Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c36a0c1c-cd22-3898-9077-a9bd704a3113.roa
File:                     c36a0c1c-cd22-3898-9077-a9bd704a3113.roa (raw, json)
Hash identifier:          MUyzHl6gSPvbtLf1+HmOMP4Ry1Grtv1F1gE9HfnLiiI=
Subject key identifier:   9C:C9:29:42:31:3A:B2:6A:FC:EC:C7:E0:D4:22:FF:70:53:AF:DE:33
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F4984554C8968ED3C642CC480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c36a0c1c-cd22-3898-9077-a9bd704a3113.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        2600:1411:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:55:4c:89:68:ed:3c:64:2c:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9863df4c-0e4f-4753-a26d-65ac5e9d5673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:34:47:b2:eb:63:17:46:9d:cc:a6:a2:59:de:
                    c8:b8:83:ea:07:ed:ee:37:50:b5:4a:18:21:70:3a:
                    58:9e:f0:50:87:c3:5b:2e:1a:a3:01:e3:8f:b7:9f:
                    0e:b2:47:93:9d:70:7f:7b:60:90:fe:db:7f:b4:64:
                    d6:20:c3:10:e2:00:c6:fe:7d:a9:a1:77:a1:f0:ef:
                    34:f2:9c:a0:8b:38:86:7b:07:83:0a:3f:27:96:0c:
                    fe:6b:61:23:af:de:8a:43:b1:ee:73:b2:62:ea:be:
                    a1:3f:04:db:f2:72:8c:bf:c9:43:7a:64:a0:8e:29:
                    5d:69:1f:0b:28:e4:87:86:91:48:d6:ad:23:60:52:
                    51:4c:b3:20:2b:59:1b:bd:90:93:88:2f:3a:d2:60:
                    b7:a3:1a:0c:0b:3b:91:bb:2f:42:a5:44:d6:52:9f:
                    84:e1:a6:27:bc:bb:91:71:02:4d:4b:bf:57:7a:df:
                    89:4c:e7:5e:0f:5b:04:86:c9:56:c1:74:d5:59:e9:
                    0c:9f:85:43:4a:f8:c0:ec:23:5b:12:fd:52:64:46:
                    de:e1:77:7c:5c:c4:13:15:bf:c0:f3:cf:23:97:24:
                    27:d1:32:f4:fa:3e:e9:63:e5:f5:28:3f:70:07:b1:
                    01:04:be:56:d1:77:43:1f:7e:92:f0:40:78:50:50:
                    a3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C9:29:42:31:3A:B2:6A:FC:EC:C7:E0:D4:22:FF:70:53:AF:DE:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c36a0c1c-cd22-3898-9077-a9bd704a3113.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1411:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:be:65:fb:62:c3:89:e3:d0:9b:64:d1:18:c4:e6:44:66:6b:
         32:60:b8:38:fe:b2:4e:58:fb:30:f1:dc:2c:9e:67:bd:89:07:
         4d:88:d0:0e:e9:ee:16:73:89:4f:27:10:db:c1:00:1e:c5:0a:
         6e:dd:38:54:6e:b7:d7:7e:62:5e:9d:a7:85:80:fe:a1:19:6a:
         a1:2b:e0:99:f1:a4:97:1e:96:c9:e8:5c:3d:b6:db:12:0b:15:
         d4:55:6c:cc:2e:18:ce:18:c3:dd:26:a4:30:01:e0:e8:4f:a9:
         46:71:5c:df:c6:90:7d:7c:c3:c5:0c:4d:69:b4:b5:e2:bf:02:
         b5:a5:46:52:ed:7e:c6:11:f9:db:3f:9f:02:04:04:ec:bb:4e:
         47:7b:1d:0c:80:73:35:39:8d:ea:4e:bd:d5:7f:15:f9:9d:3d:
         1e:1a:6e:4a:26:08:18:c3:cc:e0:47:c5:d4:45:b0:72:f3:06:
         10:2b:a4:21:2a:69:e5:91:36:79:3f:d5:cc:1c:d9:28:77:f3:
         50:0a:79:05:b0:70:23:b5:a0:27:28:47:07:b1:dc:cc:a5:89:
         12:63:56:40:3c:fa:44:f2:ef:72:8d:ef:eb:dd:9d:c7:61:6d:
         77:99:40:98:84:32:cc:ee:3a:79:d4:61:60:f9:28:da:d9:db:
         a3:ca:7e:3f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhFVMiWjtPGQsxIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OTg2M2RmNGMtMGU0Zi00NzUzLWEyNmQtNjVhYzVlOWQ1NjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDRHsutjF0adzKaiWd7IuIPqB+3uN1C1Shgh
cDpYnvBQh8NbLhqjAeOPt58OskeTnXB/e2CQ/tt/tGTWIMMQ4gDG/n2poXeh8O80
8pygiziGeweDCj8nlgz+a2Ejr96KQ7Huc7Ji6r6hPwTb8nKMv8lDemSgjildaR8L
KOSHhpFI1q0jYFJRTLMgK1kbvZCTiC860mC3oxoMCzuRuy9CpUTWUp+E4aYnvLuR
cQJNS79Xet+JTOdeD1sEhslWwXTVWekMn4VDSvjA7CNbEv1SZEbe4Xd8XMQTFb/A
888jlyQn0TL0+j7pY+X1KD9wB7EBBL5W0XdDH36S8EB4UFCjJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJzJKUIxOrJq/OzH4NQi/3BTr94zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzM2YTBjMWMtY2QyMi0z
ODk4LTkwNzctYTliZDcwNGEzMTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUEYAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEW+Zftiw4nj0Jtk0RjE5kRmazJguDj+sk5Y+zDx3CyeZ72JB02I
0A7p7hZziU8nENvBAB7FCm7dOFRut9d+Yl6dp4WA/qEZaqEr4JnxpJcelsnoXD22
2xILFdRVbMwuGM4Yw90mpDAB4OhPqUZxXN/GkH18w8UMTWm0teK/ArWlRlLtfsYR
+ds/nwIEBOy7Tkd7HQyAczU5jepOvdV/FfmdPR4abkomCBjDzOBHxdRFsHLzBhAr
pCEqaeWRNnk/1cwc2Sh381AKeQWwcCO1oCcoRwex3MyliRJjVkA8+kTy73KN7+vd
ncdhbXeZQJiEMszuOnnUYWD5KNrZ26PKfj8=
-----END CERTIFICATE-----
Generated at Fri Sep 25 21:37:32 2026 by rpki-client