Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/5d880a95-6ca5-3b0f-baeb-46602f238d82.roa
File:                     5d880a95-6ca5-3b0f-baeb-46602f238d82.roa (raw, json)
Hash identifier:          aGOl/7h+gr8egTb9wCahucRE/MhSfgk24mi1odH6fx4=
Subject key identifier:   3C:A3:65:0F:B4:DB:5F:BD:63:E9:63:5B:5B:A7:14:91:E7:AB:D9:2F
Certificate issuer:       /CN=6534ebb8-2490-4f36-a6d0-f7741019122a
Certificate serial:       010D0C9F4328584E210EF621516A94C8F9C41E40
Authority key identifier: 16:04:FA:B3:29:29:39:B0:DD:77:0A:75:3F:C5:DC:BF:38:9A:5F:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/5d880a95-6ca5-3b0f-baeb-46602f238d82.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     27553
IP address blocks:        2604:e000::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:f6:21:51:6a:94:c8:f9:c4:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6534ebb8-2490-4f36-a6d0-f7741019122a
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=c8617ef4-be1e-4840-af57-d381f33f528e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:58:04:27:5b:40:fd:ba:47:25:af:ca:f3:10:
                    91:0d:53:90:e8:0c:e0:be:cb:5e:d9:1f:0b:22:cc:
                    fe:9f:38:83:20:db:6b:8b:6d:2d:56:0b:95:51:3b:
                    b6:53:1c:ad:47:4e:e2:e2:1c:65:05:a8:0d:91:01:
                    30:40:76:e9:97:21:21:55:71:f7:2b:c0:ab:75:f6:
                    1d:6e:5e:36:3f:42:84:6b:9d:98:e0:f3:0e:3f:b6:
                    5c:2b:9d:6e:c8:d5:f0:a2:58:ea:35:b6:94:32:5f:
                    16:7e:92:68:88:19:45:b1:40:d5:3c:07:dc:e0:63:
                    37:ea:a5:9c:25:3a:58:ac:ac:6b:20:74:23:33:0c:
                    40:0d:f6:6a:aa:59:98:45:43:70:02:6e:0b:a1:2e:
                    ff:6b:bc:77:86:cf:82:8f:1b:93:83:40:3d:96:e4:
                    c2:8c:c9:76:e5:1d:0a:ab:49:9f:a9:9b:49:35:df:
                    41:8c:24:9f:c9:cf:7a:b6:02:42:fa:76:da:b5:c7:
                    cb:fe:5e:1f:54:17:c6:2d:b0:09:52:a0:78:a2:de:
                    45:ee:f3:81:75:ef:1d:0e:80:3a:9e:7d:b4:72:9a:
                    6d:28:8d:50:0f:77:3f:33:2c:bf:0e:2a:fb:32:27:
                    57:8b:bb:e1:f2:01:5c:67:ca:3e:24:7f:51:24:3d:
                    e7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A3:65:0F:B4:DB:5F:BD:63:E9:63:5B:5B:A7:14:91:E7:AB:D9:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/5d880a95-6ca5-3b0f-baeb-46602f238d82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.crl

            X509v3 Authority Key Identifier:
                keyid:16:04:FA:B3:29:29:39:B0:DD:77:0A:75:3F:C5:DC:BF:38:9A:5F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:e000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:ac:7a:36:2f:a3:47:a8:98:18:25:71:25:b2:3a:d8:cd:e4:
         ec:d6:19:77:30:58:4b:28:69:48:68:2e:62:4d:f8:54:89:ab:
         88:35:55:a4:af:32:34:59:d3:bb:8c:c9:42:8a:10:28:60:f8:
         54:b9:1c:94:40:aa:e3:c3:12:de:cd:bc:e3:61:dd:2c:0f:5e:
         df:72:ed:b3:70:08:e2:5c:de:ee:0e:1b:3a:0a:60:8b:73:41:
         f7:dc:09:38:4f:0c:3a:a2:fd:6a:e1:9f:c6:9b:cc:39:1c:d6:
         d4:ba:67:cd:9b:ef:e3:5c:81:d8:19:1c:3b:c7:82:70:9b:f8:
         dd:44:58:cb:a9:cb:d3:1c:fd:a0:1c:35:50:25:e5:e9:84:2f:
         11:4f:7c:47:0a:4b:94:fb:23:5c:44:3e:b9:16:32:a6:cc:f3:
         b4:d9:b0:9b:91:5c:70:d8:d7:05:ff:e3:72:99:66:83:ed:b4:
         0b:dd:cc:bb:1f:88:32:39:1f:aa:74:9e:b8:9c:54:52:fe:6a:
         5b:25:e3:1b:c5:2d:36:24:f8:e0:0e:db:a7:fa:d9:11:7e:39:
         ce:2a:b9:c3:51:b8:2a:92:fd:6e:4f:19:8a:ed:54:7e:54:50:
         76:0f:15:7d:ac:15:4e:b9:f3:81:cb:f9:64:bf:9e:9a:58:8f:
         ac:5d:51:48
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4hDvYhUWqUyPnEHkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjUzNGViYjgtMjQ5MC00ZjM2LWE2ZDAtZjc3NDEwMTkx
MjJhMB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk
Yzg2MTdlZjQtYmUxZS00ODQwLWFmNTctZDM4MWYzM2Y1MjhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFgEJ1tA/bpHJa/K8xCRDVOQ6Azgvste2R8L
Isz+nziDINtri20tVguVUTu2UxytR07i4hxlBagNkQEwQHbplyEhVXH3K8CrdfYd
bl42P0KEa52Y4PMOP7ZcK51uyNXwoljqNbaUMl8WfpJoiBlFsUDVPAfc4GM36qWc
JTpYrKxrIHQjMwxADfZqqlmYRUNwAm4LoS7/a7x3hs+CjxuTg0A9luTCjMl25R0K
q0mfqZtJNd9BjCSfyc96tgJC+nbatcfL/l4fVBfGLbAJUqB4ot5F7vOBde8dDoA6
nn20cpptKI1QD3c/Myy/Dir7MidXi7vh8gFcZ8o+JH9RJD3ngwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDyjZQ+021+9Y+ljW1unFJHnq9kvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NTM0
ZWJiOC0yNDkwLTRmMzYtYTZkMC1mNzc0MTAxOTEyMmEvNWQ4ODBhOTUtNmNhNS0z
YjBmLWJhZWItNDY2MDJmMjM4ZDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjUzNGViYjgtMjQ5MC00ZjM2LWE2
ZDAtZjc3NDEwMTkxMjJhLzY1MzRlYmI4LTI0OTAtNGYzNi1hNmQwLWY3NzQxMDE5
MTIyYS5jcmwwHwYDVR0jBBgwFoAUFgT6sykpObDddwp1P8XcvziaX1IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NTM0ZWJiOC0yNDkwLTRmMzYtYTZkMC1mNzc0
MTAxOTEyMmEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTgADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAerHo2L6NHqJgYJXElsjrYzeTs1hl3MFhLKGlIaC5iTfhUiauINVWk
rzI0WdO7jMlCihAoYPhUuRyUQKrjwxLezbzjYd0sD17fcu2zcAjiXN7uDhs6CmCL
c0H33Ak4Tww6ov1q4Z/Gm8w5HNbUumfNm+/jXIHYGRw7x4Jwm/jdRFjLqcvTHP2g
HDVQJeXphC8RT3xHCkuU+yNcRD65FjKmzPO02bCbkVxw2NcF/+NymWaD7bQL3cy7
H4gyOR+qdJ64nFRS/mpbJeMbxS02JPjgDtun+tkRfjnOKrnDUbgqkv1uTxmK7VR+
VFB2DxV9rBVOufOBy/lkv56aWI+sXVFI
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:12:17 2026 by rpki-client