Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3e17971-4a23-3318-8bfc-b3a0fdf019e2.roa
File:                     e3e17971-4a23-3318-8bfc-b3a0fdf019e2.roa (raw, json)
Hash identifier:          bYxRa1PyYM2tglHQyjilq8IhQ57GWlHmizPXbO+N9DI=
Subject key identifier:   11:10:5D:FE:7C:AC:04:A0:FF:6B:28:6D:15:10:91:22:A8:2E:5F:D8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DD625BD93056AF4C06CEC8D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3e17971-4a23-3318-8bfc-b3a0fdf019e2.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:140b:8400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:bd:93:05:6a:f4:c0:6c:ec:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=310d17a4-f03b-4a14-95a5-9fa25d00b792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:af:51:41:ec:55:94:f7:48:70:dd:83:4a:48:
                    b8:b6:8e:12:89:dd:e1:0f:bb:7a:d7:82:02:b4:5b:
                    d9:46:66:16:35:ef:2f:df:44:50:00:4b:da:6c:02:
                    12:6b:de:44:b1:a1:e4:2a:2f:75:49:99:31:dd:53:
                    a2:f6:0f:f4:03:af:5b:78:e3:c7:b8:a4:aa:20:5b:
                    d2:37:84:c9:24:8e:2c:03:e4:27:36:a6:42:ac:d4:
                    88:3a:18:62:74:45:09:1b:20:01:a8:3f:bb:3a:64:
                    28:77:b5:02:9f:14:c4:12:a3:2e:53:ac:f8:1d:e9:
                    3a:a4:61:e0:cc:33:31:36:d4:9f:43:22:a6:b6:2a:
                    be:d2:c1:f2:36:95:ff:34:06:5d:7c:cc:5c:57:66:
                    e4:55:68:87:3a:ba:21:af:b9:20:40:34:3d:ca:60:
                    83:7f:10:7a:ff:b0:07:fd:35:cf:f5:f1:29:21:77:
                    77:fc:8e:48:34:cc:2f:59:67:a7:f3:82:18:cd:27:
                    42:73:06:4c:4f:c2:69:42:19:23:3a:2f:8d:94:87:
                    53:9e:2e:84:ec:9e:57:5b:73:bf:1c:d8:22:0e:89:
                    82:26:18:28:c7:ce:bc:db:e7:35:7c:3d:84:41:fc:
                    6f:a2:90:51:50:cc:a7:09:57:77:54:89:35:40:c4:
                    08:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:10:5D:FE:7C:AC:04:A0:FF:6B:28:6D:15:10:91:22:A8:2E:5F:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3e17971-4a23-3318-8bfc-b3a0fdf019e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140b:8400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:0f:73:cd:d8:d8:6b:b4:f5:7f:c3:8b:ce:9d:a6:19:8f:4a:
         90:2d:8f:da:a5:12:31:ce:91:03:5d:37:c4:db:fd:04:2c:26:
         b2:fb:81:d3:19:5d:ac:22:69:4e:9b:63:42:f7:21:3e:32:3d:
         b6:18:d6:35:e2:7a:00:fb:a4:c0:68:35:8e:70:b3:cb:41:69:
         3b:de:53:a2:e2:b9:fd:74:1a:fd:83:19:14:af:0a:19:84:f4:
         f1:b7:84:99:5d:df:ef:e7:25:66:d3:7b:24:46:72:90:26:75:
         a8:a7:f6:8e:74:6b:d1:16:a5:ab:51:81:c5:5a:34:31:15:7d:
         63:86:83:bc:ad:a9:42:4f:58:9a:e9:fd:21:18:f7:a0:4f:0f:
         8e:c9:c8:ba:8b:96:4b:ea:f9:8c:ea:a8:66:1c:1c:db:5b:1c:
         f5:59:20:9e:91:c3:9a:aa:ab:61:20:2d:fa:1d:e7:7b:9a:ca:
         76:4e:f1:9e:e2:51:89:c8:3b:02:1d:5c:4c:64:ac:af:e1:f5:
         d2:00:1c:06:af:57:ca:e0:9f:50:93:5f:ae:47:f7:cf:01:b4:
         44:ed:3b:b8:ac:3c:cc:19:34:b7:cc:39:67:74:76:7b:8b:86:
         ef:ba:3f:92:31:24:54:1d:f4:df:a6:e7:64:fc:28:a0:c4:f1:
         fa:22:55:de
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3WJb2TBWr0wGzsjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk
MzEwZDE3YTQtZjAzYi00YTE0LTk1YTUtOWZhMjVkMDBiNzkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma9RQexVlPdIcN2DSki4to4Sid3hD7t614IC
tFvZRmYWNe8v30RQAEvabAISa95EsaHkKi91SZkx3VOi9g/0A69beOPHuKSqIFvS
N4TJJI4sA+QnNqZCrNSIOhhidEUJGyABqD+7OmQod7UCnxTEEqMuU6z4Hek6pGHg
zDMxNtSfQyKmtiq+0sHyNpX/NAZdfMxcV2bkVWiHOrohr7kgQDQ9ymCDfxB6/7AH
/TXP9fEpIXd3/I5INMwvWWen84IYzSdCcwZMT8JpQhkjOi+NlIdTni6E7J5XW3O/
HNgiDomCJhgox8682+c1fD2EQfxvopBRUMynCVd3VIk1QMQIMQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBEQXf58rASg/2sobRUQkSKoLl/YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTNlMTc5NzEtNGEyMy0z
MzE4LThiZmMtYjNhMGZkZjAxOWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUC4QA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAQPc83Y2Gu09X/Di86dphmPSpAtj9qlEjHOkQNdN8Tb/QQsJrL7
gdMZXawiaU6bY0L3IT4yPbYY1jXiegD7pMBoNY5ws8tBaTveU6Liuf10Gv2DGRSv
ChmE9PG3hJld3+/nJWbTeyRGcpAmdain9o50a9EWpatRgcVaNDEVfWOGg7ytqUJP
WJrp/SEY96BPD47JyLqLlkvq+YzqqGYcHNtbHPVZIJ6Rw5qqq2EgLfod53uaynZO
8Z7iUYnIOwIdXExkrK/h9dIAHAavV8rgn1CTX65H988BtETtO7isPMwZNLfMOWd0
dnuLhu+6P5IxJFQd9N+m52T8KKDE8foiVd4=
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:54:09 2026 by rpki-client