Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da4cd887-d510-330c-80db-d55ce3cbc70e.roa
File:                     da4cd887-d510-330c-80db-d55ce3cbc70e.roa (raw, json)
Hash identifier:          AoiAsoBGefRMkX3SuxP6pap3c+m088Aith47h0dbRKM=
Subject key identifier:   E4:44:94:E8:7B:47:DD:A0:25:37:2A:A3:D3:CC:93:6A:71:88:F1:62
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F4984748B4491CE10BED44400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da4cd887-d510-330c-80db-d55ce3cbc70e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        2600:1488:c030::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:74:8b:44:91:ce:10:be:d4:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=47745c2a-b344-4cb1-830b-ea5204c6d558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c6:a2:77:0e:3b:31:5d:36:73:43:58:ab:48:
                    57:f5:d6:4a:74:f6:ea:4f:f0:0b:62:af:de:8b:86:
                    23:59:12:d9:23:31:6c:2e:76:80:e7:3c:d7:d3:49:
                    98:87:eb:3c:63:8e:05:28:ec:b0:0a:56:3a:e7:66:
                    13:0a:8f:a3:58:a7:80:48:35:51:ea:85:cf:81:3d:
                    0c:57:dc:87:92:e4:cb:c9:02:03:48:3b:24:34:f9:
                    24:c1:16:c8:26:3d:a2:c4:d7:5d:b9:3a:ea:73:43:
                    dc:e1:ad:a0:33:e8:ca:7f:de:e8:38:26:20:46:ca:
                    57:92:8c:2a:1b:15:83:19:0b:77:5b:f7:3d:08:c5:
                    b0:56:61:53:1c:c0:d2:53:6d:46:75:eb:32:e2:e7:
                    21:87:a0:61:32:48:f8:01:df:8d:3f:ee:34:03:ba:
                    79:13:e1:50:06:f3:d5:78:2b:a8:dd:76:d9:18:10:
                    77:48:2b:96:58:9c:de:b5:af:d3:08:e4:89:2f:9f:
                    9a:5a:83:4f:1d:4d:9a:cb:01:ec:47:bf:96:25:87:
                    3e:c1:b3:dd:b7:c4:23:d0:d5:4b:ba:fc:a1:8f:4a:
                    82:2b:f7:ef:82:49:a7:8a:60:94:4f:93:72:63:b9:
                    f2:22:49:f3:3d:7e:06:22:9f:d6:23:9c:1e:1e:87:
                    2d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:44:94:E8:7B:47:DD:A0:25:37:2A:A3:D3:CC:93:6A:71:88:F1:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da4cd887-d510-330c-80db-d55ce3cbc70e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:c030::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:c9:21:81:ff:14:b3:bd:a7:0d:c3:21:1d:98:e7:ed:1d:e4:
         d6:1b:49:48:19:7b:a3:b0:4e:98:4f:39:ac:12:a2:a3:26:0e:
         7e:b1:09:89:4b:67:ee:a7:ae:85:fb:f2:0f:2b:2c:52:9d:f6:
         3e:32:12:e8:bd:df:72:38:e5:6a:11:9a:c4:48:99:45:0b:e9:
         af:0d:a7:a8:44:9f:87:58:98:7a:73:66:ea:b5:6d:8a:37:8d:
         c0:a6:ff:f4:5e:5b:a9:c2:62:5d:aa:cf:5a:b8:ba:32:6b:ea:
         f0:2b:83:51:2d:44:31:0b:cc:19:2f:4f:11:28:f4:5d:a6:c6:
         94:e8:ab:5e:95:4e:e4:51:4e:35:fc:90:4d:b2:1f:c6:90:ec:
         95:06:a2:a2:e2:d8:c3:ee:d6:08:b9:be:a5:d6:26:36:7c:c5:
         56:b1:97:37:b9:21:a3:1e:f3:d2:29:f7:f0:88:3b:e7:93:89:
         7c:a8:b4:9e:78:ef:a1:09:2c:02:d8:1d:a7:71:cd:96:c1:98:
         01:2c:d4:8d:25:a7:04:75:e5:c0:fb:bd:2a:0a:13:32:5c:1f:
         15:de:5d:0b:81:7a:09:96:d3:8f:a6:d0:be:d7:c1:1b:44:65:
         28:12:ca:f5:64:27:81:b6:5c:54:a6:27:1c:f8:73:6e:a1:58:
         a3:a8:92:55
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhHSLRJHOEL7URAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NDc3NDVjMmEtYjM0NC00Y2IxLTgzMGItZWE1MjA0YzZkNTU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcaidw47MV02c0NYq0hX9dZKdPbqT/ALYq/e
i4YjWRLZIzFsLnaA5zzX00mYh+s8Y44FKOywClY652YTCo+jWKeASDVR6oXPgT0M
V9yHkuTLyQIDSDskNPkkwRbIJj2ixNdduTrqc0Pc4a2gM+jKf97oOCYgRspXkowq
GxWDGQt3W/c9CMWwVmFTHMDSU21Gdesy4uchh6BhMkj4Ad+NP+40A7p5E+FQBvPV
eCuo3XbZGBB3SCuWWJzeta/TCOSJL5+aWoNPHU2aywHsR7+WJYc+wbPdt8Qj0NVL
uvyhj0qCK/fvgkmnimCUT5NyY7nyIknzPX4GIp/WI5weHoctBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFORElOh7R92gJTcqo9PMk2pxiPFiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGE0Y2Q4ODctZDUxMC0z
MzBjLTgwZGItZDU1Y2UzY2JjNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiMAw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI/JIYH/FLO9pw3DIR2Y5+0d5NYbSUgZe6OwTphPOawSoqMmDn6x
CYlLZ+6nroX78g8rLFKd9j4yEui933I45WoRmsRImUUL6a8Np6hEn4dYmHpzZuq1
bYo3jcCm//ReW6nCYl2qz1q4ujJr6vArg1EtRDELzBkvTxEo9F2mxpToq16VTuRR
TjX8kE2yH8aQ7JUGoqLi2MPu1gi5vqXWJjZ8xVaxlze5IaMe89Ip9/CIO+eTiXyo
tJ5476EJLALYHadxzZbBmAEs1I0lpwR15cD7vSoKEzJcHxXeXQuBegmW04+m0L7X
wRtEZSgSyvVkJ4G2XFSmJxz4c26hWKOoklU=
-----END CERTIFICATE-----
Generated at Thu Oct 22 21:33:30 2026 by rpki-client