Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0413df96-52bd-3769-b4ef-c993dac477ab.roa
File:                     0413df96-52bd-3769-b4ef-c993dac477ab.roa (raw, json)
Hash identifier:          Gx1NA54n34DrxM9J5MZVtx8MZq7PVs3r5QzjB3iyg3c=
Subject key identifier:   01:03:5C:E4:BE:CB:08:A1:56:C7:BD:AB:F1:D6:97:01:21:35:9E:EC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA78853FA221E0F6495148AE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0413df96-52bd-3769-b4ef-c993dac477ab.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        2600:1415:4c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:53:fa:22:1e:0f:64:95:14:8a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9e963d98-371e-4ac0-92c0-75bd75e19ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c4:57:e3:eb:77:5b:5c:fd:31:c7:51:33:16:
                    64:e3:58:e2:95:75:65:b8:b6:60:0c:67:a4:4c:23:
                    49:14:be:13:fb:0c:47:53:fd:6d:50:06:18:5e:4e:
                    0b:bd:ae:85:f3:c8:95:45:56:81:c1:c0:20:d3:f9:
                    96:b9:af:e5:a7:45:49:4d:cc:0f:1f:5e:a3:92:5e:
                    e1:db:e2:63:74:3c:e7:91:d0:d1:f3:c9:ab:2c:0b:
                    ae:cd:e2:76:4d:e3:b6:98:cb:83:8f:d3:68:02:00:
                    b5:3d:7f:10:7b:be:5c:40:55:8e:a2:39:8d:5a:a3:
                    62:2e:7c:c3:bd:c8:4b:e4:d6:0e:cb:e4:e9:69:b2:
                    30:06:b9:be:32:bd:c9:fa:ef:f7:f1:e6:da:80:94:
                    5b:0d:f2:59:79:58:fb:2b:68:89:8b:80:ad:71:f0:
                    8b:93:9f:2f:86:57:2b:b0:7b:c1:88:dc:1c:90:39:
                    bd:aa:8b:a2:a6:b6:c3:3c:51:80:8b:75:3b:49:b0:
                    f3:b5:1e:36:a1:1f:b5:45:55:fe:79:35:8a:8f:3f:
                    bf:11:65:0f:d8:8a:dc:b1:be:7d:7c:79:b4:bf:18:
                    7e:f5:e6:f5:06:59:96:5f:9a:78:22:4c:0b:40:ca:
                    3c:1b:6f:61:7b:f5:ea:b1:8e:39:3c:a0:6d:5e:43:
                    78:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:03:5C:E4:BE:CB:08:A1:56:C7:BD:AB:F1:D6:97:01:21:35:9E:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0413df96-52bd-3769-b4ef-c993dac477ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1415:4c00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a5:f4:90:6d:6a:3e:2a:72:80:46:de:30:14:67:4c:48:dc:
         70:15:cd:7a:c6:c7:03:e2:0a:7a:96:de:bf:82:42:46:d0:d7:
         cd:27:dd:a9:67:e8:ed:16:43:a6:90:1a:86:6a:cd:cb:69:19:
         63:86:5f:7a:f4:7e:64:d2:ca:bc:9e:32:dd:43:f5:1c:62:8c:
         07:fd:4f:e1:c8:2e:0e:ac:41:94:21:89:21:07:c9:c3:e8:bd:
         e9:5c:f2:e4:b0:c7:64:66:c6:86:5c:5e:87:ab:b0:4b:02:32:
         0d:fc:1f:9a:0d:ac:5c:bd:ef:73:49:40:5c:fc:36:af:f0:f5:
         e4:5e:0f:0f:50:af:df:ee:a4:ec:ee:e9:df:24:9e:6d:43:a0:
         7d:18:ab:3b:58:c3:df:6e:20:5a:9e:79:4d:50:84:94:e8:5b:
         0c:d1:c3:c0:68:7d:97:1f:8c:d3:2b:47:fb:79:a9:d5:d4:63:
         93:98:4c:22:db:52:95:1b:c3:bf:e4:d9:27:dc:ca:3f:f2:c0:
         27:4c:15:e6:5f:6b:a7:9b:a8:b1:66:40:8f:7f:0e:01:c6:73:
         04:5a:fb:fc:25:34:6c:04:e8:ce:ee:ba:cb:cc:53:ae:a6:11:
         f3:0c:64:df:eb:43:65:49:a1:7e:2e:d6:a8:de:e9:06:b9:d2:
         d9:4d:a3:42
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6niFP6Ih4PZJUUiuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OWU5NjNkOTgtMzcxZS00YWMwLTkyYzAtNzViZDc1ZTE5YWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sRX4+t3W1z9McdRMxZk41jilXVluLZgDGek
TCNJFL4T+wxHU/1tUAYYXk4Lva6F88iVRVaBwcAg0/mWua/lp0VJTcwPH16jkl7h
2+JjdDznkdDR88mrLAuuzeJ2TeO2mMuDj9NoAgC1PX8Qe75cQFWOojmNWqNiLnzD
vchL5NYOy+TpabIwBrm+Mr3J+u/38ebagJRbDfJZeVj7K2iJi4CtcfCLk58vhlcr
sHvBiNwckDm9qouiprbDPFGAi3U7SbDztR42oR+1RVX+eTWKjz+/EWUP2Ircsb59
fHm0vxh+9eb1BlmWX5p4IkwLQMo8G29he/XqsY45PKBtXkN4CwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAEDXOS+ywihVse9q/HWlwEhNZ7sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDQxM2RmOTYtNTJiZC0z
NzY5LWI0ZWYtYzk5M2RhYzQ3N2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUFUwA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIyl9JBtaj4qcoBG3jAUZ0xI3HAVzXrGxwPiCnqW3r+CQkbQ180n
3aln6O0WQ6aQGoZqzctpGWOGX3r0fmTSyryeMt1D9RxijAf9T+HILg6sQZQhiSEH
ycPovelc8uSwx2RmxoZcXoersEsCMg38H5oNrFy973NJQFz8Nq/w9eReDw9Qr9/u
pOzu6d8knm1DoH0YqztYw99uIFqeeU1QhJToWwzRw8BofZcfjNMrR/t5qdXUY5OY
TCLbUpUbw7/k2Sfcyj/ywCdMFeZfa6ebqLFmQI9/DgHGcwRa+/wlNGwE6M7uusvM
U66mEfMMZN/rQ2VJoX4u1qje6Qa50tlNo0I=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:13:00 2026 by rpki-client