Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/cd94796a-a7f0-3ab2-8e6c-343a913f3e63.roa
File:                     cd94796a-a7f0-3ab2-8e6c-343a913f3e63.roa (raw, json)
Hash identifier:          TSc9yQzBF2vEa1Ci29cXlVHlDKUWtlKPJULxRk5EaEw=
Subject key identifier:   D9:2F:65:BC:F1:6F:2C:0F:A0:A6:7F:5E:E3:41:23:24:2F:58:37:76
Certificate issuer:       /CN=06758d63-ebc2-49b2-b82c-063e47fb7a0f
Certificate serial:       010D0C9F4328584EEEB75283840E38FD7DF8E180
Authority key identifier: 11:FE:D6:68:34:3C:F9:A3:DE:8F:AD:F3:20:09:E6:2A:66:47:4E:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/cd94796a-a7f0-3ab2-8e6c-343a913f3e63.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     203
IP address blocks:        2606:5cc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:52:83:84:0e:38:fd:7d:f8:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06758d63-ebc2-49b2-b82c-063e47fb7a0f
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=f2df5af2-82f7-4b02-92b4-d5c188ef8b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a2:58:92:fc:69:45:c5:f1:7b:8f:76:f6:77:
                    3e:e6:09:59:ac:bf:1d:59:1d:6c:34:48:30:22:2d:
                    ca:95:38:68:ce:8a:07:07:02:c6:71:64:8d:82:d9:
                    6e:60:76:54:54:4c:6e:af:25:10:e9:5f:ac:a2:23:
                    aa:d4:fd:f3:80:3c:e4:b6:1b:07:00:2b:fe:c1:b5:
                    cd:20:2b:e4:28:67:69:aa:36:8b:a6:04:a1:ac:76:
                    8e:c5:5a:f6:d2:91:ad:6a:2c:33:ae:d4:05:bd:d2:
                    8d:92:39:08:f9:1d:c6:9d:93:4d:2d:08:9e:25:f7:
                    0e:d8:ad:f4:6a:52:33:c2:8e:94:71:e7:3f:7c:ac:
                    e5:48:6a:65:f4:ba:34:7d:e1:80:35:ae:c2:79:e2:
                    72:36:aa:fc:62:d0:5f:eb:a6:7c:19:91:2f:12:1a:
                    e4:9c:81:3a:17:7a:30:f1:57:8a:cb:a4:cb:99:20:
                    10:c5:3d:2a:84:1d:72:69:05:89:a6:6f:05:3c:34:
                    4a:05:2e:81:e9:ed:07:98:b9:bf:bc:3e:8c:e7:3a:
                    62:f7:ee:a6:83:75:fc:f6:33:45:4a:c1:00:23:70:
                    d8:36:5c:a1:c9:af:30:84:94:40:12:07:30:1f:e5:
                    24:c9:f3:91:07:fd:1a:8d:c2:5a:73:3a:83:1a:5a:
                    15:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2F:65:BC:F1:6F:2C:0F:A0:A6:7F:5E:E3:41:23:24:2F:58:37:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/cd94796a-a7f0-3ab2-8e6c-343a913f3e63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.crl

            X509v3 Authority Key Identifier:
                keyid:11:FE:D6:68:34:3C:F9:A3:DE:8F:AD:F3:20:09:E6:2A:66:47:4E:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:f9:86:71:c5:f3:b4:c8:c7:c7:34:bf:58:49:7b:31:af:a6:
         74:11:1b:b5:05:7f:0a:c6:a4:02:d6:d2:df:a3:ff:0d:c0:9e:
         89:4e:76:f9:14:55:72:6a:23:fc:bc:c7:82:e0:c4:36:41:08:
         b1:0b:a2:af:8e:5c:76:06:3a:0b:6e:44:a7:a6:ec:ea:e2:af:
         9b:89:53:09:a1:63:63:cc:80:41:0e:45:95:c0:d1:e9:e6:bc:
         af:a7:3b:a5:e5:95:da:e5:91:c5:5d:0b:cf:1d:eb:d0:e5:16:
         a7:52:95:d3:43:74:fb:8d:7f:cb:36:a4:0f:08:43:c1:36:53:
         56:5d:0b:4e:c1:9e:71:55:11:90:b6:2d:8f:4b:0a:32:fe:2c:
         39:ed:89:d9:24:42:2d:76:06:be:e9:aa:a5:72:fd:f0:23:d5:
         38:38:6d:6f:f2:51:52:29:46:c0:ac:bf:ac:6b:d5:1c:1c:1d:
         56:69:ca:12:d9:d4:80:c4:9d:0f:1b:a9:6b:c3:65:32:b6:68:
         6a:32:6d:94:47:3e:e0:8a:ef:76:83:ab:d7:52:5e:4a:e2:af:
         d1:21:8f:43:e8:c9:50:5f:56:09:60:b5:cc:76:d0:57:f9:b8:
         1c:fb:92:49:93:34:92:07:86:fa:36:fa:a0:60:73:8b:23:de:
         8f:41:3f:76
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7ut1KDhA44/X344YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDY3NThkNjMtZWJjMi00OWIyLWI4MmMtMDYzZTQ3ZmI3
YTBmMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk
ZjJkZjVhZjItODJmNy00YjAyLTkyYjQtZDVjMTg4ZWY4YjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6JYkvxpRcXxe4929nc+5glZrL8dWR1sNEgw
Ii3KlThozooHBwLGcWSNgtluYHZUVExuryUQ6V+soiOq1P3zgDzkthsHACv+wbXN
ICvkKGdpqjaLpgShrHaOxVr20pGtaiwzrtQFvdKNkjkI+R3GnZNNLQieJfcO2K30
alIzwo6Ucec/fKzlSGpl9Lo0feGANa7CeeJyNqr8YtBf66Z8GZEvEhrknIE6F3ow
8VeKy6TLmSAQxT0qhB1yaQWJpm8FPDRKBS6B6e0HmLm/vD6M5zpi9+6mg3X89jNF
SsEAI3DYNlyhya8whJRAEgcwH+UkyfORB/0ajcJaczqDGloV/wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNkvZbzxbywPoKZ/XuNBIyQvWDd2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc1
OGQ2My1lYmMyLTQ5YjItYjgyYy0wNjNlNDdmYjdhMGYvY2Q5NDc5NmEtYTdmMC0z
YWIyLThlNmMtMzQzYTkxM2YzZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDY3NThkNjMtZWJjMi00OWIyLWI4
MmMtMDYzZTQ3ZmI3YTBmLzA2NzU4ZDYzLWViYzItNDliMi1iODJjLTA2M2U0N2Zi
N2EwZi5jcmwwHwYDVR0jBBgwFoAUEf7WaDQ8+aPej63zIAnmKmZHTpIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc1OGQ2My1lYmMyLTQ5YjItYjgyYy0wNjNl
NDdmYjdhMGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZcwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC0+YZxxfO0yMfHNL9YSXsxr6Z0ERu1BX8KxqQC1tLfo/8NwJ6JTnb5
FFVyaiP8vMeC4MQ2QQixC6Kvjlx2BjoLbkSnpuzq4q+biVMJoWNjzIBBDkWVwNHp
5ryvpzul5ZXa5ZHFXQvPHevQ5RanUpXTQ3T7jX/LNqQPCEPBNlNWXQtOwZ5xVRGQ
ti2PSwoy/iw57YnZJEItdga+6aqlcv3wI9U4OG1v8lFSKUbArL+sa9UcHB1WacoS
2dSAxJ0PG6lrw2UytmhqMm2URz7giu92g6vXUl5K4q/RIY9D6MlQX1YJYLXMdtBX
+bgc+5JJkzSSB4b6NvqgYHOLI96PQT92
-----END CERTIFICATE-----
Generated at Wed Sep 9 00:49:16 2026 by rpki-client