:44:2f:eb:4b:fe:5d:00:8c:21:52:90:
                    c1:5e:2d:27:55:fd:f2:ef:a8:e5:b1:70:80:50:62:
                    f1:56:cf:19:32:f1:2a:ec:cc:e6:73:8f:55:e8:b7:
                    33:e6:21:0e:dd:14:46:b5:41:c2:35:3e:3f:80:44:
                    9c:8c:25:22:3d:80:ca:98:1e:df:8b:76:ba:6b:2d:
                    fc:19:a6:ee:4f:ef:ec:4e:ed:fc:b0:89:6f:4b:16:
                    e5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:98:B8:B5:0B:F8:58:68:AE:6C:1C:0C:87:30:83:5C:5E:66:46:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/885b3a77-fcc4-3ab3-96fb-a4ddce6f0b20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1480:c000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ec:bd:84:6f:83:37:14:39:87:74:14:1f:aa:f0:27:47:71:
         95:32:94:5d:aa:70:79:62:5b:ff:73:74:91:fd:17:f9:27:8f:
         c1:56:7b:44:af:93:64:ef:e1:bd:ad:9b:9c:69:9b:94:90:f1:
         fb:80:aa:b3:33:07:4a:54:0e:5b:4d:96:b0:7a:20:d4:bd:d3:
         49:fa:00:a2:c9:2e:c6:07:d2:eb:09:ab:62:a3:78:bd:ae:2a:
         78:bb:c0:db:a9:cb:62:51:01:e3:80:89:10:8b:f3:c5:40:ba:
         e3:69:46:13:13:26:36:57:97:53:ab:8e:ee:d2:06:a6:e9:41:
         25:27:59:12:a9:82:ad:66:c3:66:6c:e5:46:b5:a3:de:02:f3:
         de:7f:77:30:5c:08:5f:1e:c7:bf:88:b3:43:70:2e:0f:91:05:
         8d:f4:26:f2:37:e2:f1:ff:be:c8:39:be:be:9b:bf:3e:7f:34:
         68:a3:4b:6d:0b:b7:ec:2d:df:57:8a:96:2c:2b:4e:ac:20:a7:
         19:48:b8:d7:5f:63:97:af:9f:51:fe:91:c1:99:05:13:25:eb:
         3b:32:45:f9:b2:01:e7:e6:87:47:88:ae:b9:64:37:20:60:3c:
         14:86:20:85:c8:d9:c8:a6:52:15:83:f3:30:f9:9d:08:36:68:
         27:de:82:9c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE7Zx0qev0NjRXP0BAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk
ZDgwNWVjNTUtNzQxYS00OWIyLThmYjAtNDNlOTczMjgxZGRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoqXCtX6ShXOD2ZJ36KcvPkagk4tWvxO/ZtH
P/wd9kCd1qio2P//IHX+zAiGXnVDlwTcd5qRa5bjBokExHL7rMWetzENJz/weobt
aMJftRWQWhbeAvQrJHfSLCs7kPDf6X/D29hzASzm9hXhE5QpIbL9kcIXsxLhAMkH
kby6X7v0MzZhAtp3dV8x4kkhKBZC/LUuPMY1UokOk6F73Epf+Qg51eiAxNV3RC/r
S/5dAIwhUpDBXi0nVf3y76jlsXCAUGLxVs8ZMvEq7Mzmc49V6Lcz5iEO3RRGtUHC
NT4/gEScjCUiPYDKmB7fi3a6ay38GabuT+/sTu38sIlvSxblowIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLaYuLUL+FhormwcDIcwg1xeZkZBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODg1YjNhNzctZmNjNC0z
YWIzLTk2ZmItYTRkZGNlNmYwYjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgAUgMAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAVey9hG+DNxQ5h3QUH6rwJ0dxlTKUXapweWJb/3N0kf0X+SePwVZ7
RK+TZO/hva2bnGmblJDx+4CqszMHSlQOW02WsHog1L3TSfoAoskuxgfS6wmrYqN4
va4qeLvA26nLYlEB44CJEIvzxUC642lGExMmNleXU6uO7tIGpulBJSdZEqmCrWbD
ZmzlRrWj3gLz3n93MFwIXx7Hv4izQ3AuD5EFjfQm8jfi8f++yDm+vpu/Pn80aKNL
bQu37C3fV4qWLCtOrCCnGUi4119jl6+fUf6RwZkFEyXrOzJF+bIB5+aHR4iuuWQ3
IGA8FIYghcjZyKZSFYPzMPmdCDZoJ96CnA==
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:56:58 2026 by rpki-client