Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f8910c7-cdfa-3971-af55-16bf9ca01326.roa
File:                     8f8910c7-cdfa-3971-af55-16bf9ca01326.roa (raw, json)
Hash identifier:          1byfQR/zqRM74km90it/DFIdyTLDQOj7rwuCr2ivRG8=
Subject key identifier:   0B:8A:25:04:82:59:13:24:70:7F:E0:D3:2E:DD:CC:7D:3D:98:BB:FC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F7E7DB357420BC6619F5E0C40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f8910c7-cdfa-3971-af55-16bf9ca01326.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     33905
IP address blocks:        2600:1480:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:b3:57:42:0b:c6:61:9f:5e:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=b8cd65c3-60bb-43b0-828d-55234188382e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1a:d7:74:41:55:df:a2:0b:12:58:50:8a:26:
                    a7:5b:1a:e9:e7:a7:73:3b:4e:b0:7f:13:b5:46:6e:
                    90:f5:ce:46:0e:06:c1:bc:e7:08:19:60:f5:d3:26:
                    36:09:dc:30:66:da:59:df:05:2d:71:32:b5:78:8d:
                    28:84:8b:4d:c7:90:6f:1c:48:aa:08:84:62:bd:e0:
                    c6:07:74:07:4f:9e:6d:16:53:a3:f6:31:d4:00:82:
                    88:cc:d0:bd:01:de:b2:4d:32:27:79:7e:ea:d7:2f:
                    d4:52:db:52:0c:6e:e3:0f:ce:f5:bd:82:54:d0:80:
                    9f:b7:5f:02:bf:ed:cd:c5:a0:59:b1:05:ea:18:b7:
                    18:a2:ea:29:40:86:dd:ab:b7:fa:06:ca:1b:88:64:
                    68:09:7d:6e:01:14:93:95:08:d0:53:39:86:27:d5:
                    2d:c5:26:d0:4a:4d:a4:6b:fc:e9:55:ce:40:b1:f6:
                    ad:53:7b:42:39:86:2a:2c:11:bc:05:76:3c:24:94:
                    7d:92:14:79:f8:77:22:64:3a:b7:ea:db:82:05:98:
                    c2:9f:d6:84:36:96:19:b3:a1:7c:0f:f4:6d:3b:24:
                    af:39:41:27:8b:de:c9:0c:d1:ef:60:ff:ef:2a:b5:
                    48:93:8c:36:33:79:46:27:47:97:35:d8:b0:31:fb:
                    f4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8A:25:04:82:59:13:24:70:7F:E0:D3:2E:DD:CC:7D:3D:98:BB:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f8910c7-cdfa-3971-af55-16bf9ca01326.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1480:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:a8:19:4b:3b:42:de:a4:35:77:21:aa:62:3c:23:6b:99:fa:
         ca:d5:f3:72:6d:a0:99:c5:b2:28:be:be:9a:08:e0:f1:2c:ca:
         d9:eb:a8:66:ff:ef:1d:b6:51:db:7f:ab:ac:ed:16:25:12:14:
         b5:25:f3:17:44:50:08:02:12:8f:26:16:bf:8d:f9:34:0d:7f:
         16:25:1c:01:ba:24:cf:67:e6:c7:c1:23:55:63:0c:c6:2a:83:
         f1:13:06:89:3b:e3:f3:2c:9e:0e:4b:33:e4:08:c7:42:91:17:
         36:8b:6b:17:62:d2:a5:46:f8:31:e7:35:ea:3c:5c:d5:87:b5:
         ae:fa:46:55:91:62:43:eb:ad:71:80:33:d1:fb:8b:3b:71:d1:
         54:bc:3f:5c:79:4f:14:91:3b:b6:b2:18:9e:22:85:d1:92:94:
         cb:af:7f:8c:ff:98:d5:e7:ff:bb:07:fe:b1:8f:15:fc:b6:b8:
         dd:ca:a8:d3:5c:18:b3:f7:43:7a:58:53:8a:8b:5f:07:5f:c5:
         70:c2:90:11:cf:37:de:22:30:c6:8d:af:a2:3e:67:14:f6:f8:
         ee:8d:df:f6:fd:dd:3c:a2:a2:4b:9c:78:fc:38:8f:e1:18:0c:
         92:ec:2a:b8:65:15:2c:a8:89:b9:3c:85:1a:b4:11:3b:e8:10:
         44:dd:2a:1c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9+fbNXQgvGYZ9eDEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk
YjhjZDY1YzMtNjBiYi00M2IwLTgyOGQtNTUyMzQxODgzODJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBrXdEFV36ILElhQiianWxrp56dzO06wfxO1
Rm6Q9c5GDgbBvOcIGWD10yY2CdwwZtpZ3wUtcTK1eI0ohItNx5BvHEiqCIRiveDG
B3QHT55tFlOj9jHUAIKIzNC9Ad6yTTIneX7q1y/UUttSDG7jD871vYJU0ICft18C
v+3NxaBZsQXqGLcYouopQIbdq7f6BsobiGRoCX1uARSTlQjQUzmGJ9UtxSbQSk2k
a/zpVc5AsfatU3tCOYYqLBG8BXY8JJR9khR5+HciZDq36tuCBZjCn9aENpYZs6F8
D/RtOySvOUEni97JDNHvYP/vKrVIk4w2M3lGJ0eXNdiwMfv05wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFAuKJQSCWRMkcH/g0y7dzH09mLv8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGY4OTEwYzctY2RmYS0z
OTcxLWFmNTUtMTZiZjljYTAxMzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgAUgCAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEALagZSztC3qQ1dyGqYjwja5n6ytXzcm2gmcWyKL6+mgjg8SzK2euo
Zv/vHbZR23+rrO0WJRIUtSXzF0RQCAISjyYWv435NA1/FiUcAbokz2fmx8EjVWMM
xiqD8RMGiTvj8yyeDksz5AjHQpEXNotrF2LSpUb4Mec16jxc1Ye1rvpGVZFiQ+ut
cYAz0fuLO3HRVLw/XHlPFJE7trIYniKF0ZKUy69/jP+Y1ef/uwf+sY8V/La43cqo
01wYs/dDelhTiotfB1/FcMKQEc833iIwxo2voj5nFPb47o3f9v3dPKKiS5x4/DiP
4RgMkuwquGUVLKiJuTyFGrQRO+gQRN0qHA==
-----END CERTIFICATE-----
Generated at Wed Oct 21 17:47:34 2026 by rpki-client