Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/87a3c9bd-9a46-3bfe-a2d1-1472c9ff7cf5.roa
File:                     87a3c9bd-9a46-3bfe-a2d1-1472c9ff7cf5.roa (raw, json)
Hash identifier:          lUskakQ+lG6r2iqqyPtMmRfDwfXp79tuCk/ik2X8DRA=
Subject key identifier:   CC:F8:3C:BD:5D:51:F4:9D:C7:27:6D:DE:5F:8C:88:98:4C:E1:3E:B3
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584EA7981BE47126CF32FC76AC00
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/87a3c9bd-9a46-3bfe-a2d1-1472c9ff7cf5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        2605:b040:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:1b:e4:71:26:cf:32:fc:76:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=13e9178a-a390-4d95-8c3e-ca7b6ffd666f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ec:86:a3:28:c5:d5:23:21:27:88:6e:f6:0d:
                    57:c7:b4:32:82:28:3c:1d:2b:78:c5:53:09:15:b7:
                    53:da:82:f5:c2:00:b0:8f:80:87:84:d4:4a:4d:b6:
                    f3:44:0f:73:f7:b9:76:5f:34:f6:17:6f:44:41:10:
                    7f:5f:7f:24:a0:f6:9a:07:ca:5b:3c:d6:33:a4:67:
                    a6:ad:6c:12:99:73:58:59:0a:7d:12:e0:e4:e3:ba:
                    4c:45:0d:05:a1:eb:13:a8:59:17:20:b5:07:d0:01:
                    3d:58:73:17:19:43:52:e1:f0:9b:35:8c:4d:82:cd:
                    46:51:2e:1d:91:71:39:14:96:00:5f:e6:da:f9:77:
                    88:36:6e:c3:3f:4b:c8:c2:a6:fc:fc:4f:a2:eb:1c:
                    ea:8f:e8:4a:90:1b:e8:96:84:09:ac:de:7f:a7:ce:
                    de:8c:c9:03:d7:47:a4:58:1a:29:a3:b0:50:50:d1:
                    cb:03:38:ca:0c:99:e9:ea:f3:06:95:ab:ae:01:8a:
                    9d:d0:8f:22:67:05:84:62:08:8e:5d:90:84:63:de:
                    f4:58:fa:3d:01:d1:03:96:14:71:b6:a5:9b:6d:68:
                    f5:cb:dd:8f:aa:f8:60:17:da:9f:ed:39:75:ec:4f:
                    40:1c:23:88:87:d8:4e:f3:c6:a0:96:1c:d6:cc:f6:
                    a5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F8:3C:BD:5D:51:F4:9D:C7:27:6D:DE:5F:8C:88:98:4C:E1:3E:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/87a3c9bd-9a46-3bfe-a2d1-1472c9ff7cf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b040:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:9e:b9:7e:1f:1b:1c:99:90:1f:06:f7:b0:fc:4e:b7:f7:cf:
         ac:63:c8:8a:70:8d:58:93:36:1f:48:d3:42:0d:fe:e5:99:58:
         00:3b:b4:5c:01:5b:f3:c7:0d:90:e1:ac:2c:94:50:fe:a0:05:
         69:0f:5c:51:85:63:4d:65:52:cd:c3:62:9e:47:9f:6e:7d:fa:
         15:13:21:95:6b:b6:a3:6e:01:67:20:1e:e2:0d:97:d1:e6:41:
         7a:05:ec:d7:f9:b8:3a:8e:0a:e2:b4:96:2d:59:91:c6:cb:5e:
         16:02:25:cc:df:8a:65:dc:15:ec:46:4d:1e:6e:42:da:85:10:
         26:dd:fa:8d:3e:52:34:e6:62:a2:77:84:92:71:c9:b3:1b:31:
         51:fb:bd:4f:6e:c6:e2:0d:e0:5a:75:c0:85:f5:96:43:55:d3:
         8b:a2:cb:f1:08:fd:df:2c:e7:1a:56:28:71:0a:12:66:f6:bf:
         8c:f9:a6:b6:c1:92:2b:b3:04:0e:5e:56:85:15:dc:c9:00:ec:
         11:a8:fa:04:6c:65:30:66:b4:b0:ba:5e:5e:11:d1:76:03:75:
         c3:54:5a:f1:64:bf:12:f6:17:d5:27:c1:e0:58:42:9c:3f:08:
         20:c7:54:47:dd:f1:3c:1f:70:37:53:fa:54:db:3f:8a:cd:53:
         b2:93:c8:88
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nmBvkcSbPMvx2rAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk
N2M2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MTNlOTE3OGEtYTM5MC00ZDk1LThjM2UtY2E3YjZmZmQ2NjZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneyGoyjF1SMhJ4hu9g1Xx7Qygig8HSt4xVMJ
FbdT2oL1wgCwj4CHhNRKTbbzRA9z97l2XzT2F29EQRB/X38koPaaB8pbPNYzpGem
rWwSmXNYWQp9EuDk47pMRQ0FoesTqFkXILUH0AE9WHMXGUNS4fCbNYxNgs1GUS4d
kXE5FJYAX+ba+XeINm7DP0vIwqb8/E+i6xzqj+hKkBvoloQJrN5/p87ejMkD10ek
WBopo7BQUNHLAzjKDJnp6vMGlauuAYqd0I8iZwWEYgiOXZCEY970WPo9AdEDlhRx
tqWbbWj1y92PqvhgF9qf7Tl17E9AHCOIh9hO88aglhzWzPalxQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMz4PL1dUfSdxydt3l+MiJhM4T6zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj
NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvODdhM2M5YmQtOWE0Ni0z
YmZlLWEyZDEtMTQ3MmM5ZmY3Y2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw
MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz
ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz
MjM2M2Q3YzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWwQAAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH+euX4fGxyZkB8G97D8Trf3z6xjyIpwjViTNh9I00IN/uWZWAA7
tFwBW/PHDZDhrCyUUP6gBWkPXFGFY01lUs3DYp5Hn259+hUTIZVrtqNuAWcgHuIN
l9HmQXoF7Nf5uDqOCuK0li1ZkcbLXhYCJczfimXcFexGTR5uQtqFECbd+o0+UjTm
YqJ3hJJxybMbMVH7vU9uxuIN4Fp1wIX1lkNV04uiy/EI/d8s5xpWKHEKEmb2v4z5
prbBkiuzBA5eVoUV3MkA7BGo+gRsZTBmtLC6Xl4R0XYDdcNUWvFkvxL2F9UnweBY
Qpw/CCDHVEfd8TwfcDdT+lTbP4rNU7KTyIg=
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:33:53 2026 by rpki-client