Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/6a1c5aa6-c138-31e0-a992-1c7146da48c3.roa
File:                     6a1c5aa6-c138-31e0-a992-1c7146da48c3.roa (raw, json)
Hash identifier:          vJTwgVd1Y6CilMHJF7YyG4A50o1ywBijTFIw+fAaLyI=
Subject key identifier:   8B:80:38:A9:E7:F2:E3:99:4C:DE:FB:7D:89:BD:07:C7:00:0C:B3:82
Certificate issuer:       /CN=0f9fa158-6175-4fe8-be8e-bcfccfc26553
Certificate serial:       010D0C9F4328584E4AEF34D40C55DEE72CD096C0
Authority key identifier: 19:36:54:0C:48:D0:41:BD:2D:39:05:04:5B:DC:5A:9E:05:85:10:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/6a1c5aa6-c138-31e0-a992-1c7146da48c3.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     398565
IP address blocks:        2602:806:a000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/0f9fa158-6175-4fe8-be8e-bcfccfc26553.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/0f9fa158-6175-4fe8-be8e-bcfccfc26553.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:34:d4:0c:55:de:e7:2c:d0:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f9fa158-6175-4fe8-be8e-bcfccfc26553
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=e806dc27-8058-49b6-b799-96806cc6a0c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f4:5a:a7:26:26:3e:d9:c2:85:c1:dd:1f:64:
                    96:e4:07:1a:b6:35:2c:a5:f4:89:33:d9:1c:c6:62:
                    41:5e:56:6b:d6:5a:a3:cc:e6:f2:1b:d5:a4:18:47:
                    ee:27:81:a9:08:b7:78:6f:cc:6d:f3:3e:0e:40:f5:
                    b7:ea:73:58:80:c5:0f:5c:2d:fd:7d:09:65:ad:c5:
                    fb:80:60:c8:a7:b7:d2:5b:52:00:90:89:bf:38:df:
                    76:e6:29:29:43:93:32:e6:af:62:1b:30:ef:b4:42:
                    7a:42:d3:bb:ed:42:d8:0a:ad:cd:b4:42:3a:6e:50:
                    e6:7c:b2:cf:98:68:0a:d9:98:c9:34:07:46:0d:07:
                    ce:f3:94:f3:11:b5:5e:41:4d:93:7a:23:6e:74:68:
                    1a:db:81:29:32:3e:3e:51:16:b6:09:9d:5d:d7:4f:
                    f6:0d:d8:e9:b9:ec:b2:6e:24:a9:ae:79:2e:84:89:
                    97:fb:d3:3c:db:11:6f:af:a7:fa:9b:f5:88:a8:5e:
                    29:ec:85:da:5b:83:b6:12:b2:2b:43:a1:52:ae:e9:
                    b7:b9:af:cd:11:72:5e:19:ed:66:ad:46:4e:36:65:
                    fb:d6:f9:7b:fa:ca:11:34:11:b8:6b:b4:1f:ae:e3:
                    72:79:67:67:97:f9:c4:10:91:d6:0f:fe:c7:b0:5f:
                    34:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:80:38:A9:E7:F2:E3:99:4C:DE:FB:7D:89:BD:07:C7:00:0C:B3:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/6a1c5aa6-c138-31e0-a992-1c7146da48c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/0f9fa158-6175-4fe8-be8e-bcfccfc26553.crl

            X509v3 Authority Key Identifier:
                keyid:19:36:54:0C:48:D0:41:BD:2D:39:05:04:5B:DC:5A:9E:05:85:10:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:806:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:c7:56:9f:b2:d6:80:99:5a:79:bc:ad:96:4b:0e:3a:ab:b5:
         92:1f:79:65:b2:be:f4:be:ad:f2:2a:63:23:72:fa:34:46:3d:
         f8:bf:93:8e:de:98:2f:af:cf:1a:f4:f0:d0:9e:99:e6:e7:45:
         40:0f:e9:c5:99:5c:da:c7:94:28:8f:0f:62:3a:17:35:0f:03:
         34:86:35:75:e6:51:0a:98:b8:18:5f:bf:a8:6d:b9:b3:b6:5b:
         9d:18:28:ec:81:95:33:00:b8:7b:30:40:24:e8:6d:4a:11:e7:
         fe:40:4a:b1:e6:ce:b2:86:2c:69:4d:63:a6:45:d0:9f:35:3f:
         06:b5:0b:34:34:e8:11:85:c3:a4:2a:0d:de:b0:40:47:0b:b5:
         a4:e4:c4:d8:bd:3f:ae:bb:6d:7c:23:ac:8c:49:3d:9b:5f:e8:
         0a:6a:2c:bf:a7:44:1d:22:e1:cc:48:4f:e0:0e:ff:9e:a3:ae:
         70:15:98:40:17:6a:a3:ec:1f:6a:d5:de:57:6d:15:4b:19:29:
         b1:6f:c7:68:bd:5f:40:90:17:d6:e3:d7:64:23:d9:fb:e9:9c:
         81:a1:8d:37:36:55:c9:1f:ce:e9:1a:6a:11:04:26:a8:69:00:
         e4:26:1c:df:ca:20:4c:f1:43:16:79:b3:2f:f6:59:1b:92:32:
         4f:6b:43:37
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5K7zTUDFXe5yzQlsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGY5ZmExNTgtNjE3NS00ZmU4LWJlOGUtYmNmY2NmYzI2
NTUzMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk
ZTgwNmRjMjctODA1OC00OWI2LWI3OTktOTY4MDZjYzZhMGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfRapyYmPtnChcHdH2SW5AcatjUspfSJM9kc
xmJBXlZr1lqjzObyG9WkGEfuJ4GpCLd4b8xt8z4OQPW36nNYgMUPXC39fQllrcX7
gGDIp7fSW1IAkIm/ON925ikpQ5My5q9iGzDvtEJ6QtO77ULYCq3NtEI6blDmfLLP
mGgK2ZjJNAdGDQfO85TzEbVeQU2TeiNudGga24EpMj4+URa2CZ1d10/2Ddjpueyy
biSprnkuhImX+9M82xFvr6f6m/WIqF4p7IXaW4O2ErIrQ6FSrum3ua/NEXJeGe1m
rUZONmX71vl7+soRNBG4a7QfruNyeWdnl/nEEJHWD/7HsF80DwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIuAOKnn8uOZTN77fYm9B8cADLOCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZjlm
YTE1OC02MTc1LTRmZTgtYmU4ZS1iY2ZjY2ZjMjY1NTMvNmExYzVhYTYtYzEzOC0z
MWUwLWE5OTItMWM3MTQ2ZGE0OGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGY5ZmExNTgtNjE3NS00ZmU4LWJl
OGUtYmNmY2NmYzI2NTUzLzBmOWZhMTU4LTYxNzUtNGZlOC1iZThlLWJjZmNjZmMy
NjU1My5jcmwwHwYDVR0jBBgwFoAUGTZUDEjQQb0tOQUEW9xangWFEJUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZjlmYTE1OC02MTc1LTRmZTgtYmU4ZS1iY2Zj
Y2ZjMjY1NTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIBqAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKDHVp+y1oCZWnm8rZZLDjqrtZIfeWWyvvS+rfIqYyNy+jRGPfi/
k47emC+vzxr08NCemebnRUAP6cWZXNrHlCiPD2I6FzUPAzSGNXXmUQqYuBhfv6ht
ubO2W50YKOyBlTMAuHswQCTobUoR5/5ASrHmzrKGLGlNY6ZF0J81Pwa1CzQ06BGF
w6QqDd6wQEcLtaTkxNi9P667bXwjrIxJPZtf6ApqLL+nRB0i4cxIT+AO/56jrnAV
mEAXaqPsH2rV3ldtFUsZKbFvx2i9X0CQF9bj12Qj2fvpnIGhjTc2VckfzukaahEE
JqhpAOQmHN/KIEzxQxZ5sy/2WRuSMk9rQzc=
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:17:50 2026 by rpki-client