Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2/a6b47cf5-8d74-3c9a-a3f2-8890662b6c93.roa
File:                     a6b47cf5-8d74-3c9a-a3f2-8890662b6c93.roa (raw, json)
Hash identifier:          zGo67IzsXGtrAN8KrRQdKB1nQOGfYGzsjH9A9wqCYb0=
Subject key identifier:   12:E6:3D:85:3B:1B:D6:DA:B2:AA:51:3A:E9:FA:4D:1C:F7:8F:48:E4
Certificate issuer:       /CN=2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2
Certificate serial:       010D0C9F4328584E11B423A8DBF43C3B88ADF320
Authority key identifier: 16:7D:BA:31:7A:2C:B9:B4:E3:4C:43:9D:6A:02:6C:C3:5E:70:20:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2/a6b47cf5-8d74-3c9a-a3f2-8890662b6c93.roa
Signing time:             Fri 05 Jun 2026 09:00:12 +0000
ROA not before:           Fri 05 Jun 2026 09:00:12 +0000
ROA not after:            Thu 03 Sep 2026 09:00:12 +0000
asID:                     398989
IP address blocks:        2620:90:a00a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:11:b4:23:a8:db:f4:3c:3b:88:ad:f3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2
        Validity
            Not Before: Jun  5 09:00:12 2026 GMT
            Not After : Sep  3 09:00:12 2026 GMT
        Subject: CN=f7e02dcd-7802-44ed-9274-5a1dc5d8745c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a2:49:1e:08:7c:8a:f8:07:f8:c0:72:ce:35:
                    27:9d:52:4b:c5:63:cb:8c:fb:23:43:22:62:a3:5e:
                    76:5a:8d:15:7d:65:b4:38:d5:ec:9a:06:31:c4:30:
                    6f:7d:d1:52:7a:9a:ac:57:4e:c4:f0:f3:0a:6e:9b:
                    93:a3:c0:39:20:8e:3b:a3:8e:c9:6a:8a:d8:b5:7f:
                    8e:d9:d9:a2:fe:fc:fa:ba:43:f6:c8:52:db:43:bf:
                    c4:91:0b:72:77:da:00:3a:31:b5:bd:b3:b4:e8:41:
                    92:92:05:f5:79:df:ab:24:8b:22:97:9a:06:b3:6b:
                    eb:11:1d:aa:73:bf:33:e5:bf:33:ba:b7:a2:83:bf:
                    38:20:27:ff:e5:68:5e:8c:7a:2f:fd:59:5d:7b:52:
                    87:4a:47:65:3d:c4:fd:30:65:06:fa:00:48:09:2e:
                    99:60:8b:db:fc:0b:a9:ba:7e:34:ce:6c:a3:a0:cf:
                    c9:02:99:76:6f:16:b1:f5:45:de:1f:7e:5f:e4:36:
                    ff:08:4c:bf:45:4f:16:17:43:da:38:ba:eb:8c:24:
                    c5:80:3b:7c:3a:ff:7e:b9:a5:7d:6b:1c:8b:89:3d:
                    d9:26:23:e5:e7:3d:03:ec:d5:20:37:54:ae:7f:b5:
                    0c:28:9a:5b:30:a2:04:eb:21:96:57:0b:a4:85:bb:
                    4a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E6:3D:85:3B:1B:D6:DA:B2:AA:51:3A:E9:FA:4D:1C:F7:8F:48:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2/a6b47cf5-8d74-3c9a-a3f2-8890662b6c93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2.crl

            X509v3 Authority Key Identifier:
                keyid:16:7D:BA:31:7A:2C:B9:B4:E3:4C:43:9D:6A:02:6C:C3:5E:70:20:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2ad7b7b0-3c11-4d92-9b2b-7ed4b49b38c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:90:a00a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:77:96:19:27:6d:e2:1e:52:3b:57:38:33:38:14:49:3c:5f:
         62:c3:97:dd:da:92:c1:e7:e7:3c:a6:87:b2:16:39:17:d4:d7:
         e3:19:a5:6b:fe:65:e7:6d:70:36:ca:a0:1e:04:98:1b:5d:d2:
         06:ab:0a:da:c2:58:92:02:7d:17:49:69:24:de:4f:f6:fd:87:
         fd:c8:30:4b:83:9a:fb:72:32:11:43:29:ce:63:ab:d9:87:59:
         48:b4:cd:33:5b:fc:7f:b4:03:39:42:9c:fe:7b:7c:2e:a7:e1:
         b4:87:fa:74:34:01:78:83:15:71:32:36:be:20:3f:2e:b4:74:
         f4:fe:d8:3a:df:25:2b:57:f4:98:2a:ea:bf:18:0c:f3:0f:35:
         b1:97:90:98:d8:74:63:59:5c:db:5a:0e:9c:28:95:35:ea:4a:
         c3:61:e5:f1:33:90:78:74:d2:eb:35:4c:77:eb:31:20:7e:39:
         ab:08:21:01:f7:c4:43:ee:57:49:22:0b:e7:1e:89:bd:c3:1c:
         03:c9:aa:1f:c9:40:76:4e:79:75:ed:96:11:42:5c:b6:de:a8:
         9a:38:73:c2:a7:40:31:87:d9:7c:80:3f:df:52:4f:ba:90:e1:
         45:15:04:88:65:e8:37:33:b2:45:2b:2f:b8:d9:db:34:6d:7f:
         74:89:0f:c1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4RtCOo2/Q8O4it8yAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmFkN2I3YjAtM2MxMS00ZDkyLTliMmItN2VkNGI0OWIz
OGMyMB4XDTI2MDYwNTA5MDAxMloXDTI2MDkwMzA5MDAxMlowLzEtMCsGA1UEAxMk
ZjdlMDJkY2QtNzgwMi00NGVkLTkyNzQtNWExZGM1ZDg3NDVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qJJHgh8ivgH+MByzjUnnVJLxWPLjPsjQyJi
o152Wo0VfWW0ONXsmgYxxDBvfdFSepqsV07E8PMKbpuTo8A5II47o47JaorYtX+O
2dmi/vz6ukP2yFLbQ7/EkQtyd9oAOjG1vbO06EGSkgX1ed+rJIsil5oGs2vrER2q
c78z5b8zureig784ICf/5WhejHov/Vlde1KHSkdlPcT9MGUG+gBICS6ZYIvb/Aup
un40zmyjoM/JApl2bxax9UXeH35f5Db/CEy/RU8WF0PaOLrrjCTFgDt8Ov9+uaV9
axyLiT3ZJiPl5z0D7NUgN1Suf7UMKJpbMKIE6yGWVwukhbtKIwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBLmPYU7G9basqpROun6TRz3j0jkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYWQ3
YjdiMC0zYzExLTRkOTItOWIyYi03ZWQ0YjQ5YjM4YzIvYTZiNDdjZjUtOGQ3NC0z
YzlhLWEzZjItODg5MDY2MmI2YzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMmFkN2I3YjAtM2MxMS00ZDkyLTli
MmItN2VkNGI0OWIzOGMyLzJhZDdiN2IwLTNjMTEtNGQ5Mi05YjJiLTdlZDRiNDli
MzhjMi5jcmwwHwYDVR0jBBgwFoAUFn26MXosubTjTEOdagJsw15wIK4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYWQ3YjdiMC0zYzExLTRkOTItOWIyYi03ZWQ0
YjQ5YjM4YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAkKAK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADJ3lhknbeIeUjtXODM4FEk8X2LDl93aksHn5zymh7IWORfU1+MZ
pWv+ZedtcDbKoB4EmBtd0garCtrCWJICfRdJaSTeT/b9h/3IMEuDmvtyMhFDKc5j
q9mHWUi0zTNb/H+0AzlCnP57fC6n4bSH+nQ0AXiDFXEyNr4gPy60dPT+2DrfJStX
9Jgq6r8YDPMPNbGXkJjYdGNZXNtaDpwolTXqSsNh5fEzkHh00us1THfrMSB+OasI
IQH3xEPuV0kiC+ceib3DHAPJqh/JQHZOeXXtlhFCXLbeqJo4c8KnQDGH2XyAP99S
T7qQ4UUVBIhl6DczskUrL7jZ2zRtf3SJD8E=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:30:41 2026 by rpki-client