Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7eec214-f1a2-3c35-8e51-5bca0959ef9e.roa
File:                     a7eec214-f1a2-3c35-8e51-5bca0959ef9e.roa (raw, json)
Hash identifier:          LyTra7EuI0P9F57NgVKWTQ+D2eFD8Ietyxo9BQLNF+4=
Subject key identifier:   D5:B9:51:32:E9:83:A9:B6:41:48:4A:0C:8C:99:EE:2B:FD:66:6A:A2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA78F852A9A356D8AB887D000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7eec214-f1a2-3c35-8e51-5bca0959ef9e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        2600:1406:c800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:85:2a:9a:35:6d:8a:b8:87:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=919f33a7-04ba-48bc-9942-576b425a5e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a3:3c:33:34:03:ab:59:f8:e2:c4:8d:a6:f0:
                    d6:38:aa:2a:e5:e4:21:c7:15:14:57:f8:ce:0d:a8:
                    e9:7d:ed:42:2f:0c:4d:22:69:62:e3:f2:ef:9f:45:
                    34:c9:00:5d:f3:2c:1c:0a:53:29:f3:52:1a:dc:76:
                    f0:5c:bf:3f:29:51:10:19:03:fa:c1:ca:a0:f4:35:
                    66:7f:c6:e6:94:97:a8:bd:9c:5a:bc:57:cf:4e:65:
                    73:e6:69:e4:2f:ca:7b:52:f0:15:0a:fc:29:f6:e5:
                    e7:fc:f0:f1:75:3b:57:fc:6a:f5:cb:53:40:65:3f:
                    a0:93:70:95:26:cc:13:76:01:44:53:7d:88:b0:40:
                    78:1e:cb:62:22:33:ce:14:12:13:85:95:14:aa:88:
                    5e:3c:36:5e:cb:b5:4e:5a:ab:2a:77:d2:d4:a3:0f:
                    89:bc:0c:d3:8e:2f:9c:27:3a:ca:37:5f:cc:be:09:
                    c2:e4:37:f5:05:4a:18:47:7c:eb:5c:06:04:20:0a:
                    94:87:67:f4:be:4d:6f:13:2b:35:f0:53:9d:e9:89:
                    3a:31:53:a3:7f:7d:40:f1:a3:c3:c2:27:9e:e1:be:
                    0e:ce:9e:b6:2f:fd:cf:9a:c3:96:02:e7:fd:b6:32:
                    28:fb:3e:45:62:01:fd:3d:12:96:c0:8e:c0:3e:8b:
                    f6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B9:51:32:E9:83:A9:B6:41:48:4A:0C:8C:99:EE:2B:FD:66:6A:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7eec214-f1a2-3c35-8e51-5bca0959ef9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1406:c800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ff:54:ef:4b:a0:55:37:c2:ba:cf:a0:8d:39:49:ec:3e:77:
         33:f8:db:e8:7a:60:d6:a5:c1:30:1f:6d:80:66:70:ce:d1:24:
         3e:f4:b3:69:1c:ff:76:bd:f8:41:2e:84:85:17:a3:c6:39:4a:
         e8:cd:f9:e6:f7:7e:e1:6b:c5:4e:46:87:27:c7:fb:54:8f:c4:
         64:5c:8b:d7:c5:4d:e0:ca:3a:72:76:7a:a8:37:09:15:d4:4b:
         a3:f7:61:aa:ba:bc:36:7a:3b:1d:1f:d0:c8:89:03:3b:4a:f8:
         b4:8e:ed:46:58:31:ef:02:7c:c6:c0:24:b5:b0:fe:25:ce:ee:
         bf:bf:4b:34:14:98:70:ab:1f:9a:fd:d5:5a:54:72:a5:d1:72:
         e3:c9:98:e1:ee:ce:13:70:1f:1c:dc:9f:61:4c:eb:28:56:7d:
         1c:d9:fa:c8:10:57:21:62:94:66:25:04:bb:c7:3d:46:48:35:
         6c:5e:63:be:76:36:b8:f9:2e:13:a1:9f:20:95:5f:f2:8d:e9:
         02:3d:fb:b9:36:73:05:ed:99:ac:b9:ac:5b:f9:e3:a2:34:4b:
         51:f0:2c:85:d1:de:9a:dc:06:88:b4:4d:96:d3:07:ab:9b:de:
         2d:3b:67:bb:93:6a:96:15:0f:15:62:e6:a9:83:b8:79:9e:2b:
         98:d9:2b:80
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nj4UqmjVtiriH0AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OTE5ZjMzYTctMDRiYS00OGJjLTk5NDItNTc2YjQyNWE1ZTg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaM8MzQDq1n44sSNpvDWOKoq5eQhxxUUV/jO
Dajpfe1CLwxNImli4/Lvn0U0yQBd8ywcClMp81Ia3HbwXL8/KVEQGQP6wcqg9DVm
f8bmlJeovZxavFfPTmVz5mnkL8p7UvAVCvwp9uXn/PDxdTtX/Gr1y1NAZT+gk3CV
JswTdgFEU32IsEB4HstiIjPOFBIThZUUqohePDZey7VOWqsqd9LUow+JvAzTji+c
JzrKN1/MvgnC5Df1BUoYR3zrXAYEIAqUh2f0vk1vEys18FOd6Yk6MVOjf31A8aPD
wiee4b4Ozp62L/3PmsOWAuf9tjIo+z5FYgH9PRKWwI7APov2NwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNW5UTLpg6m2QUhKDIyZ7iv9ZmqiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTdlZWMyMTQtZjFhMi0z
YzM1LThlNTEtNWJjYTA5NTllZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBsgA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGj/VO9LoFU3wrrPoI05Sew+dzP42+h6YNalwTAfbYBmcM7RJD70
s2kc/3a9+EEuhIUXo8Y5SujN+eb3fuFrxU5GhyfH+1SPxGRci9fFTeDKOnJ2eqg3
CRXUS6P3Yaq6vDZ6Ox0f0MiJAztK+LSO7UZYMe8CfMbAJLWw/iXO7r+/SzQUmHCr
H5r91VpUcqXRcuPJmOHuzhNwHxzcn2FM6yhWfRzZ+sgQVyFilGYlBLvHPUZINWxe
Y752Nrj5LhOhnyCVX/KN6QI9+7k2cwXtmay5rFv546I0S1HwLIXR3prcBoi0TZbT
B6ub3i07Z7uTapYVDxVi5qmDuHmeK5jZK4A=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:35:08 2026 by rpki-client