Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8813b7d1-6427-3e60-8c25-215938906886.roa
File:                     8813b7d1-6427-3e60-8c25-215938906886.roa (raw, json)
Hash identifier:          ZyKuQV2t23MezGDYFz4njy2pkudA3hZnYQ+A8dUMbvQ=
Subject key identifier:   E0:E6:D2:37:D2:D8:A4:4E:AC:67:7B:19:6C:90:50:B4:19:01:69:99
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EEA8749AB13EB9DBC731FECC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8813b7d1-6427-3e60-8c25-215938906886.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     32787
IP address blocks:        2606:6c00:109::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:49:ab:13:eb:9d:bc:73:1f:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=e14bc763-0d95-4797-9f5a-bdcd1c4545ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:01:d1:0b:95:2b:72:fa:ea:7c:ed:3f:73:5b:
                    bf:5b:91:6a:16:45:0c:ef:ee:9f:ee:23:7c:cb:d8:
                    b8:59:67:53:10:1d:49:a2:ba:9f:b3:53:a2:56:60:
                    fd:69:f4:19:d0:cd:d4:bd:06:4c:ca:6f:fc:2a:e9:
                    57:29:49:e9:43:8c:3d:19:03:25:f9:55:2f:fb:fd:
                    4e:4d:e6:64:68:ed:65:eb:13:d4:ca:a0:36:1e:fd:
                    13:fb:93:69:2c:22:ac:b1:6f:48:36:a1:d6:7d:4d:
                    9e:6d:94:b7:23:93:7c:12:d5:3c:31:f2:18:42:1f:
                    8d:b5:53:a2:fa:77:c8:04:b5:98:f4:34:74:d3:64:
                    e8:29:8b:93:aa:0d:19:9c:c0:5d:df:b1:f8:aa:10:
                    8f:5e:78:cf:b0:e7:fc:bd:5f:ba:d3:57:55:aa:4e:
                    f3:df:0a:9b:58:ca:a6:ad:30:52:ce:e2:a7:05:7c:
                    e9:2e:3a:b5:c6:e6:82:4c:0d:a7:64:bb:3e:f1:cb:
                    7c:db:3c:55:76:c5:c2:7c:3a:18:0f:04:82:d8:e2:
                    5c:59:48:63:8e:75:a4:3c:24:d5:09:49:34:79:d9:
                    af:05:7b:f3:74:5c:61:26:60:b4:cf:4a:33:85:91:
                    07:71:09:18:f9:bf:08:d7:c6:a5:ab:d0:04:5f:94:
                    d6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E6:D2:37:D2:D8:A4:4E:AC:67:7B:19:6C:90:50:B4:19:01:69:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8813b7d1-6427-3e60-8c25-215938906886.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6c00:109::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:b6:a1:e7:b6:b9:11:98:61:f3:8c:a3:75:bf:3b:5a:ba:eb:
         40:75:3d:58:92:53:cf:a8:aa:40:a0:c6:41:b5:a0:21:92:b0:
         55:5c:44:c8:36:14:a8:f7:65:0f:e2:9a:9a:14:7a:8a:3b:98:
         b2:1e:a6:27:60:4c:8d:f0:ec:03:f6:70:25:f0:30:21:7e:af:
         34:5c:c9:09:08:39:ff:3d:9f:fc:f1:41:f5:d6:5f:c9:a6:57:
         71:96:15:6a:92:12:84:28:11:37:60:02:71:24:9e:ec:1e:37:
         d3:17:b7:32:06:78:60:12:62:79:61:11:04:4c:dc:4e:cf:fa:
         20:4f:74:4b:ff:ea:4e:78:11:ad:ce:37:64:e0:99:f2:98:42:
         98:9f:db:27:00:33:7b:ef:5b:40:93:1d:63:7e:8f:07:d9:dd:
         02:08:4e:1d:a8:4a:cf:3d:e0:11:50:de:e7:bc:0b:0d:b1:f6:
         08:73:4c:cc:46:e3:1b:4b:bd:57:d8:fc:26:6f:ca:36:8d:d6:
         10:2f:cd:5b:a5:60:d7:9f:82:14:95:08:2c:7e:2c:56:8c:19:
         f5:5a:22:1f:8c:08:2c:c5:00:ef:47:3b:be:24:b5:c7:19:0b:
         39:79:7e:bd:08:13:66:b2:81:3f:e4:c6:c6:fe:40:5e:c2:79:
         35:39:8b:6f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7qh0mrE+udvHMf7MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk
ZTE0YmM3NjMtMGQ5NS00Nzk3LTlmNWEtYmRjZDFjNDU0NWVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAHRC5UrcvrqfO0/c1u/W5FqFkUM7+6f7iN8
y9i4WWdTEB1Jorqfs1OiVmD9afQZ0M3UvQZMym/8KulXKUnpQ4w9GQMl+VUv+/1O
TeZkaO1l6xPUyqA2Hv0T+5NpLCKssW9INqHWfU2ebZS3I5N8EtU8MfIYQh+NtVOi
+nfIBLWY9DR002ToKYuTqg0ZnMBd37H4qhCPXnjPsOf8vV+601dVqk7z3wqbWMqm
rTBSzuKnBXzpLjq1xuaCTA2nZLs+8ct82zxVdsXCfDoYDwSC2OJcWUhjjnWkPCTV
CUk0edmvBXvzdFxhJmC0z0ozhZEHcQkY+b8I18alq9AEX5TWPwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFODm0jfS2KROrGd7GWyQULQZAWmZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODgxM2I3ZDEtNjQyNy0z
ZTYwLThjMjUtMjE1OTM4OTA2ODg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZsAAEJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG+2oee2uRGYYfOMo3W/O1q660B1PViSU8+oqkCgxkG1oCGSsFVc
RMg2FKj3ZQ/impoUeoo7mLIepidgTI3w7AP2cCXwMCF+rzRcyQkIOf89n/zxQfXW
X8mmV3GWFWqSEoQoETdgAnEknuweN9MXtzIGeGASYnlhEQRM3E7P+iBPdEv/6k54
Ea3ON2TgmfKYQpif2ycAM3vvW0CTHWN+jwfZ3QIITh2oSs894BFQ3ue8Cw2x9ghz
TMxG4xtLvVfY/CZvyjaN1hAvzVulYNefghSVCCx+LFaMGfVaIh+MCCzFAO9HO74k
tccZCzl5fr0IE2aygT/kxsb+QF7CeTU5i28=
-----END CERTIFICATE-----
Generated at Sat Oct 3 11:05:52 2026 by rpki-client