Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae6fb8a6-f755-3ed8-9ff3-c615ca3ca4e5.roa
File:                     ae6fb8a6-f755-3ed8-9ff3-c615ca3ca4e5.roa (raw, json)
Hash identifier:          Fp+8Oons7WTifgw39pSyrywL7GIPr3jjURQL3WCFKxM=
Subject key identifier:   99:6E:CF:66:1D:96:42:04:91:55:29:6F:77:EA:A7:F4:71:AA:C6:BE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E3A2F33018FA70FED4683A780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae6fb8a6-f755-3ed8-9ff3-c615ca3ca4e5.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     63949
IP address blocks:        2600:3c12:800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:33:01:8f:a7:0f:ed:46:83:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=af88b518-0ddb-4300-af46-dcf0246ffaab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6c:f3:c3:84:b4:20:5f:54:17:ab:06:90:f8:
                    2a:18:d0:e5:80:18:4a:cd:5f:1b:36:d9:d5:9c:20:
                    d5:f5:52:ae:63:67:d0:82:3a:b2:d1:0d:73:bc:32:
                    eb:e4:5b:77:70:79:a8:8b:fd:1f:ea:b8:8d:00:98:
                    09:6e:fc:94:f0:1e:0b:8a:1c:28:d2:5b:15:3c:50:
                    2d:75:78:c4:1e:0f:3a:95:56:06:8b:ec:99:9e:82:
                    43:31:07:98:01:65:c3:bd:7b:d8:67:22:52:15:74:
                    9f:29:f0:d7:37:32:e8:2e:16:de:ac:c3:5a:fb:fa:
                    25:27:98:e5:67:8d:26:e0:04:28:7a:02:14:90:53:
                    e3:42:f0:b1:96:8f:b4:7b:f8:9b:8a:a9:f9:1f:16:
                    57:d8:43:04:d3:0f:40:31:70:d9:15:26:e6:25:14:
                    f8:90:fb:46:ae:7e:bd:5c:57:7d:ca:2f:91:02:82:
                    f1:b1:fd:40:27:be:7c:0b:8a:c2:9b:82:14:30:89:
                    52:85:4c:5f:33:5a:e5:ac:f0:43:be:03:a0:3b:d2:
                    bc:2b:d0:2f:12:44:a8:07:8a:b0:5b:de:83:fd:18:
                    71:a1:16:b9:b4:af:91:4f:89:9d:16:3c:15:6c:5f:
                    47:40:30:81:48:2d:b9:c7:fb:b8:0f:45:0f:79:b9:
                    bd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6E:CF:66:1D:96:42:04:91:55:29:6F:77:EA:A7:F4:71:AA:C6:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ae6fb8a6-f755-3ed8-9ff3-c615ca3ca4e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3c12:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:47:b9:90:28:60:f7:08:c2:66:30:e6:59:22:07:43:c7:75:
         60:fb:86:0f:a0:82:c3:17:0c:96:17:10:71:25:55:e5:bd:fe:
         34:40:4c:7f:e2:fb:af:df:ae:71:6e:fd:d5:dd:e1:db:cb:3a:
         9f:dd:fc:e6:6c:b0:65:65:43:35:b3:16:ba:37:ca:82:92:31:
         cc:51:a6:b1:3a:af:e2:85:bc:47:cc:56:ff:46:30:4b:42:cb:
         e0:b1:85:25:f4:7f:03:42:3f:46:92:8e:a6:ed:28:5d:94:45:
         36:f6:88:c3:a4:58:e0:53:c1:a7:d7:15:e1:51:c9:08:06:b0:
         db:16:68:c3:a8:aa:c1:22:c9:76:87:74:28:18:40:62:c3:6f:
         4e:9e:d6:41:49:66:df:10:f8:6d:7d:af:00:07:0b:b6:b4:30:
         f8:5a:43:f2:07:b3:e7:a3:0d:ae:3a:d4:94:91:b0:9f:af:9e:
         38:5a:c2:cd:cf:b6:9e:ca:f5:46:28:34:81:aa:91:f8:5e:09:
         0d:eb:94:dd:9d:c1:b9:fa:65:11:8e:1e:ed:d0:5e:d6:59:06:
         6f:4a:90:98:fc:08:b2:b3:4f:bd:e3:1d:b5:1b:64:e7:c7:35:
         2e:46:e1:9e:e5:fd:51:3f:fa:52:c8:da:fc:b5:05:fc:ea:05:
         30:ca:37:23
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE46LzMBj6cP7UaDp4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk
YWY4OGI1MTgtMGRkYi00MzAwLWFmNDYtZGNmMDI0NmZmYWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGzzw4S0IF9UF6sGkPgqGNDlgBhKzV8bNtnV
nCDV9VKuY2fQgjqy0Q1zvDLr5Ft3cHmoi/0f6riNAJgJbvyU8B4Lihwo0lsVPFAt
dXjEHg86lVYGi+yZnoJDMQeYAWXDvXvYZyJSFXSfKfDXNzLoLhberMNa+/olJ5jl
Z40m4AQoegIUkFPjQvCxlo+0e/ibiqn5HxZX2EME0w9AMXDZFSbmJRT4kPtGrn69
XFd9yi+RAoLxsf1AJ758C4rCm4IUMIlShUxfM1rlrPBDvgOgO9K8K9AvEkSoB4qw
W96D/RhxoRa5tK+RT4mdFjwVbF9HQDCBSC25x/u4D0UPebm9jQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJluz2YdlkIEkVUpb3fqp/Rxqsa+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWU2ZmI4YTYtZjc1NS0z
ZWQ4LTlmZjMtYzYxNWNhM2NhNGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgA8Eggw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAA0e5kChg9wjCZjDmWSIHQ8d1YPuGD6CCwxcMlhcQcSVV5b3+NEBM
f+L7r9+ucW791d3h28s6n9385mywZWVDNbMWujfKgpIxzFGmsTqv4oW8R8xW/0Yw
S0LL4LGFJfR/A0I/RpKOpu0oXZRFNvaIw6RY4FPBp9cV4VHJCAaw2xZow6iqwSLJ
dod0KBhAYsNvTp7WQUlm3xD4bX2vAAcLtrQw+FpD8gez56MNrjrUlJGwn6+eOFrC
zc+2nsr1Rig0gaqR+F4JDeuU3Z3BufplEY4e7dBe1lkGb0qQmPwIsrNPveMdtRtk
58c1LkbhnuX9UT/6Usja/LUF/OoFMMo3Iw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:20:30 2026 by rpki-client