Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/66059507-adf2-3390-af86-e4bb17ea4aa3.roa
File:                     66059507-adf2-3390-af86-e4bb17ea4aa3.roa (raw, json)
Hash identifier:          xbLPBLFPv/hv0p98YA+PIrlIlYMMRxaYk9vvA/Kf6Oo=
Subject key identifier:   84:86:8B:C0:C6:58:F8:91:46:71:46:91:79:71:11:04:81:EF:A6:D7
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584E18AEF1A13BF7F9A075D1FC00
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/66059507-adf2-3390-af86-e4bb17ea4aa3.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     396955
IP address blocks:        2001:468:f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:f1:a1:3b:f7:f9:a0:75:d1:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=5e30e2f1-61be-43b7-a265-1e17f1692f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ae:a4:01:10:3b:e2:8a:31:12:c4:b7:57:a5:
                    ce:ba:d2:4a:5a:fc:d8:5c:20:f5:97:2f:bd:43:e4:
                    ad:f0:b6:b5:37:f5:3e:1e:d5:6b:c6:3d:a7:fe:e8:
                    0f:c6:01:99:6d:f4:90:f4:43:20:68:ae:52:cc:85:
                    e5:cc:de:bd:25:1a:4a:8d:09:b7:12:db:98:12:1e:
                    7e:63:1e:4b:fe:c9:62:7f:84:77:9d:6b:02:4c:45:
                    b8:3a:57:b8:a2:6a:98:ea:9a:56:4c:ff:2e:ad:95:
                    ac:62:45:cd:e5:c2:53:53:b3:02:ec:1a:e5:1c:4d:
                    7e:7a:ba:89:ec:90:ac:cf:41:36:b6:ff:69:44:6a:
                    9f:73:c3:3d:87:7d:00:07:3c:0b:ec:89:60:28:79:
                    6d:ff:b5:da:07:46:47:1b:a8:e4:9b:f3:33:e3:6b:
                    87:7e:3b:e3:3b:ab:67:8c:04:7c:d4:fb:73:89:f5:
                    8b:91:f1:d1:2a:b9:0c:54:2d:e3:17:a6:fa:11:0a:
                    fe:37:e8:8f:6b:56:e4:b8:13:97:2c:af:6d:bd:a2:
                    72:2f:83:6b:20:8d:ba:42:3f:c6:d3:7f:8b:d1:9f:
                    74:b3:bd:2e:a5:93:eb:c0:05:b1:c3:36:b6:a1:55:
                    0a:02:92:d7:de:03:04:4a:6e:17:d0:c1:e1:a1:a5:
                    e7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:86:8B:C0:C6:58:F8:91:46:71:46:91:79:71:11:04:81:EF:A6:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/66059507-adf2-3390-af86-e4bb17ea4aa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:7a:73:d0:09:87:58:82:84:b9:c9:6a:54:1a:9e:4c:5b:51:
         7e:e8:4e:62:e5:b5:60:a1:f5:2c:b6:6d:79:7d:d4:ee:f8:4a:
         58:43:9b:a6:67:6a:4e:bf:a1:9f:80:12:28:e3:63:03:39:ad:
         24:1f:c7:e6:96:82:a4:ee:86:f6:77:7e:84:96:e6:51:6f:ba:
         ca:1d:8d:f2:23:00:bc:02:45:4a:d9:cd:e6:b4:7a:74:8b:29:
         ed:5f:bc:0c:8e:61:92:5a:a7:43:12:48:5b:55:ea:aa:32:1c:
         8e:0c:6a:d3:cf:9c:90:67:2d:0a:3a:89:b6:85:38:26:32:aa:
         b5:c8:a8:4a:62:04:9a:ea:b4:5d:59:a7:9f:aa:01:c1:01:c9:
         9b:62:35:c0:87:ce:fb:4f:11:5e:ec:da:af:1c:76:12:d9:ef:
         d2:32:e1:88:03:b6:2f:d0:29:89:b3:48:7a:63:22:04:60:92:
         ea:44:04:73:37:20:10:c4:28:87:6b:3c:ef:0c:b4:61:84:27:
         06:fb:2f:59:ae:8c:60:60:68:1a:54:e4:a1:73:cb:88:ea:81:
         ad:01:87:65:41:23:d6:55:ef:87:26:fb:45:9b:21:f5:c5:5b:
         56:9a:79:4d:cc:ed:18:9c:39:98:f8:f1:4a:9b:db:c1:f4:52:
         b1:59:e6:b7
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE4YrvGhO/f5oHXR/AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk
NWUzMGUyZjEtNjFiZS00M2I3LWEyNjUtMWUxN2YxNjkyZjM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK6kARA74ooxEsS3V6XOutJKWvzYXCD1ly+9
Q+St8La1N/U+HtVrxj2n/ugPxgGZbfSQ9EMgaK5SzIXlzN69JRpKjQm3EtuYEh5+
Yx5L/slif4R3nWsCTEW4Ole4omqY6ppWTP8urZWsYkXN5cJTU7MC7BrlHE1+erqJ
7JCsz0E2tv9pRGqfc8M9h30ABzwL7IlgKHlt/7XaB0ZHG6jkm/Mz42uHfjvjO6tn
jAR81PtzifWLkfHRKrkMVC3jF6b6EQr+N+iPa1bkuBOXLK9tvaJyL4NrII26Qj/G
03+L0Z90s70upZPrwAWxwza2oVUKApLX3gMESm4X0MHhoaXnpwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFISGi8DGWPiRRnFGkXlxEQSB76bXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvNjYwNTk1MDctYWRmMi0z
MzkwLWFmODYtZTRiYjE3ZWE0YWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAIAEEaA8w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAD3pz0AmHWIKEuclqVBqeTFtRfuhOYuW1YKH1LLZteX3U7vhKWEOb
pmdqTr+hn4ASKONjAzmtJB/H5paCpO6G9nd+hJbmUW+6yh2N8iMAvAJFStnN5rR6
dIsp7V+8DI5hklqnQxJIW1XqqjIcjgxq08+ckGctCjqJtoU4JjKqtcioSmIEmuq0
XVmnn6oBwQHJm2I1wIfO+08RXuzarxx2Etnv0jLhiAO2L9ApibNIemMiBGCS6kQE
czcgEMQoh2s87wy0YYQnBvsvWa6MYGBoGlTkoXPLiOqBrQGHZUEj1lXvhyb7RZsh
9cVbVpp5TcztGJw5mPjxSpvbwfRSsVnmtw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:44:47 2026 by rpki-client