Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/7a65c7b9-fbbe-30c4-afb1-de2db869a000.roa
File:                     7a65c7b9-fbbe-30c4-afb1-de2db869a000.roa (raw, json)
Hash identifier:          aMylOmTKtgYdEZ1GXkQan62YPHXZX3EiQ+83L1z11QQ=
Subject key identifier:   81:D4:32:E6:94:6A:28:71:5E:F1:BB:89:D7:66:37:13:AA:01:03:C2
Certificate issuer:       /CN=09e8ec9f-45c9-4103-ba8f-29090f373418
Certificate serial:       010D0C9F4328584DF375E783D8D95C5CE48854A0
Authority key identifier: E2:27:7F:0C:84:E8:96:6D:F3:2D:41:64:5F:34:C4:A8:7D:B9:BA:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/7a65c7b9-fbbe-30c4-afb1-de2db869a000.roa
Signing time:             Mon 25 May 2026 13:00:31 +0000
ROA not before:           Mon 25 May 2026 13:00:31 +0000
ROA not after:            Sun 23 Aug 2026 13:00:31 +0000
asID:                     6461
IP address blocks:        2606:ea80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/09e8ec9f-45c9-4103-ba8f-29090f373418.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/09e8ec9f-45c9-4103-ba8f-29090f373418.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f3:75:e7:83:d8:d9:5c:5c:e4:88:54:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e8ec9f-45c9-4103-ba8f-29090f373418
        Validity
            Not Before: May 25 13:00:31 2026 GMT
            Not After : Aug 23 13:00:31 2026 GMT
        Subject: CN=c0fee47e-0a83-434c-8ec5-9e2a26fab6ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:67:9d:37:d1:6f:e1:15:8d:01:43:24:d2:dc:
                    9f:b3:8a:01:19:f6:4a:9d:e4:d4:bd:1d:e0:8a:5f:
                    30:d2:50:4f:21:f5:79:53:74:b6:f3:fc:59:20:24:
                    eb:e9:e4:aa:51:9a:3a:30:86:26:cc:60:b4:f0:4d:
                    55:07:4f:65:ff:fe:fa:de:c9:25:8a:42:4d:cd:c0:
                    56:a7:a0:f9:1d:a5:ff:54:52:5f:ad:af:89:31:4a:
                    b4:88:66:e4:38:e7:0c:1d:5f:3f:12:d5:06:48:c0:
                    1f:d2:89:c7:fb:ce:3e:f3:f6:ae:1c:04:cf:97:53:
                    95:e2:8e:75:a9:f8:a1:e8:7c:94:fa:ae:4d:08:0d:
                    de:6a:5f:e5:a3:f6:66:c5:21:f6:45:fb:b4:1a:a6:
                    3a:26:7d:cb:d2:8e:0c:7e:70:44:38:4e:92:a1:c2:
                    37:c4:df:2c:c5:3d:04:52:86:4d:6b:60:01:ee:0b:
                    54:3b:d7:f1:12:36:b6:f2:01:da:1a:08:81:a5:84:
                    3a:fc:af:75:4e:d2:5d:50:3b:b9:5b:5a:8a:da:62:
                    70:1e:8e:e5:d2:e4:94:20:ab:8b:34:19:cd:5f:8e:
                    85:c6:3c:cd:05:b7:3b:9d:92:f0:47:7b:50:cd:87:
                    77:bd:2b:fa:8a:5e:97:ca:f2:d4:74:d8:4e:5d:47:
                    4f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D4:32:E6:94:6A:28:71:5E:F1:BB:89:D7:66:37:13:AA:01:03:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/7a65c7b9-fbbe-30c4-afb1-de2db869a000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418/09e8ec9f-45c9-4103-ba8f-29090f373418.crl

            X509v3 Authority Key Identifier:
                keyid:E2:27:7F:0C:84:E8:96:6D:F3:2D:41:64:5F:34:C4:A8:7D:B9:BA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09e8ec9f-45c9-4103-ba8f-29090f373418.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ea80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:87:d9:24:4f:bb:6e:82:56:6a:df:5b:c9:ac:d3:a2:31:4c:
         a0:5f:db:f2:ae:23:8b:2a:e2:54:55:2d:e7:db:f7:14:18:2e:
         43:51:6e:28:00:86:17:e4:b8:ac:56:b6:ab:f7:f4:20:ca:cf:
         41:31:12:50:34:4c:61:02:48:8f:e2:f2:04:3a:99:36:80:11:
         e5:40:57:18:d5:06:2c:67:6c:f8:ff:e6:ef:ff:33:6c:20:3e:
         54:6b:e9:96:b3:0b:8f:91:59:69:3b:5e:62:09:92:64:25:52:
         bc:eb:9d:b3:90:e4:01:44:20:80:86:58:fc:67:9d:7a:76:83:
         ae:98:72:d7:8c:e6:9a:fe:01:21:c2:ac:5a:4a:d2:dd:c2:63:
         d0:fc:f9:dd:cb:23:dd:39:2f:08:2e:cf:25:5d:f1:27:69:60:
         39:62:2f:43:80:29:a9:b7:f4:fb:8d:9e:e2:ef:d9:a9:4e:28:
         04:03:d5:d2:e0:41:01:00:82:54:9e:ef:09:07:c8:58:8c:44:
         ce:1f:43:7e:b2:3c:96:2f:f1:29:ca:b3:8b:47:16:b1:aa:62:
         d6:2b:55:b4:89:19:64:b8:73:7d:b9:89:61:00:7b:bf:54:02:
         37:f3:42:5f:d1:f6:44:9c:1b:03:a2:09:0c:a7:02:9f:20:3d:
         10:3a:80:09
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3zdeeD2NlcXOSIVKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDllOGVjOWYtNDVjOS00MTAzLWJhOGYtMjkwOTBmMzcz
NDE4MB4XDTI2MDUyNTEzMDAzMVoXDTI2MDgyMzEzMDAzMVowLzEtMCsGA1UEAxMk
YzBmZWU0N2UtMGE4My00MzRjLThlYzUtOWUyYTI2ZmFiNmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWedN9Fv4RWNAUMk0tyfs4oBGfZKneTUvR3g
il8w0lBPIfV5U3S28/xZICTr6eSqUZo6MIYmzGC08E1VB09l//763sklikJNzcBW
p6D5HaX/VFJfra+JMUq0iGbkOOcMHV8/EtUGSMAf0onH+84+8/auHATPl1OV4o51
qfih6HyU+q5NCA3eal/lo/ZmxSH2Rfu0GqY6Jn3L0o4MfnBEOE6SocI3xN8sxT0E
UoZNa2AB7gtUO9fxEja28gHaGgiBpYQ6/K91TtJdUDu5W1qK2mJwHo7l0uSUIKuL
NBnNX46FxjzNBbc7nZLwR3tQzYd3vSv6il6XyvLUdNhOXUdPtwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIHUMuaUaihxXvG7iddmNxOqAQPCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wOWU4
ZWM5Zi00NWM5LTQxMDMtYmE4Zi0yOTA5MGYzNzM0MTgvN2E2NWM3YjktZmJiZS0z
MGM0LWFmYjEtZGUyZGI4NjlhMDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDllOGVjOWYtNDVjOS00MTAzLWJh
OGYtMjkwOTBmMzczNDE4LzA5ZThlYzlmLTQ1YzktNDEwMy1iYThmLTI5MDkwZjM3
MzQxOC5jcmwwHwYDVR0jBBgwFoAU4id/DITolm3zLUFkXzTEqH25uhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8wOWU4ZWM5Zi00NWM5LTQxMDMtYmE4Zi0yOTA5
MGYzNzM0MTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbqgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCIh9kkT7tuglZq31vJrNOiMUygX9vyriOLKuJUVS3n2/cUGC5DUW4o
AIYX5LisVrar9/Qgys9BMRJQNExhAkiP4vIEOpk2gBHlQFcY1QYsZ2z4/+bv/zNs
ID5Ua+mWswuPkVlpO15iCZJkJVK8652zkOQBRCCAhlj8Z516doOumHLXjOaa/gEh
wqxaStLdwmPQ/PndyyPdOS8ILs8lXfEnaWA5Yi9DgCmpt/T7jZ7i79mpTigEA9XS
4EEBAIJUnu8JB8hYjETOH0N+sjyWL/EpyrOLRxaxqmLWK1W0iRlkuHN9uYlhAHu/
VAI380Jf0fZEnBsDogkMpwKfID0QOoAJ
-----END CERTIFICATE-----
Generated at Thu May 28 13:41:03 2026 by rpki-client