Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f8d468e2-df6c-32d9-a013-720419dde62d.roa
File:                     f8d468e2-df6c-32d9-a013-720419dde62d.roa (raw, json)
Hash identifier:          8U1X/aw3ufRzOZWZ2Xm1kSmm+5Iy+y7nlQoGgrlApmY=
Subject key identifier:   94:41:59:F5:C9:26:C1:FD:AA:F5:B0:3F:B7:31:EF:73:05:A8:CA:2C
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584E3E5F41C0439BE163BF781360
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f8d468e2-df6c-32d9-a013-720419dde62d.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     271
IP address blocks:        2607:f8f0:680::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:41:c0:43:9b:e1:63:bf:78:13:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=42f90a50-72a2-40af-b405-8821ea32ca05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0f:37:82:8b:83:67:5b:d4:c0:7e:d3:53:a1:
                    e4:3e:46:98:dc:54:7c:41:b5:98:48:32:13:67:2a:
                    f6:6a:fb:bc:16:c6:b7:f1:bb:cd:5c:8d:04:63:87:
                    96:ae:ed:44:a7:d7:ee:53:77:4c:49:a3:a9:b8:7c:
                    43:5c:09:96:39:ef:b0:f3:bb:9a:9c:93:88:56:f2:
                    7e:be:2b:99:6a:09:5c:4e:2e:73:7c:ac:72:e6:0e:
                    68:78:cf:f4:bd:d9:56:cc:07:c9:d9:a5:a1:48:80:
                    1a:9b:8e:28:8c:bf:30:a5:89:98:f4:74:cf:56:31:
                    22:a6:65:44:de:97:a4:82:90:1e:84:f3:d4:00:eb:
                    42:26:08:06:a7:4d:f5:6e:3a:4b:d9:55:8a:34:df:
                    27:09:91:f6:c2:87:32:77:31:8b:81:03:dd:94:d9:
                    94:e4:97:f5:e4:92:df:86:a7:bb:66:5e:b2:6b:d4:
                    f2:8b:cc:7a:3e:d8:fa:2d:e0:bd:1c:7a:47:a4:f1:
                    6e:b7:f9:86:95:65:08:60:a1:17:59:ee:25:12:14:
                    ec:bb:91:6b:8e:90:26:db:a3:e3:95:9a:02:a2:ac:
                    cb:aa:01:c0:39:ee:ae:a1:86:bf:4b:30:18:bf:3d:
                    a8:7a:fc:82:5e:41:d7:2b:7e:ed:69:0a:32:3e:6b:
                    76:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:41:59:F5:C9:26:C1:FD:AA:F5:B0:3F:B7:31:EF:73:05:A8:CA:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/f8d468e2-df6c-32d9-a013-720419dde62d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:680::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:cd:a8:db:6c:3c:6c:83:43:38:3d:76:23:09:e5:b0:db:d5:
         d4:ae:59:9c:d5:6b:99:2a:bc:4d:7f:10:35:84:47:30:75:f4:
         7c:f5:52:e3:5c:86:f0:32:a8:74:77:37:c5:64:eb:15:62:61:
         1d:8a:dc:6a:d9:9a:fe:04:dc:a7:67:da:1e:6a:41:ef:ff:30:
         29:b8:f8:f8:54:75:4a:ee:63:d7:6e:de:a1:c6:a4:8f:7b:b7:
         75:c8:fe:cf:7a:2e:a8:bc:ec:8c:5a:b0:3f:12:a5:96:18:df:
         71:47:83:38:c9:db:b6:70:a5:d9:26:66:ae:41:8a:de:88:19:
         0c:95:09:a6:e3:3d:07:15:fd:74:cd:8b:bc:e3:38:3b:1a:fc:
         29:c7:e9:e4:9c:9f:9e:8f:0f:5e:31:11:21:ee:b9:86:5e:41:
         1f:be:49:41:48:78:d3:1d:dc:4a:1a:8c:aa:fe:bd:af:dd:07:
         40:8b:66:88:9e:7b:34:42:75:36:1c:57:14:ac:67:ae:c4:6a:
         49:3a:6c:7a:5f:0a:73:f9:d1:eb:f7:e4:50:5c:30:7e:a5:66:
         e3:f9:bf:04:f4:61:2b:1f:fc:05:7f:67:00:7f:41:9a:6b:95:
         fd:40:35:8f:5e:41:f4:64:2a:eb:39:c8:fa:5e:22:e2:5d:57:
         10:6c:18:ac
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4+X0HAQ5vhY794E2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux
OGNmMB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk
NDJmOTBhNTAtNzJhMi00MGFmLWI0MDUtODgyMWVhMzJjYTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA83gouDZ1vUwH7TU6HkPkaY3FR8QbWYSDIT
Zyr2avu8Fsa38bvNXI0EY4eWru1Ep9fuU3dMSaOpuHxDXAmWOe+w87uanJOIVvJ+
viuZaglcTi5zfKxy5g5oeM/0vdlWzAfJ2aWhSIAam44ojL8wpYmY9HTPVjEipmVE
3pekgpAehPPUAOtCJggGp031bjpL2VWKNN8nCZH2wocydzGLgQPdlNmU5Jf15JLf
hqe7Zl6ya9Tyi8x6Ptj6LeC9HHpHpPFut/mGlWUIYKEXWe4lEhTsu5FrjpAm26Pj
lZoCoqzLqgHAOe6uoYa/SzAYvz2oevyCXkHXK37taQoyPmt2xQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJRBWfXJJsH9qvWwP7cx73MFqMosMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi
NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvZjhkNDY4ZTItZGY2Yy0z
MmQ5LWEwMTMtNzIwNDE5ZGRlNjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5
MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl
MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli
NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf48AaA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGXNqNtsPGyDQzg9diMJ5bDb1dSuWZzVa5kqvE1/EDWERzB19Hz1
UuNchvAyqHR3N8Vk6xViYR2K3GrZmv4E3Kdn2h5qQe//MCm4+PhUdUruY9du3qHG
pI97t3XI/s96Lqi87IxasD8SpZYY33FHgzjJ27ZwpdkmZq5Bit6IGQyVCabjPQcV
/XTNi7zjODsa/CnH6eScn56PD14xESHuuYZeQR++SUFIeNMd3EoajKr+va/dB0CL
ZoieezRCdTYcVxSsZ67Eakk6bHpfCnP50ev35FBcMH6lZuP5vwT0YSsf/AV/ZwB/
QZprlf1ANY9eQfRkKus5yPpeIuJdVxBsGKw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:23:59 2026 by rpki-client