Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/ef6288bf-9586-3449-8d94-7be543b242f9.roa
File:                     ef6288bf-9586-3449-8d94-7be543b242f9.roa (raw, json)
Hash identifier:          lyWOMFeHGqjcuujrPciosE87pz/r+bsgo16W/OP8WwE=
Subject key identifier:   79:AD:A2:51:98:4B:F9:46:74:01:FE:EC:96:F9:48:F4:B7:CF:F2:46
Certificate issuer:       /CN=5d1f7581-692a-467e-ae71-d3c4921d0765
Certificate serial:       010D0C9F4328584E50848DA9683E475897FFB800
Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/ef6288bf-9586-3449-8d94-7be543b242f9.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     3257
IP address blocks:        2620:4e:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:8d:a9:68:3e:47:58:97:ff:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=a879ad8a-0b2c-497e-b701-f2daa06d3e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:15:61:93:7d:a6:55:f3:9b:25:5a:9e:41:11:
                    5a:79:b4:4c:d8:73:dc:18:9c:a1:9b:dc:2a:3e:e8:
                    43:e6:98:0a:f3:bb:5f:08:40:87:da:39:47:f5:2f:
                    95:44:74:e3:a5:17:aa:a9:c9:48:18:17:5e:03:b3:
                    33:b8:4e:d1:62:00:78:15:4a:0e:02:c0:9a:4d:be:
                    12:21:1f:cf:aa:75:e7:1f:f2:0e:61:d8:03:fd:50:
                    f7:03:29:33:7c:22:f7:8d:24:35:87:0c:13:71:dc:
                    db:6a:33:ba:27:9a:5c:22:fc:29:52:6a:0c:23:e1:
                    f1:68:ee:e6:23:27:c2:3c:6b:1e:18:ec:99:6a:78:
                    a8:62:ff:b7:8f:7a:c6:96:46:b6:67:b0:02:5b:e7:
                    90:fa:c5:c5:3f:38:d1:f5:4f:8b:f4:bb:16:20:73:
                    9b:07:42:83:67:75:e6:14:87:9e:34:f7:ee:ec:b2:
                    8b:68:32:9c:e7:d7:ba:6f:3f:2d:bc:2d:37:70:a9:
                    7c:3f:a3:be:40:04:8f:3e:12:67:d7:46:23:a1:cc:
                    cc:e6:c2:eb:94:1f:b9:eb:d6:21:03:da:c0:01:66:
                    09:98:8e:4f:92:f9:8c:8d:53:91:43:36:dc:e5:a2:
                    e8:58:b7:7d:e3:45:af:14:25:5c:a7:1b:be:1d:d0:
                    bb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AD:A2:51:98:4B:F9:46:74:01:FE:EC:96:F9:48:F4:B7:CF:F2:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/ef6288bf-9586-3449-8d94-7be543b242f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl

            X509v3 Authority Key Identifier:
                keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:4e:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:25:7c:52:80:92:23:42:fb:78:df:8c:3d:af:e3:b9:6e:fe:
         d8:3d:3f:18:e2:76:86:75:9d:76:ce:9f:8f:45:cf:af:fd:0d:
         35:89:50:c8:1b:91:8d:fd:46:43:a2:85:97:c2:ba:3a:71:ed:
         8d:a5:4c:74:00:16:66:ca:0e:9a:ba:a0:c9:fd:2a:8d:f8:4b:
         5f:e2:56:5e:34:0b:22:75:dc:ab:68:5f:c7:be:bf:49:27:a7:
         ed:4a:79:3c:ee:11:1f:05:a6:ec:7b:69:f2:1c:45:df:aa:47:
         dc:b1:b7:7c:2f:cd:06:7d:67:29:d3:a6:ca:5b:c1:b8:0c:9e:
         f3:15:96:8d:ea:46:a4:d1:0b:60:9a:89:ab:6c:27:06:35:0a:
         1f:fd:17:5b:bb:05:9c:70:cd:78:6d:e8:f2:f8:21:7a:ba:ae:
         c5:8c:e2:4f:2b:2d:b6:ff:94:82:eb:5a:6b:7c:d4:00:57:8a:
         e7:bb:ec:de:7b:c9:5b:8e:41:51:dc:13:a5:de:03:bb:37:ea:
         b1:f3:d7:73:12:11:20:aa:8c:29:a1:1f:86:6a:48:51:44:8c:
         46:0a:ee:74:a2:e3:90:9d:12:fa:9c:fd:14:82:0d:d5:37:cb:
         ec:4e:4a:e3:0f:6a:92:29:89:6f:44:bf:f0:68:01:67:7f:fc:
         c9:53:38:c0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5QhI2paD5HWJf/uAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQxZjc1ODEtNjkyYS00NjdlLWFlNzEtZDNjNDkyMWQw
NzY1MB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk
YTg3OWFkOGEtMGIyYy00OTdlLWI3MDEtZjJkYWEwNmQzZTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBVhk32mVfObJVqeQRFaebRM2HPcGJyhm9wq
PuhD5pgK87tfCECH2jlH9S+VRHTjpReqqclIGBdeA7MzuE7RYgB4FUoOAsCaTb4S
IR/PqnXnH/IOYdgD/VD3AykzfCL3jSQ1hwwTcdzbajO6J5pcIvwpUmoMI+HxaO7m
IyfCPGseGOyZanioYv+3j3rGlka2Z7ACW+eQ+sXFPzjR9U+L9LsWIHObB0KDZ3Xm
FIeeNPfu7LKLaDKc59e6bz8tvC03cKl8P6O+QASPPhJn10YjoczM5sLrlB+569Yh
A9rAAWYJmI5PkvmMjVORQzbc5aLoWLd940WvFCVcpxu+HdC7qwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHmtolGYS/lGdAH+7Jb5SPS3z/JGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDFm
NzU4MS02OTJhLTQ2N2UtYWU3MS1kM2M0OTIxZDA3NjUvZWY2Mjg4YmYtOTU4Ni0z
NDQ5LThkOTQtN2JlNTQzYjI0MmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQxZjc1ODEtNjkyYS00NjdlLWFl
NzEtZDNjNDkyMWQwNzY1LzVkMWY3NTgxLTY5MmEtNDY3ZS1hZTcxLWQzYzQ5MjFk
MDc2NS5jcmwwHwYDVR0jBBgwFoAU/E+wVT9F4ouBttKQsjS83QRwJYYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDFmNzU4MS02OTJhLTQ2N2UtYWU3MS1kM2M0
OTIxZDA3NjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAATuAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABclfFKAkiNC+3jfjD2v47lu/tg9PxjidoZ1nXbOn49Fz6/9DTWJ
UMgbkY39RkOihZfCujpx7Y2lTHQAFmbKDpq6oMn9Ko34S1/iVl40CyJ13KtoX8e+
v0knp+1KeTzuER8Fpux7afIcRd+qR9yxt3wvzQZ9ZynTpspbwbgMnvMVlo3qRqTR
C2CaiatsJwY1Ch/9F1u7BZxwzXht6PL4IXq6rsWM4k8rLbb/lILrWmt81ABXiue7
7N57yVuOQVHcE6XeA7s36rHz13MSESCqjCmhH4ZqSFFEjEYK7nSi45CdEvqc/RSC
DdU3y+xOSuMPapIpiW9Ev/BoAWd//MlTOMA=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:48:16 2026 by rpki-client