Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/6d180ec4-2df6-3be3-8f13-e4cfa0295268.roa
File:                     6d180ec4-2df6-3be3-8f13-e4cfa0295268.roa (raw, json)
Hash identifier:          8tzojNmgYkuUXceWMVRXNTYYyRxXgIcQVyP+1VY9so0=
Subject key identifier:   79:45:04:B1:16:E8:62:91:33:3E:EB:F8:43:5A:59:91:DD:D1:85:3D
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584F374D557D26FBB4819146E780
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/6d180ec4-2df6-3be3-8f13-e4cfa0295268.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     63023
IP address blocks:        2604:86c0:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:55:7d:26:fb:b4:81:91:46:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=b05c29a3-5454-474c-b1ed-51d63dab4d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0d:42:19:13:8f:cd:7d:35:ed:9a:21:4a:6d:
                    47:90:65:62:bd:34:38:63:2b:b7:39:83:38:ad:ae:
                    b2:6a:47:e7:5c:1b:f8:0c:b6:db:34:86:b1:24:f0:
                    4e:28:33:c9:5d:9b:7f:c8:db:65:f7:24:76:68:2e:
                    57:67:53:11:53:e7:4d:eb:5f:dd:37:0d:7b:08:62:
                    f9:26:90:5a:81:f4:74:d1:c3:ce:5b:43:2c:a2:73:
                    1f:d0:9b:b0:54:58:ba:99:e9:34:87:72:e9:26:92:
                    07:df:67:a9:d8:8c:c4:96:b4:14:23:00:27:df:e6:
                    72:17:ec:97:34:a5:e0:50:6f:c2:07:e7:35:63:9e:
                    a8:91:34:36:f3:76:a9:30:50:e6:71:1c:e3:55:84:
                    95:1b:a3:39:d4:70:fd:49:fc:ee:90:91:d6:4f:5a:
                    e1:c1:77:52:de:f9:43:ce:a3:26:51:ec:e8:03:18:
                    3e:c3:93:15:90:88:a0:5d:6d:e6:3c:f3:6e:bd:6e:
                    b9:67:50:88:e9:57:b1:72:f2:42:9b:bd:58:dd:4f:
                    c2:d6:63:a0:b4:09:7c:d9:15:86:be:85:05:e7:4e:
                    a0:c9:d7:bf:42:86:61:c2:4f:3a:6d:3c:12:77:6e:
                    24:bb:48:4f:e6:be:4b:b4:b9:e2:96:53:be:bc:c6:
                    49:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:45:04:B1:16:E8:62:91:33:3E:EB:F8:43:5A:59:91:DD:D1:85:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/6d180ec4-2df6-3be3-8f13-e4cfa0295268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:86c0:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:2c:93:de:36:e0:53:44:aa:0b:d5:11:8d:ac:43:a2:ff:b9:
         97:12:22:1c:c2:f9:4b:11:fd:14:e6:2b:84:7b:87:89:45:3b:
         88:9b:0b:61:4b:af:17:76:a9:86:cf:e6:34:a0:05:e0:df:a2:
         8a:38:81:d6:7e:4e:f3:2b:6a:6c:b0:6b:70:35:7b:2c:f6:9a:
         57:87:a8:cd:04:92:88:5e:f7:81:ff:3c:98:77:65:76:d6:f9:
         5c:7e:54:45:2b:19:31:a0:71:00:9e:a3:b4:42:74:99:fd:1c:
         2b:ee:66:76:25:7c:ad:59:57:6a:d3:b5:f9:6f:5e:4d:81:8d:
         7d:ab:e1:0a:bd:8e:90:30:72:72:fd:57:e9:04:05:14:cc:a7:
         1a:ac:9d:25:cd:1f:0c:59:a4:b7:36:7b:e8:8e:88:cb:2f:11:
         a3:03:ce:21:0b:db:79:2d:fc:b9:19:31:fe:00:83:33:63:77:
         48:27:1d:da:9e:24:c5:db:14:df:2c:4b:da:04:f4:35:e0:60:
         2d:54:33:7a:70:f6:6a:72:b0:2a:4f:ba:e7:c2:45:db:7c:71:
         1a:9e:cd:df:e6:c2:e7:24:54:65:88:d0:37:7e:fd:f2:42:c1:
         7a:35:4f:5b:61:43:60:aa:60:b0:a3:1c:45:16:a0:74:b5:d1:
         75:69:19:92
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE83TVV9Jvu0gZFG54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz
OWUwMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk
YjA1YzI5YTMtNTQ1NC00NzRjLWIxZWQtNTFkNjNkYWI0ZDgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ1CGROPzX017ZohSm1HkGVivTQ4Yyu3OYM4
ra6yakfnXBv4DLbbNIaxJPBOKDPJXZt/yNtl9yR2aC5XZ1MRU+dN61/dNw17CGL5
JpBagfR00cPOW0MsonMf0JuwVFi6mek0h3LpJpIH32ep2IzElrQUIwAn3+ZyF+yX
NKXgUG/CB+c1Y56okTQ283apMFDmcRzjVYSVG6M51HD9SfzukJHWT1rhwXdS3vlD
zqMmUezoAxg+w5MVkIigXW3mPPNuvW65Z1CI6VexcvJCm71Y3U/C1mOgtAl82RWG
voUF506gyde/QoZhwk86bTwSd24ku0hP5r5LtLnillO+vMZJXwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHlFBLEW6GKRMz7r+ENaWZHd0YU9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk
ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNmQxODBlYzQtMmRmNi0z
YmUzLThmMTMtZTRjZmEwMjk1MjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk
ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh
MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5
NDg5YTM5ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgSGwFAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAFiyT3jbgU0SqC9URjaxDov+5lxIiHML5SxH9FOYrhHuHiUU7iJsL
YUuvF3aphs/mNKAF4N+iijiB1n5O8ytqbLBrcDV7LPaaV4eozQSSiF73gf88mHdl
dtb5XH5URSsZMaBxAJ6jtEJ0mf0cK+5mdiV8rVlXatO1+W9eTYGNfavhCr2OkDBy
cv1X6QQFFMynGqydJc0fDFmktzZ76I6Iyy8RowPOIQvbeS38uRkx/gCDM2N3SCcd
2p4kxdsU3yxL2gT0NeBgLVQzenD2anKwKk+658JF23xxGp7N3+bC5yRUZYjQN379
8kLBejVPW2FDYKpgsKMcRRagdLXRdWkZkg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 09:04:15 2026 by rpki-client