Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/2f5530ed-15f5-3da6-baf0-335815c4d026.roa
File:                     2f5530ed-15f5-3da6-baf0-335815c4d026.roa (raw, json)
Hash identifier:          fLxDJo/ckTO39kZXTgn5rFX4sXYv7bAx7CcnE37qhoc=
Subject key identifier:   B3:2E:60:71:97:18:99:0C:81:B3:AF:BF:F9:0D:C1:F5:0A:AE:89:04
Certificate issuer:       /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Certificate serial:       010D0C9F4328584E6F3A28A3329C155659036300
Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/2f5530ed-15f5-3da6-baf0-335815c4d026.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     16552
IP address blocks:        2600:1800::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:28:a3:32:9c:15:56:59:03:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=8cf955db-0f5d-4db0-91ab-18d9e5acb934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d0:71:45:72:8f:c6:25:21:a5:31:c9:d6:5c:
                    7c:58:48:41:bf:d8:a6:7c:db:7b:9b:17:6e:e0:63:
                    47:6a:bb:dd:2d:40:2b:05:37:5f:5a:c8:5a:18:fc:
                    53:73:83:07:0b:a3:a6:d8:5e:38:1a:2f:bc:25:cd:
                    27:9a:85:0e:a2:ca:ea:5a:e4:0e:34:36:a9:5f:86:
                    5e:7e:c2:01:b4:58:57:fc:f5:76:3a:fc:2f:11:01:
                    e6:00:34:b8:95:86:0e:46:25:c1:cc:dc:9b:23:1d:
                    26:d9:3c:a5:17:b2:4f:fb:1e:90:88:94:1a:b8:7a:
                    92:c7:f6:e6:54:1a:3e:8d:f8:14:f3:73:06:34:3b:
                    72:0f:e4:45:8c:4f:b9:ea:97:df:13:9a:83:18:2f:
                    1f:0e:45:1c:6e:6d:49:fb:07:83:b6:56:2d:81:89:
                    1f:90:04:9d:27:ec:53:12:e1:1c:67:5b:f4:21:2d:
                    8f:29:a5:50:08:3b:de:cb:2d:8a:44:45:08:83:08:
                    b4:4b:72:db:b4:f7:e5:11:94:d9:ab:f1:52:b2:77:
                    c6:f5:90:f9:d8:cf:bf:96:96:d9:4b:72:9e:38:3d:
                    7a:68:39:63:27:47:3d:aa:41:9a:ef:f5:1a:d9:29:
                    a2:ff:c0:a2:63:02:d9:d9:0d:01:6c:27:0b:a3:ec:
                    ae:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2E:60:71:97:18:99:0C:81:B3:AF:BF:F9:0D:C1:F5:0A:AE:89:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/2f5530ed-15f5-3da6-baf0-335815c4d026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl

            X509v3 Authority Key Identifier:
                keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1800::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:47:af:5a:b2:9c:5b:d9:5a:22:8e:37:67:ac:6a:57:ef:2a:
         b4:79:99:20:98:27:f5:d8:6a:50:d1:3d:d4:02:32:78:8c:d3:
         d6:4d:3c:2a:f4:d8:4a:99:37:54:51:97:43:57:e4:98:00:a0:
         12:47:7b:e4:f0:90:df:f8:0e:60:24:ea:b7:7a:36:df:62:15:
         bc:9e:9c:73:39:80:9a:c0:b1:8e:19:49:e6:8c:5d:85:72:0a:
         01:27:12:5d:10:0a:d0:f2:09:ce:9a:20:4f:52:e9:56:6a:e7:
         c2:58:f1:ac:2a:8b:f0:4d:d4:a4:43:99:53:1e:08:9c:91:4e:
         ef:71:7a:e7:91:55:e7:3a:be:87:42:b1:59:d6:bd:38:41:54:
         31:03:71:7e:f2:70:03:cb:ec:0e:ad:8d:63:b2:3d:d8:04:c6:
         3b:cc:1d:2a:db:44:34:e6:6a:70:00:bb:b4:ca:f1:2e:a3:7f:
         a2:41:0d:f4:bd:84:29:5d:c1:2f:3a:ab:8a:ce:ee:02:25:cf:
         e5:83:54:24:17:bd:e3:2a:bd:5a:4f:b7:4c:f0:4f:26:a9:fb:
         bb:68:eb:4b:ac:48:a5:27:e5:17:cc:65:16:9f:e7:5b:6f:e5:
         84:4a:e7:39:95:45:87:74:3a:93:f8:7d:da:fc:77:ed:4c:14:
         f4:86:2b:81
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5vOiijMpwVVlkDYwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRmNmViZDctMGNjZC00YzA2LTgwYTAtNDVmZDc2MDc3
ZjU0MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
OGNmOTU1ZGItMGY1ZC00ZGIwLTkxYWItMThkOWU1YWNiOTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtBxRXKPxiUhpTHJ1lx8WEhBv9imfNt7mxdu
4GNHarvdLUArBTdfWshaGPxTc4MHC6Om2F44Gi+8Jc0nmoUOosrqWuQONDapX4Ze
fsIBtFhX/PV2OvwvEQHmADS4lYYORiXBzNybIx0m2TylF7JP+x6QiJQauHqSx/bm
VBo+jfgU83MGNDtyD+RFjE+56pffE5qDGC8fDkUcbm1J+weDtlYtgYkfkASdJ+xT
EuEcZ1v0IS2PKaVQCDveyy2KREUIgwi0S3LbtPflEZTZq/FSsnfG9ZD52M+/lpbZ
S3KeOD16aDljJ0c9qkGa7/Ua2Smi/8CiYwLZ2Q0BbCcLo+yuDwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLMuYHGXGJkMgbOvv/kNwfUKrokEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2
ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZkNzYwNzdmNTQvMmY1NTMwZWQtMTVmNS0z
ZGE2LWJhZjAtMzM1ODE1YzRkMDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRmNmViZDctMGNjZC00YzA2LTgw
YTAtNDVmZDc2MDc3ZjU0LzVkZjZlYmQ3LTBjY2QtNGMwNi04MGEwLTQ1ZmQ3NjA3
N2Y1NC5jcmwwHwYDVR0jBBgwFoAU+ZXymTKY5kpAyLxIzydJ7K1e/qcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZk
NzYwNzdmNTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAYADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQDBR69aspxb2VoijjdnrGpX7yq0eZkgmCf12GpQ0T3UAjJ4jNPWTTwq
9NhKmTdUUZdDV+SYAKASR3vk8JDf+A5gJOq3ejbfYhW8npxzOYCawLGOGUnmjF2F
cgoBJxJdEArQ8gnOmiBPUulWaufCWPGsKovwTdSkQ5lTHgickU7vcXrnkVXnOr6H
QrFZ1r04QVQxA3F+8nADy+wOrY1jsj3YBMY7zB0q20Q05mpwALu0yvEuo3+iQQ30
vYQpXcEvOquKzu4CJc/lg1QkF73jKr1aT7dM8E8mqfu7aOtLrEilJ+UXzGUWn+db
b+WESuc5lUWHdDqT+H3a/HftTBT0hiuB
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:12:33 2026 by rpki-client