Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f022c65f-be6e-3f0c-a4a0-21f0caa5f8f6.roa
File:                     f022c65f-be6e-3f0c-a4a0-21f0caa5f8f6.roa (raw, json)
Hash identifier:          mxk7pm0yANQdzKT+TxBqxpPtZ85N0UyjJhfSIs0RjKA=
Subject key identifier:   DE:77:77:41:B3:A7:CF:2C:4D:2E:18:19:F9:78:DC:BA:02:5A:AF:57
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE150960058B4DA1288FC0140
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f022c65f-be6e-3f0c-a4a0-21f0caa5f8f6.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        2600:1405:8c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:96:00:58:b4:da:12:88:fc:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=99370419-341d-49ad-a148-67eee80560a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5b:a9:6c:35:1b:5a:59:93:e2:e1:b3:44:f6:
                    90:d6:0e:76:f1:42:d0:f5:2c:73:39:c5:bd:81:05:
                    ec:51:77:ac:3e:cc:ba:68:91:93:7a:09:14:0f:60:
                    9b:f9:b3:bc:be:fe:64:53:73:5d:d4:a4:67:00:c6:
                    1b:1c:84:e1:26:37:d3:43:6b:6a:88:3b:38:80:f2:
                    8a:93:6a:a6:40:b7:bd:c1:6d:46:0b:0f:a6:d1:bb:
                    33:df:fb:56:1e:b6:b2:f8:33:b1:22:15:57:5c:aa:
                    14:b7:4e:03:3f:0d:04:8a:5a:4c:4a:b2:47:4b:b5:
                    54:66:77:b4:08:02:22:5e:86:75:d4:f8:3c:06:65:
                    c8:80:8b:48:7a:a4:37:0f:3b:52:86:55:e6:23:12:
                    d9:b2:e2:02:47:60:ee:a1:ad:cc:d1:55:fd:1a:32:
                    bd:f8:78:11:f7:c8:2e:a4:8e:10:c6:eb:4d:09:a0:
                    37:b5:01:bd:cb:da:00:0e:49:53:c7:3a:f4:cc:48:
                    83:de:d5:49:31:08:2b:7e:e5:5c:c5:5c:70:49:60:
                    38:97:f2:b2:fa:8d:09:df:86:4e:b5:2c:2b:df:bc:
                    92:09:f1:3a:dc:44:9d:83:eb:5b:c1:63:87:7b:4c:
                    96:39:64:c8:6f:71:21:e7:c1:8b:65:55:8d:ba:f7:
                    1a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:77:77:41:B3:A7:CF:2C:4D:2E:18:19:F9:78:DC:BA:02:5A:AF:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f022c65f-be6e-3f0c-a4a0-21f0caa5f8f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1405:8c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:95:18:29:70:90:3e:37:1c:51:8c:f0:9e:19:62:1f:e0:0c:
         7b:24:f8:9c:21:9c:16:91:6f:cb:d3:c1:87:1c:39:be:9a:37:
         0a:f1:47:1e:ca:10:8f:88:dc:4e:de:e7:1c:41:58:22:d4:6e:
         4d:ae:e5:cf:9d:bc:15:c0:31:d8:40:3d:73:23:b1:18:a6:0b:
         9f:08:b0:c4:21:bf:a9:7d:e6:3e:1b:1f:24:47:39:4e:14:c1:
         04:84:6a:c2:b1:7c:05:78:ee:82:8f:e2:03:e4:ec:4a:14:56:
         f2:2c:55:b9:f6:0f:59:4b:a5:79:6b:ea:36:b1:c6:6a:ae:2d:
         b3:35:b7:c1:58:09:b3:ab:c3:48:27:c9:ff:1c:c2:e0:de:08:
         11:40:f1:83:36:cb:52:29:58:1a:18:77:cf:3c:e9:0a:4d:a3:
         fa:d4:4f:71:1a:93:9d:2c:0c:c5:69:27:9e:5e:50:a8:82:ad:
         a0:ea:bb:08:08:28:9d:1b:1d:56:24:6d:3d:7f:57:bb:89:b4:
         e2:e8:23:cc:60:c9:7c:e7:4a:46:fa:5e:52:15:5a:91:f0:b8:
         60:77:4b:ed:92:2c:ff:0f:bb:3a:cb:73:b6:14:0a:e6:33:60:
         49:99:43:f5:e5:0e:be:4e:cf:ab:1c:f6:75:2f:36:98:4e:aa:
         69:9f:82:c1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3hUJYAWLTaEoj8AUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk
OTkzNzA0MTktMzQxZC00OWFkLWExNDgtNjdlZWU4MDU2MGE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVupbDUbWlmT4uGzRPaQ1g528ULQ9SxzOcW9
gQXsUXesPsy6aJGTegkUD2Cb+bO8vv5kU3Nd1KRnAMYbHIThJjfTQ2tqiDs4gPKK
k2qmQLe9wW1GCw+m0bsz3/tWHray+DOxIhVXXKoUt04DPw0EilpMSrJHS7VUZne0
CAIiXoZ11Pg8BmXIgItIeqQ3DztShlXmIxLZsuICR2Duoa3M0VX9GjK9+HgR98gu
pI4QxutNCaA3tQG9y9oADklTxzr0zEiD3tVJMQgrfuVcxVxwSWA4l/Ky+o0J34ZO
tSwr37ySCfE63ESdg+tbwWOHe0yWOWTIb3Eh58GLZVWNuvcaowIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN53d0Gzp88sTS4YGfl43LoCWq9XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjAyMmM2NWYtYmU2ZS0z
ZjBjLWE0YTAtMjFmMGNhYTVmOGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBYwA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHeVGClwkD43HFGM8J4ZYh/gDHsk+JwhnBaRb8vTwYccOb6aNwrx
Rx7KEI+I3E7e5xxBWCLUbk2u5c+dvBXAMdhAPXMjsRimC58IsMQhv6l95j4bHyRH
OU4UwQSEasKxfAV47oKP4gPk7EoUVvIsVbn2D1lLpXlr6jaxxmquLbM1t8FYCbOr
w0gnyf8cwuDeCBFA8YM2y1IpWBoYd8886QpNo/rUT3Eak50sDMVpJ55eUKiCraDq
uwgIKJ0bHVYkbT1/V7uJtOLoI8xgyXznSkb6XlIVWpHwuGB3S+2SLP8PuzrLc7YU
CuYzYEmZQ/XlDr5Oz6sc9nUvNphOqmmfgsE=
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:53:33 2026 by rpki-client