Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a2430a62-2dd8-35a1-a6cf-0c5a0cd5299d.roa
File:                     a2430a62-2dd8-35a1-a6cf-0c5a0cd5299d.roa (raw, json)
Hash identifier:          bpguvp1apR7PGmBxweuvR+sAGdviA5A3JxQZ/aLpb20=
Subject key identifier:   39:BD:5D:A2:CF:AB:17:8C:1E:A7:7A:D9:91:A8:35:39:0D:66:13:95
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584DA6B026916B023D8F71AAAD00
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a2430a62-2dd8-35a1-a6cf-0c5a0cd5299d.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     4922
IP address blocks:        2606:a800::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:26:91:6b:02:3d:8f:71:aa:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=2c7bd8df-9a4b-459a-82cd-164db71aaf24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d4:62:da:00:3b:55:24:70:b2:5e:dc:f0:86:
                    8a:62:b2:90:35:0b:00:b9:94:0f:0f:42:8a:9b:86:
                    12:e7:e4:47:5b:2e:30:6b:07:8c:27:06:d5:dd:59:
                    81:f2:0c:74:67:0f:7b:9d:15:95:d7:1b:0a:bc:4c:
                    a2:94:da:6c:2f:d6:d2:07:39:a9:a4:5e:19:54:3f:
                    dd:73:7c:7f:c1:03:96:44:56:3c:d0:33:cc:13:d7:
                    7f:99:9b:a3:e0:4f:21:49:07:3d:dd:51:8c:fe:3a:
                    62:49:f3:5e:c2:3c:a4:c6:ae:69:5e:15:d8:64:32:
                    c8:9c:75:9a:f6:43:68:18:fb:b5:63:05:4c:a4:09:
                    56:59:f4:4b:b7:c0:60:3f:1e:6d:67:09:96:cc:ee:
                    c5:33:e9:9f:51:47:60:a8:c7:b2:8e:3d:6a:9e:46:
                    75:d3:1e:68:f8:de:a4:53:fd:9a:a3:0e:c8:18:46:
                    c7:dc:d4:53:0b:54:4c:75:c1:53:36:f9:87:cd:43:
                    96:75:1d:12:e2:bf:43:39:1e:e0:ba:fd:c9:62:cd:
                    09:20:b1:ab:c3:7b:43:d1:12:19:88:11:f8:29:fb:
                    3b:c6:3f:94:58:c9:bd:9a:7f:e2:02:b8:9b:53:02:
                    84:7d:04:5f:4b:d1:23:82:62:8d:03:3e:73:1c:5d:
                    e9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BD:5D:A2:CF:AB:17:8C:1E:A7:7A:D9:91:A8:35:39:0D:66:13:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/a2430a62-2dd8-35a1-a6cf-0c5a0cd5299d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a800::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:30:53:8f:6d:54:51:f3:7e:4a:1a:7d:d1:8a:89:fe:ae:67:
         ee:ea:e3:e1:f5:71:30:f2:aa:cf:e9:9e:19:1d:a1:09:fb:61:
         44:68:45:14:29:2a:0e:85:90:f5:40:3e:1e:dc:55:54:9d:73:
         93:3f:9b:21:ae:d2:50:7d:20:d0:11:b6:9c:d7:e9:91:ee:98:
         c9:40:3b:a6:52:fd:1a:9e:eb:81:fd:a6:33:68:74:79:bf:b3:
         b8:bc:30:0b:29:bd:93:5e:35:2e:b2:e8:4a:74:83:31:02:9d:
         86:ed:94:69:a8:ec:63:68:6f:a8:80:0e:3d:37:af:52:3a:bc:
         df:4f:a3:c0:60:b4:db:14:29:1f:5f:26:87:75:95:01:66:39:
         09:45:b0:44:db:5f:9a:18:a7:3a:11:4b:15:86:78:a3:29:98:
         36:0d:51:15:b6:29:11:5a:12:bd:44:85:56:49:ba:66:2e:46:
         cc:ab:aa:82:ae:08:52:c3:5d:07:9d:05:90:ba:6b:64:6b:74:
         c6:e7:3d:99:fb:c0:e9:da:25:4d:81:3e:6d:95:e6:89:c7:11:
         86:35:db:65:e6:a8:37:d9:67:06:08:f0:6a:ad:55:05:bc:54:
         fa:34:49:a7:31:36:a3:62:d1:9d:9c:5c:51:c5:c8:2b:80:03:
         a9:c5:c2:12
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2msCaRawI9j3GqrQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz
MTA5MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk
MmM3YmQ4ZGYtOWE0Yi00NTlhLTgyY2QtMTY0ZGI3MWFhZjI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9Ri2gA7VSRwsl7c8IaKYrKQNQsAuZQPD0KK
m4YS5+RHWy4waweMJwbV3VmB8gx0Zw97nRWV1xsKvEyilNpsL9bSBzmppF4ZVD/d
c3x/wQOWRFY80DPME9d/mZuj4E8hSQc93VGM/jpiSfNewjykxq5pXhXYZDLInHWa
9kNoGPu1YwVMpAlWWfRLt8BgPx5tZwmWzO7FM+mfUUdgqMeyjj1qnkZ10x5o+N6k
U/2aow7IGEbH3NRTC1RMdcFTNvmHzUOWdR0S4r9DOR7guv3JYs0JILGrw3tD0RIZ
iBH4Kfs7xj+UWMm9mn/iAribUwKEfQRfS9EjgmKNAz5zHF3phQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDm9XaLPqxeMHqd62ZGoNTkNZhOVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm
MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvYTI0MzBhNjItMmRkOC0z
NWExLWE2Y2YtMGM1YTBjZDUyOTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm
NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh
MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3
MTVlYTMxMDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHJgaoAAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAOzBTj21UUfN+Shp90YqJ/q5n7urj4fVxMPKqz+meGR2hCfthRGhF
FCkqDoWQ9UA+HtxVVJ1zkz+bIa7SUH0g0BG2nNfpke6YyUA7plL9Gp7rgf2mM2h0
eb+zuLwwCym9k141LrLoSnSDMQKdhu2UaajsY2hvqIAOPTevUjq830+jwGC02xQp
H18mh3WVAWY5CUWwRNtfmhinOhFLFYZ4oymYNg1RFbYpEVoSvUSFVkm6Zi5GzKuq
gq4IUsNdB50FkLprZGt0xuc9mfvA6dolTYE+bZXmiccRhjXbZeaoN9lnBgjwaq1V
BbxU+jRJpzE2o2LRnZxcUcXIK4ADqcXCEg==
-----END CERTIFICATE-----
Generated at Wed May 13 11:11:23 2026 by rpki-client