Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/c65d78e1-5941-3bb1-b1a7-ebed1ebe6149.roa
File:                     c65d78e1-5941-3bb1-b1a7-ebed1ebe6149.roa (raw, json)
Hash identifier:          KzQP6kZ+q64of+lXLk5Vb5UtJUFiFWpplCASc4d6xWg=
Subject key identifier:   A3:28:8B:69:91:A6:73:59:BD:07:B7:AD:9A:16:3E:41:7D:69:87:D4
Certificate issuer:       /CN=ef5c1789-96e4-4a63-9ba3-f0ef903cb0de
Certificate serial:       010D0C9F4328584DE9C7273AFF4F3A15A671A100
Authority key identifier: 8E:9B:FD:39:5A:35:D2:4A:95:36:C7:BB:98:35:6C:D3:E7:7A:4B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/c65d78e1-5941-3bb1-b1a7-ebed1ebe6149.roa
Signing time:             Fri 22 May 2026 01:46:11 +0000
ROA not before:           Fri 22 May 2026 01:46:11 +0000
ROA not after:            Thu 20 Aug 2026 01:46:11 +0000
asID:                     14618
IP address blocks:        2604:26a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:c7:27:3a:ff:4f:3a:15:a6:71:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef5c1789-96e4-4a63-9ba3-f0ef903cb0de
        Validity
            Not Before: May 22 01:46:11 2026 GMT
            Not After : Aug 20 01:46:11 2026 GMT
        Subject: CN=82a380a3-fa90-4a65-abe7-fe24d73fcf27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:99:14:82:43:d3:6f:00:cb:0c:24:2d:14:4f:
                    a7:20:ab:5f:17:a3:31:0a:ec:7b:74:39:34:4a:df:
                    7d:ab:87:ff:8b:6c:88:5e:a2:49:e5:c2:9d:aa:37:
                    e2:6a:29:c0:5a:30:63:dc:35:78:71:a6:81:ed:6e:
                    a6:da:6a:16:33:1d:ca:65:a6:59:b9:75:b9:5f:5a:
                    c0:ce:ca:60:fb:f8:95:9b:9a:84:1c:ab:19:1b:4b:
                    ed:d3:60:9a:46:67:05:da:22:44:0a:18:67:17:66:
                    8e:07:ba:1b:e7:c0:d3:e9:cb:b4:8b:16:4e:44:50:
                    df:18:cc:41:c2:f7:d3:b3:be:2a:9d:c7:d3:3a:ff:
                    f7:04:3b:96:b1:65:cf:54:ce:2a:00:a4:55:54:e0:
                    2e:98:ba:ca:28:6d:2f:2f:2f:2d:07:5c:ca:16:50:
                    c4:21:91:48:ba:6a:d7:6f:ae:48:66:9e:20:97:87:
                    d6:ab:39:45:94:2f:3c:16:a0:14:b6:ad:a3:9c:cd:
                    8b:17:76:2a:14:2c:dd:3b:eb:7c:a4:71:80:94:1c:
                    6e:94:56:b2:9d:dc:30:0d:40:47:f4:74:7f:f0:7c:
                    1d:0e:52:da:64:e2:1c:61:bf:9d:a5:0b:c0:e6:a7:
                    b9:4f:ef:87:bb:5c:4d:07:4c:44:2c:99:ab:58:17:
                    4a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:28:8B:69:91:A6:73:59:BD:07:B7:AD:9A:16:3E:41:7D:69:87:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/c65d78e1-5941-3bb1-b1a7-ebed1ebe6149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.crl

            X509v3 Authority Key Identifier:
                keyid:8E:9B:FD:39:5A:35:D2:4A:95:36:C7:BB:98:35:6C:D3:E7:7A:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:26a0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:ca:ae:65:ba:ac:ad:fc:ea:93:54:1d:35:b1:a4:88:fb:d8:
         25:b0:a9:09:1d:73:b9:93:9f:37:e5:c8:fd:45:f1:c8:76:a1:
         45:13:2e:92:0e:ff:1c:a7:54:3f:e6:9f:3e:65:a1:b3:a9:3b:
         d3:2e:fc:73:ba:23:e4:5b:3d:81:02:d6:2b:68:76:c1:0d:85:
         bc:41:12:40:94:48:10:df:16:3c:a6:6b:fc:eb:e3:ee:60:bd:
         2c:c3:27:fb:0e:22:4a:b4:e8:64:c7:63:ec:1e:89:0a:2b:12:
         84:a4:71:c3:2e:12:3b:08:52:82:ce:01:bb:df:76:59:e2:e5:
         aa:28:e9:cb:e8:2f:d7:15:a6:46:ac:fc:2f:b3:e7:33:a5:a8:
         cd:f8:fc:c0:ef:b6:7e:2b:5e:77:0b:47:80:99:5f:d5:59:f9:
         aa:35:e4:cf:88:04:0c:3a:61:da:8c:5d:d7:d5:51:29:8f:46:
         55:5d:e9:94:ea:ae:32:48:f7:d3:89:37:71:9c:ca:d3:3b:c4:
         99:6a:01:21:0b:19:f8:12:25:ba:90:ba:bb:3b:8f:fd:60:62:
         fe:13:2d:44:5b:71:73:45:6f:ed:c6:90:a2:b5:95:1d:95:02:
         a7:98:a4:d8:42:01:a9:bb:d5:ee:3b:bd:bb:2a:2d:5b:67:3f:
         6d:59:f9:76
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3pxyc6/086FaZxoQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY1YzE3ODktOTZlNC00YTYzLTliYTMtZjBlZjkwM2Ni
MGRlMB4XDTI2MDUyMjAxNDYxMVoXDTI2MDgyMDAxNDYxMVowLzEtMCsGA1UEAxMk
ODJhMzgwYTMtZmE5MC00YTY1LWFiZTctZmUyNGQ3M2ZjZjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZkUgkPTbwDLDCQtFE+nIKtfF6MxCux7dDk0
St99q4f/i2yIXqJJ5cKdqjfiainAWjBj3DV4caaB7W6m2moWMx3KZaZZuXW5X1rA
zspg+/iVm5qEHKsZG0vt02CaRmcF2iJEChhnF2aOB7ob58DT6cu0ixZORFDfGMxB
wvfTs74qncfTOv/3BDuWsWXPVM4qAKRVVOAumLrKKG0vLy8tB1zKFlDEIZFIumrX
b65IZp4gl4fWqzlFlC88FqAUtq2jnM2LF3YqFCzdO+t8pHGAlBxulFayndwwDUBH
9HR/8HwdDlLaZOIcYb+dpQvA5qe5T++Hu1xNB0xELJmrWBdKgQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKMoi2mRpnNZvQe3rZoWPkF9aYfUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lZjVj
MTc4OS05NmU0LTRhNjMtOWJhMy1mMGVmOTAzY2IwZGUvYzY1ZDc4ZTEtNTk0MS0z
YmIxLWIxYTctZWJlZDFlYmU2MTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWY1YzE3ODktOTZlNC00YTYzLTli
YTMtZjBlZjkwM2NiMGRlL2VmNWMxNzg5LTk2ZTQtNGE2My05YmEzLWYwZWY5MDNj
YjBkZS5jcmwwHwYDVR0jBBgwFoAUjpv9OVo10kqVNse7mDVs0+d6S2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lZjVjMTc4OS05NmU0LTRhNjMtOWJhMy1mMGVm
OTAzY2IwZGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQmoDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCNyq5luqyt/OqTVB01saSI+9glsKkJHXO5k5835cj9RfHIdqFFEy6S
Dv8cp1Q/5p8+ZaGzqTvTLvxzuiPkWz2BAtYraHbBDYW8QRJAlEgQ3xY8pmv86+Pu
YL0swyf7DiJKtOhkx2PsHokKKxKEpHHDLhI7CFKCzgG733ZZ4uWqKOnL6C/XFaZG
rPwvs+czpajN+PzA77Z+K153C0eAmV/VWfmqNeTPiAQMOmHajF3X1VEpj0ZVXemU
6q4ySPfTiTdxnMrTO8SZagEhCxn4EiW6kLq7O4/9YGL+Ey1EW3FzRW/txpCitZUd
lQKnmKTYQgGpu9XuO727Ki1bZz9tWfl2
-----END CERTIFICATE-----
Generated at Fri May 22 14:18:27 2026 by rpki-client