Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/051b5fda-e1b3-3b60-b781-7400ba8f82fa.roa
File:                     051b5fda-e1b3-3b60-b781-7400ba8f82fa.roa (raw, json)
Hash identifier:          vSMj51rWTk5VLC78aYOgwCNs6pnjM0LKa7Myf8BVjfA=
Subject key identifier:   70:63:89:C5:22:A3:57:68:51:E4:21:AA:96:3B:B8:78:DF:35:00:DC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D0D42712173F5A8C9E3B2A6D0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/051b5fda-e1b3-3b60-b781-7400ba8f82fa.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     9498
IP address blocks:        2600:1417:1e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:71:21:73:f5:a8:c9:e3:b2:a6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=1f40da45-1574-4107-a032-5353262c092b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3e:e3:0a:a1:e9:be:93:21:07:16:6c:91:c2:
                    f2:5f:c4:6e:38:0c:47:97:fb:0b:0f:ae:bd:68:84:
                    0a:29:78:97:a4:36:f1:78:42:51:71:77:82:ee:7d:
                    47:1c:26:93:80:30:d9:a8:8b:de:c4:46:cb:61:d3:
                    e2:a4:42:45:8f:84:8e:dd:97:60:2b:d9:21:c2:15:
                    6e:db:e5:73:22:f9:78:9f:93:77:bd:e0:4c:77:e7:
                    58:57:96:65:45:7b:d4:a5:6e:86:93:3a:b6:1f:1e:
                    1d:d5:4f:99:d5:0e:8e:f7:05:1a:9e:86:cd:87:0a:
                    c9:90:4f:04:41:14:06:aa:d6:37:bc:fb:25:51:4e:
                    63:4d:31:a0:54:77:23:b0:34:4c:3a:b1:8a:45:90:
                    a3:6c:7f:f3:8a:8d:0c:92:a6:20:39:c2:c9:7f:24:
                    ad:80:fc:ed:75:ed:f5:db:00:79:b4:b6:1a:30:44:
                    30:64:6e:c8:15:8a:44:b4:79:9c:a1:93:58:44:09:
                    89:ba:74:dd:dc:20:01:54:1d:d9:01:d4:c6:56:7c:
                    c4:c8:2a:8b:f4:4b:5a:96:1d:c1:a5:dc:79:ab:60:
                    4d:03:5d:03:9d:8c:17:e9:93:a8:6c:95:b7:96:7a:
                    01:e3:bd:a0:b2:69:51:a4:e8:88:e1:52:04:1b:82:
                    3e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:63:89:C5:22:A3:57:68:51:E4:21:AA:96:3B:B8:78:DF:35:00:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/051b5fda-e1b3-3b60-b781-7400ba8f82fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1417:1e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:80:b3:e6:c1:14:ed:5a:af:db:97:52:53:87:36:b1:42:04:
         08:29:f9:e5:e5:19:a1:ee:f7:b8:d3:f1:62:8e:07:38:fe:d0:
         c4:87:c5:24:91:44:48:af:41:0d:89:c0:e2:be:43:67:5e:91:
         9a:d6:39:42:43:45:81:a3:3a:a5:aa:f3:5f:af:88:7f:ef:a8:
         cd:c9:3e:78:ae:b8:3b:92:41:a9:84:e9:d2:61:39:ee:45:ae:
         97:37:15:4c:27:a6:7b:34:4c:b4:74:ad:68:d3:bb:44:19:3f:
         ab:db:f3:0d:d1:0a:76:c2:bd:92:42:1d:41:9b:43:a4:21:db:
         10:f1:c8:64:a6:67:7c:24:1f:7c:ec:ca:67:3a:63:32:96:3b:
         5f:92:04:70:32:d4:b3:9e:76:85:9d:4b:7b:50:52:7b:fd:79:
         75:35:3d:9d:d9:d8:9b:60:ae:b5:c3:1f:8b:7e:e5:5e:6e:37:
         13:73:80:9b:87:55:e9:2c:00:3e:51:a3:91:79:4e:89:8b:0e:
         0e:b8:b3:d9:a9:be:4c:f2:d9:42:d1:53:65:f1:c9:15:85:48:
         90:e7:b4:96:2d:56:ea:71:6a:d7:12:5c:48:2c:8f:c9:b2:a3:
         37:f2:60:fb:c5:48:17:4c:1f:c7:0b:64:d7:b4:4c:02:0a:c4:
         fb:16:bb:ad
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0NQnEhc/WoyeOyptAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk
MWY0MGRhNDUtMTU3NC00MTA3LWEwMzItNTM1MzI2MmMwOTJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz7jCqHpvpMhBxZskcLyX8RuOAxHl/sLD669
aIQKKXiXpDbxeEJRcXeC7n1HHCaTgDDZqIvexEbLYdPipEJFj4SO3ZdgK9khwhVu
2+VzIvl4n5N3veBMd+dYV5ZlRXvUpW6Gkzq2Hx4d1U+Z1Q6O9wUanobNhwrJkE8E
QRQGqtY3vPslUU5jTTGgVHcjsDRMOrGKRZCjbH/zio0MkqYgOcLJfyStgPztde31
2wB5tLYaMEQwZG7IFYpEtHmcoZNYRAmJunTd3CABVB3ZAdTGVnzEyCqL9Etalh3B
pdx5q2BNA10DnYwX6ZOobJW3lnoB472gsmlRpOiI4VIEG4I+wwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHBjicUio1doUeQhqpY7uHjfNQDcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDUxYjVmZGEtZTFiMy0z
YjYwLWI3ODEtNzQwMGJhOGY4MmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFwAe
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHaAs+bBFO1ar9uXUlOHNrFCBAgp+eXlGaHu97jT8WKOBzj+0MSH
xSSRREivQQ2JwOK+Q2dekZrWOUJDRYGjOqWq81+viH/vqM3JPniuuDuSQamE6dJh
Oe5Frpc3FUwnpns0TLR0rWjTu0QZP6vb8w3RCnbCvZJCHUGbQ6Qh2xDxyGSmZ3wk
H3zsymc6YzKWO1+SBHAy1LOedoWdS3tQUnv9eXU1PZ3Z2JtgrrXDH4t+5V5uNxNz
gJuHVeksAD5Ro5F5TomLDg64s9mpvkzy2ULRU2XxyRWFSJDntJYtVupxatcSXEgs
j8myozfyYPvFSBdMH8cLZNe0TAIKxPsWu60=
-----END CERTIFICATE-----
Generated at Sat Mar 14 21:00:24 2026 by rpki-client