Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8/e92c13f2-6a0e-3db5-90f8-95f2f5a6f71f.roa
File:                     e92c13f2-6a0e-3db5-90f8-95f2f5a6f71f.roa (raw, json)
Hash identifier:          M0J73SaYvLQb/feZjvjcPrnJbC0Ci8M+U75tPEmuHY4=
Subject key identifier:   58:31:D3:46:6D:96:34:92:26:B2:D4:46:CF:8F:8C:05:99:D5:FC:8C
Certificate issuer:       /CN=6288979e-3de3-4c2b-9663-274b980094e8
Certificate serial:       010D0C9F4328584DCC606831CD4EABFDC33FFD00
Authority key identifier: EE:A6:80:69:BA:9F:74:19:EC:3D:57:C3:E7:9D:92:7F:4F:C3:32:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8/e92c13f2-6a0e-3db5-90f8-95f2f5a6f71f.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     401593
IP address blocks:        2606:dac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8/6288979e-3de3-4c2b-9663-274b980094e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8/6288979e-3de3-4c2b-9663-274b980094e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:68:31:cd:4e:ab:fd:c3:3f:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6288979e-3de3-4c2b-9663-274b980094e8
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=7c09ba62-7b69-4628-97e0-bff3b7ae71ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:51:3f:9d:e3:1c:04:02:67:da:b4:66:e4:68:
                    48:d0:8e:8e:e7:3f:ae:b4:03:64:ae:cb:54:cf:e0:
                    01:e2:bc:e9:b0:ca:c5:99:99:96:b7:01:2c:65:a0:
                    56:ff:11:37:02:2b:b8:bb:38:e4:fe:66:20:de:6c:
                    f6:80:49:8a:15:d4:c8:7e:16:ac:d6:1e:24:6d:da:
                    93:f2:45:d1:d5:ed:8a:29:24:c1:ce:76:62:05:5e:
                    9e:6f:3a:07:c4:55:42:8a:62:30:6e:98:d6:ed:3b:
                    7c:56:44:b5:f1:97:bc:56:39:93:8f:e8:45:89:f4:
                    8b:aa:87:2b:f3:6e:0d:c4:1f:fc:5f:25:e1:cf:12:
                    94:4e:74:38:98:2e:2c:53:eb:2a:9a:18:39:9b:0d:
                    0a:71:60:1b:1a:5c:6b:f6:4d:b2:36:08:39:8d:0b:
                    4a:f5:8b:ec:53:9f:21:1d:1f:0f:db:d8:79:a9:e6:
                    1e:b6:3b:d6:cd:b0:11:cc:d7:6a:67:43:d9:a6:b8:
                    4b:06:c6:87:03:70:fb:82:27:00:7e:2f:2f:96:ac:
                    15:14:fa:a9:13:d3:85:c1:bd:33:58:86:f7:aa:eb:
                    02:95:3d:ac:7d:59:fe:6b:76:0e:20:d1:87:8e:17:
                    eb:73:63:a9:3b:c2:31:6a:4f:3d:0d:71:c8:ff:1a:
                    e3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:31:D3:46:6D:96:34:92:26:B2:D4:46:CF:8F:8C:05:99:D5:FC:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8/e92c13f2-6a0e-3db5-90f8-95f2f5a6f71f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8/6288979e-3de3-4c2b-9663-274b980094e8.crl

            X509v3 Authority Key Identifier:
                keyid:EE:A6:80:69:BA:9F:74:19:EC:3D:57:C3:E7:9D:92:7F:4F:C3:32:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6288979e-3de3-4c2b-9663-274b980094e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:dac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:1d:e2:d7:11:4e:bc:16:3d:a3:29:91:67:31:58:bf:1a:9a:
         83:83:9f:47:00:00:e7:b5:c4:c7:6c:f7:2e:09:c4:80:f0:eb:
         9d:0e:9f:2e:87:b4:5f:f3:ea:18:51:da:54:ba:93:33:b8:23:
         d7:70:42:4f:41:26:de:ae:92:11:4d:b4:05:03:e6:1c:02:9f:
         e6:7f:da:3a:98:9f:1c:23:cb:14:9d:44:52:41:19:fb:8a:67:
         85:81:cc:52:6d:8e:75:4b:af:63:16:5f:41:ce:77:18:e3:9e:
         f3:a6:39:39:d8:00:01:f1:81:8c:64:2b:7a:2d:01:9a:99:87:
         29:75:9e:75:33:02:d6:7a:b5:d8:5b:37:dd:f0:db:7d:34:4f:
         fa:ff:e7:8a:70:7c:de:0b:e2:9d:3c:da:88:94:64:99:20:42:
         13:e6:e4:a7:65:60:f8:e2:7f:26:eb:d4:78:d5:2b:cb:c1:6a:
         2b:04:b3:22:ba:5c:16:9d:66:50:c2:c5:45:3a:04:07:46:61:
         6e:5f:31:90:f2:8d:96:5f:19:75:51:dd:32:54:c5:9a:c1:8e:
         bb:32:a8:ee:f9:fb:dd:83:64:74:02:f3:5e:e3:a9:42:5f:41:
         98:fd:89:6f:88:f6:2a:b8:af:95:86:6e:c7:94:a6:c4:e2:51:
         85:a4:a9:17
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3MYGgxzU6r/cM//QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjI4ODk3OWUtM2RlMy00YzJiLTk2NjMtMjc0Yjk4MDA5
NGU4MB4XDTI2MDUxMTEzMDAzMVoXDTI2MDgwOTEzMDAzMVowLzEtMCsGA1UEAxMk
N2MwOWJhNjItN2I2OS00NjI4LTk3ZTAtYmZmM2I3YWU3MWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVE/neMcBAJn2rRm5GhI0I6O5z+utANkrstU
z+AB4rzpsMrFmZmWtwEsZaBW/xE3Aiu4uzjk/mYg3mz2gEmKFdTIfhas1h4kbdqT
8kXR1e2KKSTBznZiBV6ebzoHxFVCimIwbpjW7Tt8VkS18Ze8VjmTj+hFifSLqocr
824NxB/8XyXhzxKUTnQ4mC4sU+sqmhg5mw0KcWAbGlxr9k2yNgg5jQtK9YvsU58h
HR8P29h5qeYetjvWzbARzNdqZ0PZprhLBsaHA3D7gicAfi8vlqwVFPqpE9OFwb0z
WIb3qusClT2sfVn+a3YOINGHjhfrc2OpO8Ixak89DXHI/xrjEwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFgx00ZtljSSJrLURs+PjAWZ1fyMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82Mjg4
OTc5ZS0zZGUzLTRjMmItOTY2My0yNzRiOTgwMDk0ZTgvZTkyYzEzZjItNmEwZS0z
ZGI1LTkwZjgtOTVmMmY1YTZmNzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjI4ODk3OWUtM2RlMy00YzJiLTk2
NjMtMjc0Yjk4MDA5NGU4LzYyODg5NzllLTNkZTMtNGMyYi05NjYzLTI3NGI5ODAw
OTRlOC5jcmwwHwYDVR0jBBgwFoAU7qaAabqfdBnsPVfD552Sf0/DMkEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82Mjg4OTc5ZS0zZGUzLTRjMmItOTY2My0yNzRi
OTgwMDk0ZTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbawDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCrHeLXEU68Fj2jKZFnMVi/GpqDg59HAADntcTHbPcuCcSA8OudDp8u
h7Rf8+oYUdpUupMzuCPXcEJPQSberpIRTbQFA+YcAp/mf9o6mJ8cI8sUnURSQRn7
imeFgcxSbY51S69jFl9BzncY457zpjk52AAB8YGMZCt6LQGamYcpdZ51MwLWerXY
Wzfd8Nt9NE/6/+eKcHzeC+KdPNqIlGSZIEIT5uSnZWD44n8m69R41SvLwWorBLMi
ulwWnWZQwsVFOgQHRmFuXzGQ8o2WXxl1Ud0yVMWawY67Mqju+fvdg2R0AvNe46lC
X0GY/YlviPYquK+Vhm7HlKbE4lGFpKkX
-----END CERTIFICATE-----
Generated at Wed May 13 03:46:01 2026 by rpki-client