Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee92ba59-8470-3e43-be85-850178b2d75f.roa
File:                     ee92ba59-8470-3e43-be85-850178b2d75f.roa (raw, json)
Hash identifier:          0vbdBe5rDdzIEjpAXp9M95u941I8aHDR7W8wHxMqWQ4=
Subject key identifier:   D1:F0:6A:33:2F:E5:F5:26:FE:51:DC:74:A7:84:4C:FF:53:0C:63:52
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D65151D1B53EB33AA3202D980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee92ba59-8470-3e43-be85-850178b2d75f.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     12222
IP address blocks:        2001:4878:c158::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:1d:1b:53:eb:33:aa:32:02:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=638babc6-4d58-42e3-9662-13511cbeafd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c0:61:b0:75:e0:53:4b:9b:43:97:d7:42:02:
                    6a:fe:54:00:fe:48:8d:a2:06:7d:ed:c3:ef:ef:63:
                    b1:31:ae:de:a5:0f:26:0b:09:42:02:9f:be:84:6f:
                    2c:d9:44:f8:d9:32:4b:1b:1c:46:02:59:14:94:ba:
                    a8:a4:57:14:3d:70:e6:3f:d1:cd:08:ab:b1:57:86:
                    2a:79:5b:5b:18:f8:43:51:21:e9:f2:79:b0:66:64:
                    08:e3:8b:92:f8:22:5d:df:b2:5e:f1:31:c9:ce:44:
                    fd:40:11:92:21:94:d5:f6:8a:a8:de:b5:ff:a9:b7:
                    69:5b:52:ec:0d:15:c8:21:0f:d8:44:bc:da:51:f2:
                    89:d8:9e:49:40:fd:b4:82:0c:03:b9:40:47:d7:5b:
                    68:53:8e:ea:1f:ac:10:4e:66:cf:2a:c9:0e:b9:9c:
                    91:30:a3:c6:48:c4:01:16:a3:14:dc:58:f9:62:0c:
                    da:e2:b6:c9:95:6b:b4:56:f8:7a:a4:ee:d5:1d:6e:
                    98:ff:44:0e:5e:6e:ec:07:57:fe:ca:c6:19:d7:2c:
                    ca:83:ab:9d:53:80:fc:6c:07:13:14:77:d6:5a:71:
                    de:69:a2:04:1d:ae:98:42:e9:24:5a:ba:bd:5d:b0:
                    e0:74:37:d6:17:8f:a1:d6:fe:c5:17:3c:c7:c9:9a:
                    c5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F0:6A:33:2F:E5:F5:26:FE:51:DC:74:A7:84:4C:FF:53:0C:63:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee92ba59-8470-3e43-be85-850178b2d75f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:c158::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a0:9b:34:b5:61:83:74:44:dd:15:0f:53:8f:af:2b:42:cd:
         51:1b:1a:90:70:06:1e:2a:11:90:7e:27:67:10:31:86:ea:1a:
         d7:99:7f:9c:b6:3c:fa:8b:ed:9a:00:a5:9c:18:61:fb:37:11:
         42:28:85:48:b0:20:90:2c:c1:5e:67:92:5d:f9:d3:6a:e2:99:
         46:a1:00:7d:6f:ca:1c:ce:0d:12:85:ae:4e:4f:e1:d5:3b:35:
         86:1b:38:6f:0b:3a:26:cd:40:89:d3:c5:39:66:62:ec:cb:35:
         c4:d5:82:c9:35:fb:15:fa:1a:7c:b4:7d:05:db:53:52:1a:1c:
         cb:32:1b:0e:f3:41:3a:43:ec:cf:08:19:e3:68:65:64:13:70:
         d0:c9:ce:37:04:91:34:32:e5:5a:7d:99:41:9b:61:61:03:1a:
         5f:73:9b:0e:04:e8:9f:65:21:b7:eb:f2:b8:95:63:b1:d9:d0:
         27:c0:c3:ce:73:85:52:28:e0:5e:4c:34:a9:32:7a:5f:76:72:
         db:79:13:f5:3f:ef:99:cd:8d:2f:c1:d7:1d:24:a8:bd:65:1c:
         20:d8:84:97:f0:dc:00:75:a7:22:47:e3:74:cb:4e:c7:50:68:
         5a:f8:6f:41:91:da:a1:9d:b8:dc:59:d5:a3:19:7d:ba:56:f2:
         f1:2a:0a:20
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1lFR0bU+szqjIC2YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk
NjM4YmFiYzYtNGQ1OC00MmUzLTk2NjItMTM1MTFjYmVhZmQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8BhsHXgU0ubQ5fXQgJq/lQA/kiNogZ97cPv
72OxMa7epQ8mCwlCAp++hG8s2UT42TJLGxxGAlkUlLqopFcUPXDmP9HNCKuxV4Yq
eVtbGPhDUSHp8nmwZmQI44uS+CJd37Je8THJzkT9QBGSIZTV9oqo3rX/qbdpW1Ls
DRXIIQ/YRLzaUfKJ2J5JQP20ggwDuUBH11toU47qH6wQTmbPKskOuZyRMKPGSMQB
FqMU3Fj5Ygza4rbJlWu0Vvh6pO7VHW6Y/0QOXm7sB1f+ysYZ1yzKg6udU4D8bAcT
FHfWWnHeaaIEHa6YQukkWrq9XbDgdDfWF4+h1v7FFzzHyZrFGwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNHwajMv5fUm/lHcdKeETP9TDGNSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWU5MmJhNTktODQ3MC0z
ZTQzLWJlODUtODUwMTc4YjJkNzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeMFY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADGgmzS1YYN0RN0VD1OPrytCzVEbGpBwBh4qEZB+J2cQMYbqGteZ
f5y2PPqL7ZoApZwYYfs3EUIohUiwIJAswV5nkl3502rimUahAH1vyhzODRKFrk5P
4dU7NYYbOG8LOibNQInTxTlmYuzLNcTVgsk1+xX6Gny0fQXbU1IaHMsyGw7zQTpD
7M8IGeNoZWQTcNDJzjcEkTQy5Vp9mUGbYWEDGl9zmw4E6J9lIbfr8riVY7HZ0CfA
w85zhVIo4F5MNKkyel92ctt5E/U/75nNjS/B1x0kqL1lHCDYhJfw3AB1pyJH43TL
TsdQaFr4b0GR2qGduNxZ1aMZfbpW8vEqCiA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:21:47 2026 by rpki-client