Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/dad7d956-91ce-309d-a710-c9e480e1eb82.roa
File:                     dad7d956-91ce-309d-a710-c9e480e1eb82.roa (raw, json)
Hash identifier:          MVVhHWeeYZlGny8CZCq8ACQnH2BTqrphcYvtK+O0HpE=
Subject key identifier:   EB:2E:6D:A0:8C:89:6E:90:D7:B3:AF:DB:A4:C2:85:D6:9B:BE:53:60
Certificate issuer:       /CN=5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca
Certificate serial:       010D0C9F4328584DD35B06E80A376206B969E2E0
Authority key identifier: 02:5F:8E:3F:1A:33:F6:22:34:19:90:CE:F1:19:AB:2B:9B:5B:AF:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/dad7d956-91ce-309d-a710-c9e480e1eb82.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     400644
IP address blocks:        2620:aa:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:06:e8:0a:37:62:06:b9:69:e2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=c025835f-fcdd-4da9-aaed-f74efecff654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d4:88:ac:fd:96:54:01:51:29:f0:d4:0e:f8:
                    70:ce:ff:a0:d7:8c:c3:e3:27:10:be:fe:ce:47:13:
                    78:dd:a0:73:a7:42:3c:00:c1:9f:a7:b9:09:d1:af:
                    60:4f:20:3a:6f:4f:0a:d1:b6:a1:6b:6a:d5:21:e7:
                    e2:33:4b:0b:21:9b:db:fe:cc:78:1b:66:ab:b4:a9:
                    40:c1:76:1f:6e:be:ed:3b:de:76:e7:0f:b7:ab:fa:
                    92:ed:e8:66:96:b1:1e:eb:70:15:ca:55:65:3e:27:
                    15:3e:33:00:00:8a:c0:db:7c:05:34:f2:05:26:a7:
                    82:2b:13:3a:0b:1c:45:ac:2e:06:95:03:d3:06:ba:
                    13:07:7a:ce:9f:63:a9:39:bc:73:11:df:bf:3e:a1:
                    fd:c4:67:1c:b3:ee:f9:ca:3f:47:2c:fd:2b:12:d8:
                    8b:46:a2:4d:f5:47:f9:5f:47:97:a9:1d:e0:97:8e:
                    1c:c7:49:88:05:57:90:d8:c6:66:3d:73:35:c3:af:
                    3a:05:4f:3a:f1:7f:7a:a8:5f:1a:49:aa:70:92:c3:
                    8f:3a:6f:42:3e:d9:73:e3:bb:75:cd:08:1d:d2:b9:
                    a5:04:83:f1:d9:43:e6:ba:e2:2d:cb:e9:09:d5:8c:
                    3f:97:a9:ab:73:49:cd:e5:2a:90:a4:b3:cd:0b:ab:
                    64:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2E:6D:A0:8C:89:6E:90:D7:B3:AF:DB:A4:C2:85:D6:9B:BE:53:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/dad7d956-91ce-309d-a710-c9e480e1eb82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.crl

            X509v3 Authority Key Identifier:
                keyid:02:5F:8E:3F:1A:33:F6:22:34:19:90:CE:F1:19:AB:2B:9B:5B:AF:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:aa:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:b8:5d:13:24:47:97:e1:b6:f6:53:8b:b8:42:ab:01:c7:12:
         3b:ed:a7:55:7f:69:4c:28:08:14:ce:fa:9e:c8:e7:a3:e8:4f:
         5c:a2:c3:a0:0f:3f:83:7c:bc:d8:83:f0:e3:20:4b:62:0c:50:
         1e:55:31:67:64:34:0c:88:52:0e:37:31:fc:b3:d6:6f:53:00:
         32:7b:d0:df:f6:db:c6:8d:be:08:49:a6:59:3c:06:01:b5:f5:
         78:43:4f:5f:c5:98:1c:ff:7f:c3:43:a5:5b:cb:31:ae:2b:3b:
         9b:c0:18:82:fa:c3:86:e3:d6:05:d3:0b:3a:ba:ae:1a:3f:42:
         fc:d6:d4:4e:08:54:1c:d4:e1:80:34:d3:67:87:e1:92:c0:6a:
         b4:9c:b7:ae:9c:bf:3a:ee:e0:a7:97:ea:5b:42:0e:04:9e:a6:
         82:89:fa:e2:62:7c:c3:f8:77:b3:44:5b:e2:9f:4e:33:aa:df:
         82:65:65:8c:ca:14:a9:59:c2:16:35:ae:73:b4:12:14:6f:bd:
         ac:3a:84:e2:13:b2:1d:d2:a0:f5:6d:e0:7b:cf:26:5e:a6:07:
         d3:14:a8:c2:73:7f:52:cc:64:e5:07:bb:c1:07:d1:cb:8e:96:
         be:cd:7e:eb:02:46:16:f4:42:a9:ce:f1:aa:71:15:1b:14:c8:
         9e:79:08:b1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3TWwboCjdiBrlp4uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWJhMWFhOGEtYmFkNi00ZTA5LWE0YzYtYWM0MjRmMDRm
NWNhMB4XDTI2MDUxNDAxMDAyNVoXDTI2MDgxMjAxMDAyNVowLzEtMCsGA1UEAxMk
YzAyNTgzNWYtZmNkZC00ZGE5LWFhZWQtZjc0ZWZlY2ZmNjU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNSIrP2WVAFRKfDUDvhwzv+g14zD4ycQvv7O
RxN43aBzp0I8AMGfp7kJ0a9gTyA6b08K0baha2rVIefiM0sLIZvb/sx4G2artKlA
wXYfbr7tO9525w+3q/qS7ehmlrEe63AVylVlPicVPjMAAIrA23wFNPIFJqeCKxM6
CxxFrC4GlQPTBroTB3rOn2OpObxzEd+/PqH9xGccs+75yj9HLP0rEtiLRqJN9Uf5
X0eXqR3gl44cx0mIBVeQ2MZmPXM1w686BU868X96qF8aSapwksOPOm9CPtlz47t1
zQgd0rmlBIPx2UPmuuIty+kJ1Yw/l6mrc0nN5SqQpLPNC6tkGQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOsubaCMiW6Q17Ov26TChdabvlNgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YmEx
YWE4YS1iYWQ2LTRlMDktYTRjNi1hYzQyNGYwNGY1Y2EvZGFkN2Q5NTYtOTFjZS0z
MDlkLWE3MTAtYzllNDgwZTFlYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWJhMWFhOGEtYmFkNi00ZTA5LWE0
YzYtYWM0MjRmMDRmNWNhLzViYTFhYThhLWJhZDYtNGUwOS1hNGM2LWFjNDI0ZjA0
ZjVjYS5jcmwwHwYDVR0jBBgwFoAUAl+OPxoz9iI0GZDO8RmrK5tbr3kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81YmExYWE4YS1iYWQ2LTRlMDktYTRjNi1hYzQy
NGYwNGY1Y2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAqqAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADq4XRMkR5fhtvZTi7hCqwHHEjvtp1V/aUwoCBTO+p7I56PoT1yi
w6APP4N8vNiD8OMgS2IMUB5VMWdkNAyIUg43Mfyz1m9TADJ70N/228aNvghJplk8
BgG19XhDT1/FmBz/f8NDpVvLMa4rO5vAGIL6w4bj1gXTCzq6rho/QvzW1E4IVBzU
4YA002eH4ZLAarSct66cvzru4KeX6ltCDgSepoKJ+uJifMP4d7NEW+KfTjOq34Jl
ZYzKFKlZwhY1rnO0EhRvvaw6hOITsh3SoPVt4HvPJl6mB9MUqMJzf1LMZOUHu8EH
0cuOlr7NfusCRhb0QqnO8apxFRsUyJ55CLE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:57:33 2026 by rpki-client