Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/885b3a77-fcc4-3ab3-96fb-a4ddce6f0b20.roa
File:                     885b3a77-fcc4-3ab3-96fb-a4ddce6f0b20.roa (raw, json)
Hash identifier:          4pH6G6F2Kn/1z438Dik2xkAuCOxfUkP26tpxhxolJdc=
Subject key identifier:   65:B4:89:AA:25:18:67:9F:EF:37:88:04:2A:0A:BC:5C:B6:9B:31:DC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D571FA8014D693E6EC7725F40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/885b3a77-fcc4-3ab3-96fb-a4ddce6f0b20.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     33905
IP address blocks:        2600:1480:c000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:a8:01:4d:69:3e:6e:c7:72:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=1527c98f-1679-4f32-b594-404429a51392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:65:9a:27:26:c8:9f:2b:10:24:65:0b:54:13:
                    ee:26:99:b8:08:98:c3:12:7d:94:19:2c:18:03:1f:
                    81:7b:79:3f:47:5a:d8:1e:1c:4a:0f:68:e8:31:b4:
                    c8:63:a3:55:99:70:2b:30:1d:8a:bc:42:7c:2c:0c:
                    90:7a:f3:bf:dc:2a:68:75:b2:53:23:db:7f:19:0e:
                    6f:b0:01:3d:e7:46:5b:2d:b4:5e:76:db:f1:35:71:
                    84:b8:2d:48:cb:d4:22:1a:24:05:59:68:74:0e:ad:
                    38:b2:22:a8:49:fa:db:88:57:c2:06:dc:a4:ec:fb:
                    35:ae:64:27:05:a5:95:c5:33:30:70:31:c9:89:7d:
                    ce:95:c8:94:b7:4f:0c:4a:67:7d:4d:01:50:28:3d:
                    03:00:e9:3e:0a:3a:ff:22:95:d0:a1:4b:e0:b4:7e:
                    04:57:4c:8d:9a:5c:aa:d9:f4:17:04:d8:52:be:d1:
                    91:3b:7b:8b:13:40:5a:10:9f:eb:c0:e5:84:4c:ca:
                    d6:c0:51:c9:58:8e:5f:52:ff:20:47:ad:10:bf:78:
                    43:f1:fa:94:26:5c:6b:8f:3b:33:cb:af:53:be:dc:
                    63:8b:e4:38:07:27:f0:55:dc:2a:2e:4a:8b:df:e5:
                    26:23:c8:67:d9:6f:35:fc:9c:53:5a:d4:aa:1a:97:
                    94:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B4:89:AA:25:18:67:9F:EF:37:88:04:2A:0A:BC:5C:B6:9B:31:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/885b3a77-fcc4-3ab3-96fb-a4ddce6f0b20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1480:c000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:98:80:b8:90:37:ad:6f:d4:e3:e4:3e:54:97:cb:b0:df:49:
         21:d0:54:7d:a1:ce:ff:ad:37:b2:29:72:3d:36:4d:ea:4d:01:
         70:df:49:e9:c9:8f:e5:0d:1e:4c:28:1f:a0:0b:95:18:26:70:
         f6:37:14:bd:f4:a3:1e:04:a0:7a:20:b4:72:eb:c4:15:e8:a0:
         a6:21:f6:d7:68:c8:95:77:e7:41:6e:b9:2d:a3:e7:0e:5c:3f:
         f0:73:62:d6:36:c3:d1:d5:e1:85:6d:5d:c5:76:39:de:39:a2:
         2a:00:e5:96:cc:26:d0:41:49:d0:d2:73:57:c8:93:29:84:6b:
         dd:9a:e3:3d:54:36:54:01:3e:06:fa:9f:e5:fc:ad:54:d3:f6:
         e2:6e:0b:f9:c6:35:c9:8f:40:8a:1b:dd:19:89:cb:ca:52:e7:
         14:32:2b:f0:9a:31:02:40:ae:05:88:d9:1a:ff:5b:94:8d:4e:
         bd:87:42:c7:c9:b6:57:2d:71:80:7a:3c:8d:df:fa:4d:01:39:
         bc:49:31:14:fa:c8:42:8a:88:61:5c:c6:b1:ce:34:f3:68:f5:
         54:ec:dd:34:02:af:63:82:63:b9:cd:a0:48:ff:21:dc:8e:02:
         88:1a:79:0b:1c:91:be:22:07:83:ca:f6:53:ee:c3:9f:32:8b:
         26:2d:29:a3
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1XH6gBTWk+bsdyX0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk
MTUyN2M5OGYtMTY3OS00ZjMyLWI1OTQtNDA0NDI5YTUxMzkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mWaJybInysQJGULVBPuJpm4CJjDEn2UGSwY
Ax+Be3k/R1rYHhxKD2joMbTIY6NVmXArMB2KvEJ8LAyQevO/3CpodbJTI9t/GQ5v
sAE950ZbLbRedtvxNXGEuC1Iy9QiGiQFWWh0Dq04siKoSfrbiFfCBtyk7Ps1rmQn
BaWVxTMwcDHJiX3OlciUt08MSmd9TQFQKD0DAOk+Cjr/IpXQoUvgtH4EV0yNmlyq
2fQXBNhSvtGRO3uLE0BaEJ/rwOWETMrWwFHJWI5fUv8gR60Qv3hD8fqUJlxrjzsz
y69Tvtxji+Q4ByfwVdwqLkqL3+UmI8hn2W81/JxTWtSqGpeU9QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFGW0iaolGGef7zeIBCoKvFy2mzHcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODg1YjNhNzctZmNjNC0z
YWIzLTk2ZmItYTRkZGNlNmYwYjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgAUgMAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAgZiAuJA3rW/U4+Q+VJfLsN9JIdBUfaHO/603silyPTZN6k0BcN9J
6cmP5Q0eTCgfoAuVGCZw9jcUvfSjHgSgeiC0cuvEFeigpiH212jIlXfnQW65LaPn
Dlw/8HNi1jbD0dXhhW1dxXY53jmiKgDllswm0EFJ0NJzV8iTKYRr3ZrjPVQ2VAE+
Bvqf5fytVNP24m4L+cY1yY9AihvdGYnLylLnFDIr8JoxAkCuBYjZGv9blI1OvYdC
x8m2Vy1xgHo8jd/6TQE5vEkxFPrIQoqIYVzGsc4082j1VOzdNAKvY4Jjuc2gSP8h
3I4CiBp5CxyRviIHg8r2U+7DnzKLJi0pow==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:53 2026 by rpki-client