Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c3036da-2ec5-38af-84e6-1a2ac6adcb67.roa
File:                     2c3036da-2ec5-38af-84e6-1a2ac6adcb67.roa (raw, json)
Hash identifier:          yaHDNlafS4A6+eRvkTotvj9Ht3s6LVAMvk9WmP8isPw=
Subject key identifier:   C9:15:45:76:85:58:E2:D5:AC:44:D6:2B:0A:1B:E0:E2:01:E4:A7:45
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E36005B6B2352AFFC986F63A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c3036da-2ec5-38af-84e6-1a2ac6adcb67.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     20940
IP address blocks:        2600:1419:2a00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:5b:6b:23:52:af:fc:98:6f:63:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=286732f9-62ab-4368-ab0b-25c585fd9a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0b:bd:78:7c:bb:9f:14:cd:4e:ff:c6:2b:a2:
                    02:19:05:9e:0e:5e:3b:af:46:16:4d:8e:fc:1a:66:
                    d1:27:56:3a:7b:bc:f7:23:a2:92:ba:52:c7:7c:f3:
                    a3:b9:82:66:56:07:1e:98:8b:1f:8d:a2:03:c2:c5:
                    44:b5:11:6f:b4:64:65:ba:89:19:03:8e:f0:40:ef:
                    ba:2f:7a:b0:6c:a2:48:f4:f6:a8:91:1a:e3:7e:57:
                    3d:16:98:19:61:85:49:4f:9b:e7:61:39:8d:96:9f:
                    d8:18:f3:26:86:bd:18:b8:5c:8c:f7:44:f6:16:70:
                    ae:0b:5b:8f:69:51:ce:09:b4:01:b7:51:d8:8b:e1:
                    07:6a:06:6f:6c:0a:cc:2c:4b:f5:5d:21:e6:e5:a1:
                    6e:86:02:b6:29:9d:5e:ce:de:4f:53:34:26:00:65:
                    7b:00:cd:fa:66:ab:88:14:d1:f2:21:4d:a0:50:97:
                    6b:18:0c:72:ea:af:9e:3b:4c:ea:86:66:5a:5a:6f:
                    68:13:2f:61:83:9f:ab:33:7c:02:d5:8d:f0:b7:a5:
                    27:84:7f:f4:53:be:de:15:af:9b:34:44:2e:d8:a3:
                    fa:f4:b4:0c:fc:b7:74:94:8d:04:ad:ba:db:9f:4d:
                    5c:62:17:c1:c6:ba:b1:ea:17:cd:a5:00:6a:47:d5:
                    1e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:15:45:76:85:58:E2:D5:AC:44:D6:2B:0A:1B:E0:E2:01:E4:A7:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c3036da-2ec5-38af-84e6-1a2ac6adcb67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1419:2a00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d2:f9:94:1f:f8:7f:7c:7a:98:36:b6:66:d7:99:3c:f6:43:
         f1:37:cc:1c:fc:9a:1d:94:64:54:07:87:c7:0b:7d:92:e2:b9:
         c3:d7:97:74:01:b4:d5:57:c9:09:9b:ef:0b:da:b0:17:fe:cc:
         c2:ab:bb:ec:c7:32:29:4f:b8:c8:a0:4c:0f:85:a8:8a:02:71:
         5e:10:cb:c1:4f:bd:8e:da:b9:25:fa:9a:83:40:cf:ba:54:7c:
         fa:d8:75:bd:93:ed:11:f9:4c:99:73:5f:53:e2:3f:b8:27:df:
         52:f8:62:51:5b:a3:3e:77:9e:83:0c:38:83:cc:81:c5:16:4a:
         7e:eb:90:fa:44:da:35:5c:99:e7:f7:b9:91:1d:68:ac:0d:da:
         78:e9:b4:a2:dd:a8:67:b6:7d:4e:7b:90:31:74:60:bb:61:6d:
         99:05:66:25:6b:62:67:6d:e3:01:58:6a:70:44:18:a3:56:85:
         ea:96:6a:0b:39:fc:07:a4:27:6f:51:32:44:30:bb:2b:cd:25:
         2a:1e:db:1b:ae:cf:a3:13:b3:3b:48:51:7f:eb:40:25:46:f0:
         2c:ab:46:03:21:5b:83:e1:11:55:ff:ef:f9:3a:cb:fe:e7:77:
         d1:56:7e:e5:71:6c:c1:27:7c:8f:f6:83:bc:86:31:1a:73:3e:
         18:57:6f:d3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE42AFtrI1Kv/JhvY6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk
Mjg2NzMyZjktNjJhYi00MzY4LWFiMGItMjVjNTg1ZmQ5YTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAu9eHy7nxTNTv/GK6ICGQWeDl47r0YWTY78
GmbRJ1Y6e7z3I6KSulLHfPOjuYJmVgcemIsfjaIDwsVEtRFvtGRluokZA47wQO+6
L3qwbKJI9PaokRrjflc9FpgZYYVJT5vnYTmNlp/YGPMmhr0YuFyM90T2FnCuC1uP
aVHOCbQBt1HYi+EHagZvbArMLEv1XSHm5aFuhgK2KZ1ezt5PUzQmAGV7AM36ZquI
FNHyIU2gUJdrGAxy6q+eO0zqhmZaWm9oEy9hg5+rM3wC1Y3wt6UnhH/0U77eFa+b
NEQu2KP69LQM/Ld0lI0Erbrbn01cYhfBxrqx6hfNpQBqR9UemwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMkVRXaFWOLVrETWKwob4OIB5KdFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmMzMDM2ZGEtMmVjNS0z
OGFmLTg0ZTYtMWEyYWM2YWRjYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGSoA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC7S+ZQf+H98epg2tmbXmTz2Q/E3zBz8mh2UZFQHh8cLfZLiucPX
l3QBtNVXyQmb7wvasBf+zMKru+zHMilPuMigTA+FqIoCcV4Qy8FPvY7auSX6moNA
z7pUfPrYdb2T7RH5TJlzX1PiP7gn31L4YlFboz53noMMOIPMgcUWSn7rkPpE2jVc
mef3uZEdaKwN2njptKLdqGe2fU57kDF0YLthbZkFZiVrYmdt4wFYanBEGKNWheqW
ags5/AekJ29RMkQwuyvNJSoe2xuuz6MTsztIUX/rQCVG8CyrRgMhW4PhEVX/7/k6
y/7nd9FWfuVxbMEnfI/2g7yGMRpzPhhXb9M=
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:21:19 2026 by rpki-client