Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/3c9f7711-c82f-3967-ba3e-b21a40e29ce6.roa
File:                     3c9f7711-c82f-3967-ba3e-b21a40e29ce6.roa (raw, json)
Hash identifier:          nMah9YD0FgmrSpcIzAtKVo+dFy9kcMCYVz9l+ghtdTA=
Subject key identifier:   7C:C6:DF:20:CA:75:5B:49:E2:B7:85:E7:39:88:69:2B:42:E1:F9:62
Certificate issuer:       /CN=e5333a6e-37dc-4213-b928-ae0341454759
Certificate serial:       010D0C9F4328584E2D9F156BA5A6B149C9238780
Authority key identifier: 39:3C:9B:6B:84:4D:12:F0:64:F5:53:BB:8F:7F:31:00:A1:27:A0:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/3c9f7711-c82f-3967-ba3e-b21a40e29ce6.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     46650
IP address blocks:        2600:1a03::/32 maxlen: 48
                          2600:1a04::/32 maxlen: 48
                          2600:1a05::/32 maxlen: 48
                          2600:1a06::/32 maxlen: 48
                          2600:1a07::/32 maxlen: 48
                          2600:1a08::/32 maxlen: 48
                          2600:1a09::/32 maxlen: 48
                          2600:1a0a::/32 maxlen: 48
                          2600:1a0b::/32 maxlen: 48
                          2600:1a0c::/32 maxlen: 48
                          2600:1a0d::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:15:6b:a5:a6:b1:49:c9:23:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5333a6e-37dc-4213-b928-ae0341454759
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=88ec06cd-19f5-4b42-8ac1-3a8950505f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:30:ed:b0:23:dc:51:d4:5c:9a:b0:25:9d:4d:
                    c3:80:10:5a:0c:2a:01:c5:3f:6b:23:68:1a:ee:6e:
                    51:e5:e6:57:8e:e2:74:93:cc:13:3d:7d:e7:9c:e8:
                    24:b2:fa:a4:bd:41:f7:ab:29:91:e7:d6:f2:09:4c:
                    bb:95:1d:78:7c:03:6a:ba:1a:92:d9:81:c0:87:63:
                    60:71:f2:81:da:95:be:d7:8e:f2:e4:cc:b2:36:47:
                    fd:fe:72:ae:1e:a9:ab:7b:e4:fa:a1:5f:0d:64:84:
                    5c:be:2d:2d:ce:9a:fd:d8:34:63:ef:d9:09:2f:26:
                    ba:83:8e:72:18:4f:51:5c:02:20:dd:0b:5f:35:83:
                    f0:95:38:b6:0a:3e:bc:ab:c3:03:7b:76:79:fb:dc:
                    3d:5f:4a:cb:e8:51:92:ab:2b:df:12:d6:11:92:ee:
                    13:d0:a3:f0:24:87:54:14:6a:17:99:ee:c4:5b:40:
                    b2:64:da:55:80:ef:e4:36:33:8d:e3:ae:2c:b5:26:
                    cb:d7:39:3d:2c:9e:fa:53:41:a3:87:34:77:0b:c7:
                    67:f4:af:ad:31:36:6a:12:09:7f:b0:6c:e2:f5:79:
                    52:68:53:3f:97:eb:e2:14:ba:04:82:c9:9d:95:26:
                    f2:63:c9:ee:69:29:4e:9c:51:12:5c:c6:07:e3:db:
                    36:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C6:DF:20:CA:75:5B:49:E2:B7:85:E7:39:88:69:2B:42:E1:F9:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/3c9f7711-c82f-3967-ba3e-b21a40e29ce6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.crl

            X509v3 Authority Key Identifier:
                keyid:39:3C:9B:6B:84:4D:12:F0:64:F5:53:BB:8F:7F:31:00:A1:27:A0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1a03::-2600:1a0d:ffff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:cb:e7:82:0c:be:a5:a0:ff:d5:f3:30:e1:71:d4:99:5c:76:
         db:fe:8d:73:6a:cd:2e:d7:eb:77:41:fe:1c:06:02:a4:cc:d2:
         ea:4b:aa:c2:1a:96:fb:34:42:a4:69:55:99:db:09:38:5e:0a:
         21:e9:83:5c:10:e8:0f:7f:32:83:3d:e4:10:a3:48:e5:a2:3e:
         03:18:ac:33:7f:b1:83:f8:04:6e:76:bf:f2:e0:af:b5:8a:90:
         d1:a9:85:dd:06:0b:f5:c2:00:09:20:e0:03:1e:cc:4c:17:0f:
         47:fe:a9:d0:39:8c:b2:1f:80:29:d1:b4:4a:ec:e3:3e:38:39:
         76:d9:00:0b:dd:19:f1:c5:6d:5c:3b:7e:b1:63:de:d2:64:2e:
         a1:43:f5:a5:c8:69:95:68:b3:d7:3b:85:e6:1e:ce:f7:92:46:
         21:10:34:f9:7a:a4:38:24:e6:bc:21:f1:a7:6d:e4:33:63:76:
         d2:ce:0d:91:44:8e:a9:2c:00:51:a3:4d:fc:90:f7:80:c2:5b:
         fc:11:f8:4f:ab:89:f9:7b:cf:8f:90:b4:24:e6:1f:91:e1:fc:
         b7:21:91:59:6b:cf:1f:4e:9f:fe:0d:0d:b6:62:31:50:23:b6:
         18:8c:83:65:bc:ef:69:28:14:52:47:58:4c:47:c4:87:fd:b2:
         4e:31:05:e8
-----BEGIN CERTIFICATE-----
MIIGTTCCBTWgAwIBAgIUAQ0Mn0MoWE4tnxVrpaaxSckjh4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTUzMzNhNmUtMzdkYy00MjEzLWI5MjgtYWUwMzQxNDU0
NzU5MB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk
ODhlYzA2Y2QtMTlmNS00YjQyLThhYzEtM2E4OTUwNTA1ZjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTDtsCPcUdRcmrAlnU3DgBBaDCoBxT9rI2ga
7m5R5eZXjuJ0k8wTPX3nnOgksvqkvUH3qymR59byCUy7lR14fANquhqS2YHAh2Ng
cfKB2pW+147y5MyyNkf9/nKuHqmre+T6oV8NZIRcvi0tzpr92DRj79kJLya6g45y
GE9RXAIg3QtfNYPwlTi2Cj68q8MDe3Z5+9w9X0rL6FGSqyvfEtYRku4T0KPwJIdU
FGoXme7EW0CyZNpVgO/kNjON464stSbL1zk9LJ76U0GjhzR3C8dn9K+tMTZqEgl/
sGzi9XlSaFM/l+viFLoEgsmdlSbyY8nuaSlOnFESXMYH49s20QIDAQABo4IDXzCC
A1swHQYDVR0OBBYEFHzG3yDKdVtJ4reF5zmIaStC4fliMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNTMz
M2E2ZS0zN2RjLTQyMTMtYjkyOC1hZTAzNDE0NTQ3NTkvM2M5Zjc3MTEtYzgyZi0z
OTY3LWJhM2UtYjIxYTQwZTI5Y2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTUzMzNhNmUtMzdkYy00MjEzLWI5
MjgtYWUwMzQxNDU0NzU5L2U1MzMzYTZlLTM3ZGMtNDIxMy1iOTI4LWFlMDM0MTQ1
NDc1OS5jcmwwHwYDVR0jBBgwFoAUOTyba4RNEvBk9VO7j38xAKEnoHMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lNTMzM2E2ZS0zN2RjLTQyMTMtYjkyOC1hZTAz
NDE0NTQ3NTkuY2VyMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQMA4DBQAmABoD
AwUBJgAaDDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW
LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G
CSqGSIb3DQEBCwUAA4IBAQAYy+eCDL6loP/V8zDhcdSZXHbb/o1zas0u1+t3Qf4c
BgKkzNLqS6rCGpb7NEKkaVWZ2wk4Xgoh6YNcEOgPfzKDPeQQo0jloj4DGKwzf7GD
+ARudr/y4K+1ipDRqYXdBgv1wgAJIOADHsxMFw9H/qnQOYyyH4Ap0bRK7OM+ODl2
2QAL3RnxxW1cO36xY97SZC6hQ/WlyGmVaLPXO4XmHs73kkYhEDT5eqQ4JOa8IfGn
beQzY3bSzg2RRI6pLABRo038kPeAwlv8EfhPq4n5e8+PkLQk5h+R4fy3IZFZa88f
Tp/+DQ22YjFQI7YYjINlvO9pKBRSR1hMR8SH/bJOMQXo
-----END CERTIFICATE-----
Generated at Tue Jun 16 11:36:23 2026 by rpki-client