Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/ff60e1a7-4ae9-33e8-a779-6077c56b2734.roa
File:                     ff60e1a7-4ae9-33e8-a779-6077c56b2734.roa (raw, json)
Hash identifier:          I0SBgyVVrOuOYQYg4EzdPqd8ADgn/NThUU4MOvibusQ=
Subject key identifier:   FB:5B:C2:FF:DD:84:B0:16:86:63:BD:B5:32:3B:0E:12:7A:77:D5:D0
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328584E4DB9D84F9F26F12A155F0180
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/ff60e1a7-4ae9-33e8-a779-6077c56b2734.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     212238
IP address blocks:        2607:6b80:2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:d8:4f:9f:26:f1:2a:15:5f:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=0026ae4c-036d-4ee9-a355-5335964b7d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1a:58:a9:d6:de:e7:ec:ae:44:a2:52:9d:66:
                    62:e0:ae:a6:d1:ae:58:1c:96:db:ed:4c:eb:7b:26:
                    2d:9d:fe:cf:b0:07:e2:4a:b7:e6:52:79:c1:50:99:
                    1b:e4:6f:fe:bc:a0:7c:76:5b:25:c8:70:56:53:4c:
                    93:1b:0b:50:d9:3b:71:3f:b7:ce:89:9d:af:a9:37:
                    52:54:80:4c:73:ea:5b:a8:a7:08:b3:53:90:ea:7e:
                    43:4f:e5:4b:c4:11:84:d9:91:7a:7b:bc:23:5c:20:
                    74:48:f0:2e:64:b9:13:50:0c:e2:d4:48:f9:8a:1e:
                    62:78:4a:d5:77:6a:ae:b4:d2:d8:ad:9d:bf:c6:4e:
                    fc:11:c5:e3:1f:66:94:65:30:ad:37:36:f8:04:e7:
                    71:20:02:09:43:4c:8e:b8:5a:86:f7:d3:11:c6:f4:
                    05:dd:dc:3c:67:85:ab:95:fa:0d:31:98:07:7d:24:
                    be:a2:62:64:d3:84:86:85:63:02:82:04:64:db:b2:
                    76:8d:ef:32:e7:1a:10:ba:07:1e:a1:53:11:51:14:
                    b4:33:ce:18:e1:d6:03:8d:24:91:d1:f0:a2:49:d0:
                    1b:e2:6e:b4:04:7d:09:dc:44:2f:5e:3c:92:14:84:
                    92:6c:9e:6d:cd:54:b0:7f:f9:63:92:85:35:97:19:
                    0b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5B:C2:FF:DD:84:B0:16:86:63:BD:B5:32:3B:0E:12:7A:77:D5:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/ff60e1a7-4ae9-33e8-a779-6077c56b2734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b80:2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:c2:93:89:09:c1:1a:76:03:f7:81:66:73:81:48:86:ec:19:
         dc:97:4a:27:9f:70:30:a5:cf:d0:43:67:9b:94:6a:79:bc:25:
         6c:12:12:4d:e4:53:13:76:16:b0:ec:bb:95:64:ba:12:b7:48:
         4f:33:df:7b:b4:78:8a:f1:3d:12:df:68:52:86:77:80:28:9e:
         00:ea:f6:75:23:86:56:00:4c:b9:53:67:85:ee:0a:53:d3:eb:
         da:88:c3:90:30:21:dd:79:a3:9c:5f:ea:00:4b:b6:c2:22:f2:
         37:61:8f:b3:b4:5d:29:69:c5:55:91:e7:16:01:fa:7c:59:2f:
         3c:4d:8c:8a:82:22:30:59:1b:c3:59:cf:6d:0b:2f:c7:b2:bb:
         11:dc:dc:62:ee:c6:ab:6e:8d:eb:bf:da:79:64:f0:a2:de:83:
         21:25:49:b2:ef:57:63:c7:80:5b:5a:a3:53:60:20:42:28:92:
         76:a9:e9:12:39:ad:26:74:20:99:cd:0e:92:72:9a:9b:0d:af:
         56:42:12:75:9c:fa:43:95:c0:e6:92:44:ba:c6:60:f2:5e:73:
         bc:3b:c2:f4:df:e9:ee:17:36:32:65:d9:00:02:72:b7:96:d2:
         46:7b:8a:3a:3f:8c:b3:fe:3d:44:51:a5:2e:f8:4f:b9:ba:3c:
         c5:c8:74:fc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5NudhPnybxKhVfAYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3
ZTFhMB4XDTI2MDYyNjIxMDAxMVoXDTI2MDkyNDIxMDAxMVowLzEtMCsGA1UEAxMk
MDAyNmFlNGMtMDM2ZC00ZWU5LWEzNTUtNTMzNTk2NGI3ZDdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRpYqdbe5+yuRKJSnWZi4K6m0a5YHJbb7Uzr
eyYtnf7PsAfiSrfmUnnBUJkb5G/+vKB8dlslyHBWU0yTGwtQ2TtxP7fOiZ2vqTdS
VIBMc+pbqKcIs1OQ6n5DT+VLxBGE2ZF6e7wjXCB0SPAuZLkTUAzi1Ej5ih5ieErV
d2qutNLYrZ2/xk78EcXjH2aUZTCtNzb4BOdxIAIJQ0yOuFqG99MRxvQF3dw8Z4Wr
lfoNMZgHfSS+omJk04SGhWMCggRk27J2je8y5xoQugceoVMRURS0M84Y4dYDjSSR
0fCiSdAb4m60BH0J3EQvXjySFISSbJ5tzVSwf/ljkoU1lxkLawIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPtbwv/dhLAWhmO9tTI7DhJ6d9XQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh
ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvZmY2MGUxYTctNGFlOS0z
M2U4LWE3NzktNjA3N2M1NmIyNzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl
MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw
N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi
MDYwMDdlMWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdrgAAt
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALLCk4kJwRp2A/eBZnOBSIbsGdyXSiefcDClz9BDZ5uUanm8JWwS
Ek3kUxN2FrDsu5VkuhK3SE8z33u0eIrxPRLfaFKGd4AongDq9nUjhlYATLlTZ4Xu
ClPT69qIw5AwId15o5xf6gBLtsIi8jdhj7O0XSlpxVWR5xYB+nxZLzxNjIqCIjBZ
G8NZz20LL8eyuxHc3GLuxqtujeu/2nlk8KLegyElSbLvV2PHgFtao1NgIEIoknap
6RI5rSZ0IJnNDpJympsNr1ZCEnWc+kOVwOaSRLrGYPJec7w7wvTf6e4XNjJl2QAC
creW0kZ7ijo/jLP+PURRpS74T7m6PMXIdPw=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:16:43 2026 by rpki-client