Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ab86eef-8b39-3d2c-a67b-a5bad5cce032.roa
File:                     6ab86eef-8b39-3d2c-a67b-a5bad5cce032.roa (raw, json)
Hash identifier:          b3tZ4cORw0B2WCExO+J5m87lapWt7UY1zA6hzhCRhP4=
Subject key identifier:   D6:0C:C5:5A:F5:95:ED:69:52:56:EA:88:C3:2C:EC:A2:88:CC:4E:5F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E4559E113C4C3069734BCC080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ab86eef-8b39-3d2c-a67b-a5bad5cce032.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     12222
IP address blocks:        2001:4878:b102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:e1:13:c4:c3:06:97:34:bc:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=7c080941-02a8-4f3e-832f-d6c4d041225d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ae:f0:ae:89:23:71:f1:37:51:87:89:78:3a:
                    c4:f6:1e:05:50:1d:19:eb:37:13:da:ca:66:bf:01:
                    bd:0b:91:6f:91:c4:5a:81:f6:e4:b7:6f:5a:21:00:
                    c4:ff:d2:68:5b:00:7b:36:20:27:ed:53:06:f1:2d:
                    0a:c3:aa:94:5e:a1:99:44:31:df:03:bd:39:9d:cd:
                    2b:f0:aa:3f:46:dd:8b:d7:6d:bd:74:f6:5b:60:2b:
                    a5:c2:45:fc:f1:85:b2:a3:9c:e6:0d:38:ec:43:93:
                    b5:24:55:4e:27:ce:b6:54:84:73:64:80:90:4e:49:
                    66:5d:da:9d:a0:24:69:bb:09:34:fa:05:19:e6:0b:
                    fc:fe:32:56:d4:a5:f0:19:a6:a2:4d:b5:9f:23:bf:
                    86:37:fb:90:81:e3:2d:45:dc:a5:5d:d7:3b:fe:c2:
                    3e:80:02:e5:b6:a1:83:c4:e8:07:21:2f:ac:30:c8:
                    b2:c1:78:fb:bd:8c:89:78:49:9a:53:51:6f:04:0f:
                    7b:cc:66:37:14:38:fe:dd:e1:d6:c9:57:33:3f:20:
                    d7:ff:d0:7e:93:8a:8b:91:8f:b7:37:d4:10:77:96:
                    77:7f:64:13:10:6b:b0:56:4a:f3:af:56:cc:21:ea:
                    ab:5b:82:a3:52:d7:f2:72:01:d6:d8:22:07:8a:07:
                    3a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0C:C5:5A:F5:95:ED:69:52:56:EA:88:C3:2C:EC:A2:88:CC:4E:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ab86eef-8b39-3d2c-a67b-a5bad5cce032.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:b102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:b3:89:49:35:f5:11:8d:dd:d5:19:a0:45:bd:13:bc:fa:bb:
         08:b0:c3:b3:d0:40:c9:c3:a6:4e:fe:d9:74:3f:75:25:7b:6a:
         d1:09:c3:5e:34:00:78:01:ec:0c:f7:d4:8a:dd:1f:f0:76:6b:
         2e:bf:ba:b1:a2:3e:34:6f:1a:44:26:23:9d:af:33:34:9e:b2:
         94:2d:2d:57:64:bf:c6:ab:93:b5:30:78:4d:e7:8a:91:ea:06:
         99:a3:cd:d2:2d:ed:b8:f0:9d:99:6f:d3:de:6f:01:81:40:d2:
         40:9e:a3:3e:4a:0d:20:ce:d6:99:0d:31:f0:05:01:08:05:4c:
         a4:5f:c0:e1:b9:4b:b1:41:b6:af:74:e0:94:2a:60:89:d6:3d:
         2e:2b:88:bc:73:62:a6:0d:10:8e:29:bf:97:eb:d1:a0:21:9e:
         d9:e2:3c:58:92:c7:55:ff:93:44:ce:bc:90:ca:84:f8:a5:f1:
         6b:7f:1b:01:2e:58:e4:d6:d7:9b:03:1e:4d:c1:8a:68:be:66:
         94:c7:2e:9e:04:d7:ad:46:f8:4c:09:6a:48:be:72:49:1a:af:
         42:d6:fd:53:d3:68:63:ea:9d:d4:c6:3b:b8:5c:74:c7:e5:fc:
         84:1d:11:ad:dd:c9:09:87:3c:f8:ac:bd:b6:c9:91:69:2b:62:
         ef:ee:50:94
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5FWeETxMMGlzS8wIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk
N2MwODA5NDEtMDJhOC00ZjNlLTgzMmYtZDZjNGQwNDEyMjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4a7wrokjcfE3UYeJeDrE9h4FUB0Z6zcT2spm
vwG9C5FvkcRagfbkt29aIQDE/9JoWwB7NiAn7VMG8S0Kw6qUXqGZRDHfA705nc0r
8Ko/Rt2L1229dPZbYCulwkX88YWyo5zmDTjsQ5O1JFVOJ862VIRzZICQTklmXdqd
oCRpuwk0+gUZ5gv8/jJW1KXwGaaiTbWfI7+GN/uQgeMtRdylXdc7/sI+gALltqGD
xOgHIS+sMMiywXj7vYyJeEmaU1FvBA97zGY3FDj+3eHWyVczPyDX/9B+k4qLkY+3
N9QQd5Z3f2QTEGuwVkrzr1bMIeqrW4KjUtfycgHW2CIHigc6owIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNYMxVr1le1pUlbqiMMs7KKIzE5fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmFiODZlZWYtOGIzOS0z
ZDJjLWE2N2ItYTViYWQ1Y2NlMDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeLEC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFSziUk19RGN3dUZoEW9E7z6uwiww7PQQMnDpk7+2XQ/dSV7atEJ
w140AHgB7Az31IrdH/B2ay6/urGiPjRvGkQmI52vMzSespQtLVdkv8ark7UweE3n
ipHqBpmjzdIt7bjwnZlv095vAYFA0kCeoz5KDSDO1pkNMfAFAQgFTKRfwOG5S7FB
tq904JQqYInWPS4riLxzYqYNEI4pv5fr0aAhntniPFiSx1X/k0TOvJDKhPil8Wt/
GwEuWOTW15sDHk3Bimi+ZpTHLp4E161G+EwJaki+ckkar0LW/VPTaGPqndTGO7hc
dMfl/IQdEa3dyQmHPPisvbbJkWkrYu/uUJQ=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:32 2026 by rpki-client