Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/cb7c5694-05a0-3eaa-85ba-4a229f87e128.roa
File:                     cb7c5694-05a0-3eaa-85ba-4a229f87e128.roa (raw, json)
Hash identifier:          DbAllbwN/InqMhvdM3llewIFNkwZmxOpyxPfp5+Uqoo=
Subject key identifier:   29:2D:31:D4:A7:A0:BA:72:AD:64:AB:3F:43:AC:50:97:CA:CE:47:F5
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328584E66DA0BC7CAF16FAA891153B0
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/cb7c5694-05a0-3eaa-85ba-4a229f87e128.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     53340
IP address blocks:        2605:6c80:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:0b:c7:ca:f1:6f:aa:89:11:53:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=5ed4fb2d-cee5-4bcd-acd9-0153ee4476df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0e:a0:c2:13:6d:f8:77:89:8a:ae:1f:0a:21:
                    c7:2a:7b:86:9b:5b:c2:5f:b9:de:fe:81:50:d6:45:
                    a6:cf:46:c7:a7:c4:0e:53:29:fa:c1:af:b0:61:60:
                    fe:fd:91:a1:cd:3e:6f:00:91:86:78:0e:e1:7e:92:
                    af:09:1f:65:c6:36:2e:6d:38:a1:49:cd:37:22:b7:
                    cf:d6:fd:46:01:3f:3e:b5:dc:67:00:85:90:4a:ca:
                    1b:fa:de:42:5f:cf:f3:81:f2:69:ab:da:7b:77:3e:
                    ef:36:97:17:e3:2a:69:af:c3:4c:48:2a:d4:c1:5c:
                    81:a7:d0:a6:44:9c:05:e7:ef:3a:9f:b8:4b:41:8a:
                    3c:fb:4a:39:b4:55:6f:9c:0c:6b:0f:5a:88:6d:05:
                    52:23:10:f6:98:4c:a2:04:0f:76:69:2d:78:b3:db:
                    2c:22:2f:7f:ea:58:2d:20:4a:39:c0:18:b8:9c:6b:
                    d5:9e:ab:5a:c2:02:9a:c5:f7:7e:8b:3c:6d:45:ec:
                    35:98:e7:61:1e:ce:fc:f7:5e:29:d1:cc:35:c6:e8:
                    bc:d4:d1:3f:ca:25:9e:55:98:b1:fa:5d:40:30:46:
                    4f:1d:76:d2:52:ef:91:b6:79:6e:f5:53:b3:ee:58:
                    1a:c6:d8:55:3b:28:8f:e8:28:b5:e4:dc:de:7c:e3:
                    49:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2D:31:D4:A7:A0:BA:72:AD:64:AB:3F:43:AC:50:97:CA:CE:47:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/cb7c5694-05a0-3eaa-85ba-4a229f87e128.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c80:9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:aa:6f:6f:90:ce:9e:f8:1f:0a:a0:05:a2:a3:d6:56:88:95:
         7a:92:6d:ef:69:42:f3:09:58:81:16:b2:94:ce:42:25:cc:9c:
         af:d6:fc:f2:26:01:d0:54:f4:22:cd:ed:23:4e:ec:4b:b4:61:
         3d:80:5d:27:23:b8:8f:f1:20:a0:6c:fb:ce:45:dd:a1:77:d8:
         2e:42:dc:49:3a:0c:76:34:eb:1c:d7:cf:09:3e:06:f0:0a:9e:
         1c:9c:f1:29:a2:3b:ad:07:0f:ef:cf:b1:6b:b9:97:6a:49:40:
         e5:5e:e2:fc:98:ad:b5:58:ae:24:8c:27:aa:52:5e:81:11:c1:
         b4:91:e3:97:fb:bc:91:6d:a9:ed:d6:ee:0c:bc:fa:bc:c4:4b:
         94:f4:15:a3:9e:6e:08:e5:af:15:99:f1:82:44:f5:f2:e1:19:
         12:47:d9:71:3b:71:fc:f7:4b:61:f2:90:7c:7f:26:4a:0d:20:
         cf:4d:24:56:12:90:85:d1:1e:ee:34:b6:d3:7f:a3:cb:c5:02:
         43:56:fc:f6:a0:9d:5f:61:9e:cd:9f:e7:15:bd:e0:35:d2:34:
         67:0c:9c:42:bc:68:d9:be:25:cf:a3:f5:3b:d9:bd:23:51:e5:
         37:af:5f:a5:50:27:35:ae:24:e3:82:de:da:a8:65:87:87:0e:
         ea:3b:9c:de
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5m2gvHyvFvqokRU7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDRiYzJiODctMjIzYy00MjgwLWE5YjMtNjM0ZTY2MTEx
ZWViMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk
NWVkNGZiMmQtY2VlNS00YmNkLWFjZDktMDE1M2VlNDQ3NmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1g6gwhNt+HeJiq4fCiHHKnuGm1vCX7ne/oFQ
1kWmz0bHp8QOUyn6wa+wYWD+/ZGhzT5vAJGGeA7hfpKvCR9lxjYubTihSc03IrfP
1v1GAT8+tdxnAIWQSsob+t5CX8/zgfJpq9p7dz7vNpcX4yppr8NMSCrUwVyBp9Cm
RJwF5+86n7hLQYo8+0o5tFVvnAxrD1qIbQVSIxD2mEyiBA92aS14s9ssIi9/6lgt
IEo5wBi4nGvVnqtawgKaxfd+izxtRew1mOdhHs78914p0cw1xui81NE/yiWeVZix
+l1AMEZPHXbSUu+Rtnlu9VOz7lgaxthVOyiP6Ci15NzefONJ6QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCktMdSnoLpyrWSrP0OsUJfKzkf1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NGJj
MmI4Ny0yMjNjLTQyODAtYTliMy02MzRlNjYxMTFlZWIvY2I3YzU2OTQtMDVhMC0z
ZWFhLTg1YmEtNGEyMjlmODdlMTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDRiYzJiODctMjIzYy00MjgwLWE5
YjMtNjM0ZTY2MTExZWViLzQ0YmMyYjg3LTIyM2MtNDI4MC1hOWIzLTYzNGU2NjEx
MWVlYi5jcmwwHwYDVR0jBBgwFoAUPxjW1UuMY2iuDtn3fpgQlOXg7XowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80NGJjMmI4Ny0yMjNjLTQyODAtYTliMy02MzRl
NjYxMTFlZWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVsgAAJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHCqb2+Qzp74HwqgBaKj1laIlXqSbe9pQvMJWIEWspTOQiXMnK/W
/PImAdBU9CLN7SNO7Eu0YT2AXScjuI/xIKBs+85F3aF32C5C3Ek6DHY06xzXzwk+
BvAKnhyc8SmiO60HD+/PsWu5l2pJQOVe4vyYrbVYriSMJ6pSXoERwbSR45f7vJFt
qe3W7gy8+rzES5T0FaOebgjlrxWZ8YJE9fLhGRJH2XE7cfz3S2HykHx/JkoNIM9N
JFYSkIXRHu40ttN/o8vFAkNW/PagnV9hns2f5xW94DXSNGcMnEK8aNm+Jc+j9TvZ
vSNR5TevX6VQJzWuJOOC3tqoZYeHDuo7nN4=
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:31:18 2026 by rpki-client