Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/934278dc-b2c3-3c1f-bb8f-5b7a29e65505.roa
File:                     934278dc-b2c3-3c1f-bb8f-5b7a29e65505.roa (raw, json)
Hash identifier:          +aCyjgearjVtlc3M9SkZiE0fQ1qTcfjO6Sn+3ptBEH4=
Subject key identifier:   BE:56:01:1F:6D:BF:21:24:0E:F8:C5:F5:FD:59:3D:3B:76:FF:6B:B3
Certificate issuer:       /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial:       010D0C9F4328584EA7885C1F13392160F9DB3080
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/934278dc-b2c3-3c1f-bb8f-5b7a29e65505.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14168
IP address blocks:        2605:b040:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:5c:1f:13:39:21:60:f9:db:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5823689f-aeb1-41b8-892a-bcfe739ab400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f7:e4:96:df:62:6c:da:dd:11:01:94:0a:9b:
                    8e:ed:05:75:c8:f2:fa:91:f6:02:1a:d8:8b:1b:19:
                    98:a6:e6:c5:f2:6a:2a:8f:1e:3d:9a:76:48:f7:1d:
                    7a:c4:aa:d6:3a:56:43:5d:8a:7b:7a:a1:bc:15:e4:
                    35:4f:ea:ba:12:c2:58:2d:02:bd:44:1e:59:ef:4f:
                    db:c7:3f:a2:bd:82:26:1b:f1:34:a5:b3:6f:5b:58:
                    2a:90:35:e2:3e:a6:eb:d2:bc:5a:95:48:79:0a:cd:
                    6d:73:c2:9a:6e:19:8c:7e:c7:b1:48:ce:58:19:72:
                    5a:39:a0:5f:d1:72:37:5b:cc:e8:11:9a:ac:0a:8b:
                    34:06:ec:a1:ac:61:5a:29:a9:de:66:92:56:81:c7:
                    e6:4a:95:3d:38:58:2a:24:66:41:56:08:f4:44:d3:
                    68:e7:bd:14:f3:84:62:8b:d7:2b:5f:63:2b:5c:8f:
                    6a:f4:2f:e1:4c:d2:53:b7:98:0d:2e:ab:f0:46:ab:
                    9a:21:00:61:28:fb:de:7b:b8:42:e8:7a:e7:bd:23:
                    35:1e:09:84:62:75:60:29:53:a2:a8:cb:75:75:1b:
                    a0:50:d6:6c:fa:14:cb:b9:05:7c:57:29:d6:5d:a3:
                    61:1a:5f:af:eb:bb:ca:47:52:a2:26:2f:ce:40:ad:
                    3a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:56:01:1F:6D:BF:21:24:0E:F8:C5:F5:FD:59:3D:3B:76:FF:6B:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/934278dc-b2c3-3c1f-bb8f-5b7a29e65505.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl

            X509v3 Authority Key Identifier:
                keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b040:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:f2:91:47:a6:bd:db:83:2d:1d:71:1d:c3:2e:73:79:12:a9:
         8c:47:51:ae:75:24:97:db:72:b3:47:6c:70:be:9f:f7:78:24:
         36:be:74:eb:0d:c6:85:74:4b:79:0a:66:84:db:0e:f6:69:cb:
         c6:71:b9:73:ff:e3:7f:f6:68:d3:bb:11:5a:cf:24:1d:13:72:
         00:e3:d4:0f:8a:1c:4c:31:8d:52:97:63:03:72:c4:cc:1a:c1:
         c0:bd:47:27:1b:70:32:13:1e:c3:fe:64:3b:1a:ba:40:3e:f4:
         b6:3e:6d:81:83:33:a0:3f:73:ec:f6:d2:40:2d:18:0a:a9:0c:
         98:f5:49:e3:57:e4:f3:39:18:22:a6:99:87:f8:e6:c6:57:12:
         e4:9c:86:29:86:e9:fa:80:2e:9a:f6:d2:55:5e:95:29:e4:56:
         51:0c:3e:a2:ec:cc:7a:58:3e:6b:4a:96:88:82:0a:99:7c:61:
         a0:3c:06:4b:6c:e7:21:0f:d5:88:45:fb:8f:fd:4e:5b:d6:9a:
         1c:61:3f:fe:de:aa:b8:b4:81:e3:34:ff:c3:a6:e6:5b:45:60:
         3c:88:7c:3b:64:0a:d1:16:fa:b0:59:5c:e7:75:d7:ca:95:3c:
         2f:f8:1c:a5:52:e1:da:82:40:ab:36:57:8e:67:cc:44:c5:1b:
         96:23:ee:90
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6niFwfEzkhYPnbMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk
N2M2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NTgyMzY4OWYtYWViMS00MWI4LTg5MmEtYmNmZTczOWFiNDAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/fklt9ibNrdEQGUCpuO7QV1yPL6kfYCGtiL
GxmYpubF8moqjx49mnZI9x16xKrWOlZDXYp7eqG8FeQ1T+q6EsJYLQK9RB5Z70/b
xz+ivYImG/E0pbNvW1gqkDXiPqbr0rxalUh5Cs1tc8KabhmMfsexSM5YGXJaOaBf
0XI3W8zoEZqsCos0BuyhrGFaKaneZpJWgcfmSpU9OFgqJGZBVgj0RNNo570U84Ri
i9crX2MrXI9q9C/hTNJTt5gNLqvwRquaIQBhKPvee7hC6HrnvSM1HgmEYnVgKVOi
qMt1dRugUNZs+hTLuQV8VynWXaNhGl+v67vKR1KiJi/OQK06dwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL5WAR9tvyEkDvjF9f1ZPTt2/2uzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj
NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvOTM0Mjc4ZGMtYjJjMy0z
YzFmLWJiOGYtNWI3YTI5ZTY1NTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw
MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz
ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz
MjM2M2Q3YzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWwQAEC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGTykUemvduDLR1xHcMuc3kSqYxHUa51JJfbcrNHbHC+n/d4JDa+
dOsNxoV0S3kKZoTbDvZpy8ZxuXP/43/2aNO7EVrPJB0TcgDj1A+KHEwxjVKXYwNy
xMwawcC9RycbcDITHsP+ZDsaukA+9LY+bYGDM6A/c+z20kAtGAqpDJj1SeNX5PM5
GCKmmYf45sZXEuSchimG6fqALpr20lVelSnkVlEMPqLszHpYPmtKloiCCpl8YaA8
Bkts5yEP1YhF+4/9TlvWmhxhP/7eqri0geM0/8Om5ltFYDyIfDtkCtEW+rBZXOd1
18qVPC/4HKVS4dqCQKs2V45nzETFG5Yj7pA=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:39:56 2026 by rpki-client