Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/5c4960fa-618a-3f5c-8a0c-d3938a3af0d3.roa
File:                     5c4960fa-618a-3f5c-8a0c-d3938a3af0d3.roa (raw, json)
Hash identifier:          HqKk8k5lehPG28D0j9InjHRmMVJCevJMDBB/TKJ2cqM=
Subject key identifier:   A1:8B:A7:54:32:C8:1E:74:8F:52:4E:64:FB:AA:92:70:BD:9E:3B:AF
Certificate issuer:       /CN=b60fd368-cb50-418b-8840-57c8491066b3
Certificate serial:       010D0C9F4328584D703FE5D68C884E76048F2CC4
Authority key identifier: 8E:1C:4F:B6:E2:B8:B8:5D:C8:2D:ED:E4:80:47:C3:86:1B:5C:9D:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/5c4960fa-618a-3f5c-8a0c-d3938a3af0d3.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     398754
IP address blocks:        2605:eec0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/b60fd368-cb50-418b-8840-57c8491066b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/b60fd368-cb50-418b-8840-57c8491066b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:e5:d6:8c:88:4e:76:04:8f:2c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b60fd368-cb50-418b-8840-57c8491066b3
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=4b23a3f5-7b6e-468a-b581-75a72b11e458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1e:80:20:3b:94:86:19:ab:23:e5:73:5c:5d:
                    5c:da:01:34:76:d5:b2:31:ec:a7:45:a2:fb:93:e9:
                    70:98:5c:34:46:3e:d4:90:6c:2b:16:c6:71:f5:4a:
                    5b:96:11:0b:bb:c9:18:92:5c:a1:ae:71:c3:c1:f4:
                    d0:29:7b:bf:eb:09:bc:62:f5:d9:23:d8:ad:cd:8f:
                    5b:8b:21:81:26:8a:d6:97:9d:48:cf:a8:74:34:6f:
                    82:7c:05:5f:d7:e8:f3:5f:e8:15:70:05:4c:16:41:
                    76:c0:ed:cd:31:1a:bd:06:ee:9d:08:dc:85:12:13:
                    08:96:28:eb:01:59:65:b0:29:89:90:f6:11:ab:45:
                    2f:a9:60:47:1d:39:1e:05:98:04:c8:d4:7d:ca:1a:
                    d5:f4:13:81:0f:e9:46:bc:23:e4:c6:44:0a:b4:06:
                    23:7c:e4:d0:06:ae:02:53:7d:33:b0:f6:dc:54:fc:
                    d4:5b:fe:23:f8:61:a3:ca:1a:c1:32:5d:41:a7:44:
                    5a:b4:cd:6b:ee:5c:02:49:12:13:16:dc:23:41:40:
                    5e:4f:3d:0d:4e:50:83:54:20:0e:36:24:8e:c6:4c:
                    d8:39:5b:96:b8:68:91:30:d6:8b:7f:8a:de:0e:fc:
                    6b:6b:66:9a:26:c4:77:43:5c:e7:ce:ea:82:13:a5:
                    3c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8B:A7:54:32:C8:1E:74:8F:52:4E:64:FB:AA:92:70:BD:9E:3B:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/5c4960fa-618a-3f5c-8a0c-d3938a3af0d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/b60fd368-cb50-418b-8840-57c8491066b3.crl

            X509v3 Authority Key Identifier:
                keyid:8E:1C:4F:B6:E2:B8:B8:5D:C8:2D:ED:E4:80:47:C3:86:1B:5C:9D:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:eec0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:83:1b:e1:aa:f6:41:99:c2:50:d9:88:e2:ba:e0:3c:e8:71:
         71:5b:32:d5:bd:6b:b5:0e:ba:3f:b2:07:2c:65:0d:47:64:3a:
         6a:e7:b6:46:5a:a5:a8:97:31:87:a5:46:06:fa:39:4c:d2:ef:
         90:7c:c2:a6:f3:e1:10:78:e3:3b:66:d5:1b:db:9e:4b:2f:eb:
         f4:b8:7a:e4:cb:ee:ce:78:77:96:c5:a5:3c:1d:0e:f5:d1:df:
         b4:02:42:aa:f0:b6:2e:dd:be:03:d8:b0:3d:8a:80:ab:a5:6a:
         22:bc:e3:42:1b:2e:06:e2:03:9a:3c:b9:d1:cb:d8:8f:79:07:
         9c:04:28:b2:5f:d8:64:b3:b4:10:da:e3:70:75:cd:27:94:e8:
         48:4f:16:5b:33:45:0e:49:73:65:42:95:0d:3e:65:52:30:6a:
         e2:7b:63:66:b4:a7:ed:ae:98:72:6b:2c:42:9b:14:21:6a:09:
         84:67:b2:ea:a7:ef:7d:82:4a:9a:6f:b5:f3:c1:b7:85:ab:9e:
         59:76:64:c3:9d:c1:ba:52:dc:70:95:c8:39:4f:5a:0d:25:79:
         5c:da:32:70:ef:6e:69:72:34:0d:2d:de:17:4f:43:76:98:3e:
         ed:54:76:d3:b7:8a:60:a0:56:0d:82:af:b8:73:6b:34:6c:f0:
         de:30:45:76
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1wP+XWjIhOdgSPLMQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjYwZmQzNjgtY2I1MC00MThiLTg4NDAtNTdjODQ5MTA2
NmIzMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk
NGIyM2EzZjUtN2I2ZS00NjhhLWI1ODEtNzVhNzJiMTFlNDU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh6AIDuUhhmrI+VzXF1c2gE0dtWyMeynRaL7
k+lwmFw0Rj7UkGwrFsZx9UpblhELu8kYklyhrnHDwfTQKXu/6wm8YvXZI9itzY9b
iyGBJorWl51Iz6h0NG+CfAVf1+jzX+gVcAVMFkF2wO3NMRq9Bu6dCNyFEhMIlijr
AVllsCmJkPYRq0UvqWBHHTkeBZgEyNR9yhrV9BOBD+lGvCPkxkQKtAYjfOTQBq4C
U30zsPbcVPzUW/4j+GGjyhrBMl1Bp0RatM1r7lwCSRITFtwjQUBeTz0NTlCDVCAO
NiSOxkzYOVuWuGiRMNaLf4reDvxra2aaJsR3Q1znzuqCE6U8BwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKGLp1QyyB50j1JOZPuqknC9njuvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNjBm
ZDM2OC1jYjUwLTQxOGItODg0MC01N2M4NDkxMDY2YjMvNWM0OTYwZmEtNjE4YS0z
ZjVjLThhMGMtZDM5MzhhM2FmMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjYwZmQzNjgtY2I1MC00MThiLTg4
NDAtNTdjODQ5MTA2NmIzL2I2MGZkMzY4LWNiNTAtNDE4Yi04ODQwLTU3Yzg0OTEw
NjZiMy5jcmwwHwYDVR0jBBgwFoAUjhxPtuK4uF3ILe3kgEfDhhtcnYowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iNjBmZDM2OC1jYjUwLTQxOGItODg0MC01N2M4
NDkxMDY2YjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXuwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBIgxvhqvZBmcJQ2YjiuuA86HFxWzLVvWu1Dro/sgcsZQ1HZDpq57ZG
WqWolzGHpUYG+jlM0u+QfMKm8+EQeOM7ZtUb255LL+v0uHrky+7OeHeWxaU8HQ71
0d+0AkKq8LYu3b4D2LA9ioCrpWoivONCGy4G4gOaPLnRy9iPeQecBCiyX9hks7QQ
2uNwdc0nlOhITxZbM0UOSXNlQpUNPmVSMGrie2NmtKftrphyayxCmxQhagmEZ7Lq
p+99gkqab7XzwbeFq55ZdmTDncG6Utxwlcg5T1oNJXlc2jJw725pcjQNLd4XT0N2
mD7tVHbTt4pgoFYNgq+4c2s0bPDeMEV2
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:29:37 2026 by rpki-client