Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/30a940fc-85b3-3b4d-85d3-7aa625a6365d.roa
File:                     30a940fc-85b3-3b4d-85d3-7aa625a6365d.roa (raw, json)
Hash identifier:          jUe0jnpx3cVeaSOANQAa0yIC9Y1tPexyAJ8PJnOYa04=
Subject key identifier:   53:07:D5:9C:AE:7B:69:3F:34:3F:D3:CB:5C:D7:4A:9D:50:51:F2:C5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E5DD7E14CB773FF471198E2E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/30a940fc-85b3-3b4d-85d3-7aa625a6365d.roa
Signing time:             Thu 02 Jul 2026 15:33:40 +0000
ROA not before:           Thu 02 Jul 2026 15:33:40 +0000
ROA not after:            Wed 30 Sep 2026 15:33:40 +0000
asID:                     20940
IP address blocks:        2600:1488:a008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:d7:e1:4c:b7:73:ff:47:11:98:e2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  2 15:33:40 2026 GMT
            Not After : Sep 30 15:33:40 2026 GMT
        Subject: CN=0087969e-1ab9-48bf-a8ce-6143bfad4c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:39:45:3f:16:fe:87:31:7e:f0:b1:a1:42:a1:
                    3a:2c:f4:d3:67:cc:b7:8e:94:ad:ed:a9:43:5b:68:
                    3a:70:40:e8:97:f2:fa:21:a0:ea:be:0c:75:77:85:
                    e5:53:5d:f4:7f:20:e7:70:28:74:4c:a7:50:46:95:
                    68:a0:73:f3:52:36:af:62:17:b7:13:1c:05:84:71:
                    c1:9f:78:a6:c8:23:7e:47:1a:19:c8:2b:bb:5e:af:
                    7c:28:df:82:51:13:13:da:f4:e5:04:ce:ab:ab:fe:
                    f1:f9:90:32:12:c7:79:e7:f6:3d:4e:19:e7:07:e1:
                    97:31:4e:67:14:3b:88:e1:09:e1:72:20:45:84:21:
                    a0:1e:53:77:16:8d:89:04:95:d1:77:5f:80:1c:61:
                    24:07:07:77:84:58:87:67:d6:69:5b:d0:af:cf:15:
                    47:55:b8:91:61:08:d8:92:6d:9b:85:7a:cb:a2:0b:
                    08:14:0d:90:c3:e8:99:cf:1c:27:ff:ee:04:74:b6:
                    e0:ed:6b:2e:d9:40:97:3e:71:1a:9d:d0:b2:41:73:
                    2f:b1:94:4f:d4:d8:b1:ce:9d:bf:10:2d:5f:68:57:
                    df:75:c7:21:88:1b:1a:f5:9f:6d:3c:18:fc:5c:da:
                    c8:6f:bf:3e:fd:a7:2d:73:5f:b4:62:c9:b4:35:e4:
                    6b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:07:D5:9C:AE:7B:69:3F:34:3F:D3:CB:5C:D7:4A:9D:50:51:F2:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/30a940fc-85b3-3b4d-85d3-7aa625a6365d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:a008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:22:06:9a:19:ed:d7:0b:dc:9d:c7:d5:cf:a2:b3:4e:b5:71:
         62:31:19:86:6c:5e:eb:ca:aa:53:3c:e5:7a:35:42:7f:cc:41:
         18:f1:85:2a:da:2a:cc:b7:57:9d:33:85:66:22:14:11:a7:5f:
         c4:6e:31:86:c1:98:5c:8c:57:10:21:6f:c2:1f:12:1f:4b:4c:
         8a:1d:d4:2e:30:e2:f7:52:57:b3:c6:77:71:76:ae:ae:fb:37:
         c9:11:23:ae:6b:28:b5:7b:12:05:43:03:da:ac:aa:09:0c:36:
         96:27:9e:4c:67:fb:85:d7:b9:88:db:2d:d3:09:f3:6f:d7:b8:
         0d:c4:ff:70:a4:55:b9:5b:ac:8f:75:51:a7:b9:e5:ed:9f:ac:
         a2:a4:9b:f6:01:ab:12:45:6d:4f:8d:f9:e1:aa:92:69:5e:3a:
         03:9c:8c:d0:12:35:85:75:79:cd:68:03:f1:20:c2:ae:3a:12:
         5d:f2:43:98:f9:f3:7c:8d:c1:09:bb:db:b9:8e:2d:74:30:3f:
         9a:10:5d:e3:2f:99:02:75:d8:2e:95:48:c9:cf:b0:cd:b1:70:
         65:43:05:ba:bc:83:cb:f8:7a:7c:2a:f1:8a:f6:5f:6d:99:58:
         2e:f5:59:a6:03:d0:14:de:f4:2d:c4:20:5f:57:bb:c0:02:b6:
         03:fd:64:35
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5d1+FMt3P/RxGY4uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcwMjE1MzM0MFoXDTI2MDkzMDE1MzM0MFowLzEtMCsGA1UEAxMk
MDA4Nzk2OWUtMWFiOS00OGJmLWE4Y2UtNjE0M2JmYWQ0YzE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTlFPxb+hzF+8LGhQqE6LPTTZ8y3jpSt7alD
W2g6cEDol/L6IaDqvgx1d4XlU130fyDncCh0TKdQRpVooHPzUjavYhe3ExwFhHHB
n3imyCN+RxoZyCu7Xq98KN+CURMT2vTlBM6rq/7x+ZAyEsd55/Y9ThnnB+GXMU5n
FDuI4QnhciBFhCGgHlN3Fo2JBJXRd1+AHGEkBwd3hFiHZ9ZpW9CvzxVHVbiRYQjY
km2bhXrLogsIFA2Qw+iZzxwn/+4EdLbg7Wsu2UCXPnEandCyQXMvsZRP1Nixzp2/
EC1faFffdcchiBsa9Z9tPBj8XNrIb78+/actc1+0Ysm0NeRr4wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFMH1Zyue2k/ND/Ty1zXSp1QUfLFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzBhOTQwZmMtODViMy0z
YjRkLTg1ZDMtN2FhNjI1YTYzNjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiKAI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHgiBpoZ7dcL3J3H1c+is061cWIxGYZsXuvKqlM85Xo1Qn/MQRjx
hSraKsy3V50zhWYiFBGnX8RuMYbBmFyMVxAhb8IfEh9LTIod1C4w4vdSV7PGd3F2
rq77N8kRI65rKLV7EgVDA9qsqgkMNpYnnkxn+4XXuYjbLdMJ82/XuA3E/3CkVblb
rI91Uae55e2frKKkm/YBqxJFbU+N+eGqkmleOgOcjNASNYV1ec1oA/Egwq46El3y
Q5j583yNwQm727mOLXQwP5oQXeMvmQJ12C6VSMnPsM2xcGVDBbq8g8v4enwq8Yr2
X22ZWC71WaYD0BTe9C3EIF9Xu8ACtgP9ZDU=
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:57:47 2026 by rpki-client