Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/bbecce51-faba-30eb-90c0-d5bf895ab35f.roa
File:                     bbecce51-faba-30eb-90c0-d5bf895ab35f.roa (raw, json)
Hash identifier:          oXxQGqMAzqTPdW0C2U99oTW9jgIDH+bLKEi5UOhNcn4=
Subject key identifier:   C8:29:31:FE:BB:10:C3:E9:57:8B:A5:2A:0B:7F:97:AD:CD:54:AF:2F
Certificate issuer:       /CN=f0c5c989-838a-4504-9ec3-d2a149457243
Certificate serial:       010D0C9F4328584E9A3BD927BB6B3005B22B4740
Authority key identifier: AB:26:F7:63:55:B3:02:0B:3B:78:5D:A4:CA:BC:A3:AD:5A:00:19:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/bbecce51-faba-30eb-90c0-d5bf895ab35f.roa
Signing time:             Fri 24 Jul 2026 06:43:35 +0000
ROA not before:           Fri 24 Jul 2026 06:43:35 +0000
ROA not after:            Thu 22 Oct 2026 06:43:35 +0000
asID:                     6979
IP address blocks:        2605:5a80:a001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/f0c5c989-838a-4504-9ec3-d2a149457243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/f0c5c989-838a-4504-9ec3-d2a149457243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:3b:d9:27:bb:6b:30:05:b2:2b:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c5c989-838a-4504-9ec3-d2a149457243
        Validity
            Not Before: Jul 24 06:43:35 2026 GMT
            Not After : Oct 22 06:43:35 2026 GMT
        Subject: CN=99147d7f-5238-4868-b13b-5207cd1f0c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dd:37:ad:e5:f9:1e:35:a7:dc:bf:60:a8:5c:
                    a9:9c:f7:57:e2:97:c2:ab:22:3c:ed:55:cf:78:20:
                    71:28:98:04:42:86:9d:2b:9e:94:2e:23:1e:0e:79:
                    5c:e0:bd:6c:93:15:dc:50:c4:71:23:c8:66:e3:25:
                    60:2a:cd:6f:66:90:e4:47:e4:fa:5e:16:cd:90:4a:
                    36:84:c3:e6:3f:52:fc:cb:76:8a:1b:64:9a:05:e5:
                    22:92:a5:a6:c6:1d:1c:1c:a6:8c:27:62:17:f6:6a:
                    1d:fc:0f:da:05:9b:f7:23:44:93:1e:8e:a4:58:bf:
                    eb:09:fd:df:83:68:55:73:0d:29:d5:18:64:35:ce:
                    73:cb:6a:79:c7:88:0d:9a:1c:4d:bb:4a:96:21:ea:
                    8d:6b:e6:28:1f:5a:99:f9:d0:83:f5:4a:b5:9a:4d:
                    f8:02:a0:ca:9d:38:e4:0f:64:67:37:fc:67:cb:17:
                    18:e0:0a:3e:5b:c8:a7:4b:06:a7:a2:95:81:3f:09:
                    83:39:3f:43:ac:6d:3c:29:39:51:fb:bd:77:b3:58:
                    4b:fc:59:e2:b8:1c:39:e0:d7:8c:74:b4:6c:8f:a8:
                    e4:7f:d5:16:4f:93:7f:c1:46:1e:6d:f7:44:ee:31:
                    2f:f4:2d:25:35:29:21:70:f2:bd:e6:0f:3b:c4:f2:
                    fa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:29:31:FE:BB:10:C3:E9:57:8B:A5:2A:0B:7F:97:AD:CD:54:AF:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/bbecce51-faba-30eb-90c0-d5bf895ab35f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/f0c5c989-838a-4504-9ec3-d2a149457243.crl

            X509v3 Authority Key Identifier:
                keyid:AB:26:F7:63:55:B3:02:0B:3B:78:5D:A4:CA:BC:A3:AD:5A:00:19:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:5a80:a001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:cd:ed:fc:5d:2d:51:f4:3a:0e:ed:31:45:3c:72:25:71:f4:
         a8:22:36:2a:fc:e5:38:94:ff:38:71:21:1e:4e:3c:b4:a0:4c:
         ac:be:e2:85:70:c5:62:9f:4b:1e:f5:ff:94:dd:ca:e4:33:f6:
         19:e7:e7:d8:65:6b:f8:a9:18:a3:8a:88:2e:12:7e:6f:79:f4:
         fd:2f:fb:25:6b:2a:8f:5d:96:73:d7:cf:da:bf:d5:1e:2e:c5:
         f0:2b:70:eb:9e:ae:69:1b:39:ba:e8:85:bb:a2:96:7e:14:6d:
         5d:e5:d8:b6:a2:de:83:a4:2e:92:26:29:b5:23:b2:44:22:b3:
         79:53:c4:fb:e3:47:e8:fb:d0:64:dc:45:d6:5c:e3:17:4c:37:
         b4:5c:62:d4:0d:59:7e:02:19:96:6f:06:57:ec:0d:f3:ce:69:
         63:44:43:40:50:43:02:6c:db:06:6f:93:74:43:39:2f:f7:d7:
         1a:79:df:3d:02:e0:25:b7:34:c9:1e:87:e7:8f:ce:59:dc:48:
         9f:6e:b1:57:c0:c2:96:a8:e0:18:e0:ae:e7:07:2f:ce:ff:38:
         ab:53:4f:4f:44:44:76:a0:2b:be:f9:6c:2a:b7:3e:a6:c9:1e:
         4a:89:2a:e8:3b:07:59:5e:0c:be:f6:70:03:75:6d:3b:5f:7a:
         55:41:50:8a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6aO9knu2swBbIrR0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjBjNWM5ODktODM4YS00NTA0LTllYzMtZDJhMTQ5NDU3
MjQzMB4XDTI2MDcyNDA2NDMzNVoXDTI2MTAyMjA2NDMzNVowLzEtMCsGA1UEAxMk
OTkxNDdkN2YtNTIzOC00ODY4LWIxM2ItNTIwN2NkMWYwYzc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApt03reX5HjWn3L9gqFypnPdX4pfCqyI87VXP
eCBxKJgEQoadK56ULiMeDnlc4L1skxXcUMRxI8hm4yVgKs1vZpDkR+T6XhbNkEo2
hMPmP1L8y3aKG2SaBeUikqWmxh0cHKaMJ2IX9mod/A/aBZv3I0STHo6kWL/rCf3f
g2hVcw0p1RhkNc5zy2p5x4gNmhxNu0qWIeqNa+YoH1qZ+dCD9Uq1mk34AqDKnTjk
D2RnN/xnyxcY4Ao+W8inSwanopWBPwmDOT9DrG08KTlR+713s1hL/FniuBw54NeM
dLRsj6jkf9UWT5N/wUYebfdE7jEv9C0lNSkhcPK95g87xPL6TQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMgpMf67EMPpV4ulKgt/l63NVK8vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mMGM1
Yzk4OS04MzhhLTQ1MDQtOWVjMy1kMmExNDk0NTcyNDMvYmJlY2NlNTEtZmFiYS0z
MGViLTkwYzAtZDViZjg5NWFiMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjBjNWM5ODktODM4YS00NTA0LTll
YzMtZDJhMTQ5NDU3MjQzL2YwYzVjOTg5LTgzOGEtNDUwNC05ZWMzLWQyYTE0OTQ1
NzI0My5jcmwwHwYDVR0jBBgwFoAUqyb3Y1WzAgs7eF2kyryjrVoAGfkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9mMGM1Yzk4OS04MzhhLTQ1MDQtOWVjMy1kMmEx
NDk0NTcyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVagKAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFbN7fxdLVH0Og7tMUU8ciVx9KgiNir85TiU/zhxIR5OPLSgTKy+
4oVwxWKfSx71/5TdyuQz9hnn59hla/ipGKOKiC4Sfm959P0v+yVrKo9dlnPXz9q/
1R4uxfArcOuermkbObrohbuiln4UbV3l2Lai3oOkLpImKbUjskQis3lTxPvjR+j7
0GTcRdZc4xdMN7RcYtQNWX4CGZZvBlfsDfPOaWNEQ0BQQwJs2wZvk3RDOS/31xp5
3z0C4CW3NMkeh+ePzlncSJ9usVfAwpao4BjgrucHL87/OKtTT09ERHagK775bCq3
PqbJHkqJKug7B1leDL72cAN1bTtfelVBUIo=
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:32 2026 by rpki-client