Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc0ed464-e3c4-3562-9ff9-3e15c6721914.roa
File:                     cc0ed464-e3c4-3562-9ff9-3e15c6721914.roa (raw, json)
Hash identifier:          90rzgKSJQKESLEHiP0wo7yjfYoTa+CStKedA5vkg4As=
Subject key identifier:   C2:D7:11:2A:F0:21:16:8E:AD:FD:20:26:4B:95:8F:78:05:E5:A6:9D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F49844CB87E1B2533F6773EC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc0ed464-e3c4-3562-9ff9-3e15c6721914.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        2600:1405:b000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:4c:b8:7e:1b:25:33:f6:77:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c879e79a-94b3-43db-ba66-d514699a37a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:26:cc:b2:81:55:81:b7:63:61:ea:16:93:1e:
                    05:df:33:10:8c:60:81:d9:f8:26:ce:bf:13:bc:23:
                    27:e7:7e:9c:56:ab:8a:74:89:0d:55:1e:a4:85:fd:
                    5c:48:1d:fd:68:48:40:5b:b8:15:0a:12:70:0a:2f:
                    75:eb:ea:30:29:56:06:77:aa:b2:7e:4e:f6:41:49:
                    3f:42:95:43:37:4d:45:c7:86:36:fe:7e:00:59:dc:
                    e0:fb:cd:df:da:99:2a:04:4c:d5:e5:0f:43:d1:c4:
                    a6:50:58:0b:96:12:b8:32:3d:41:01:52:50:b6:9e:
                    cb:fd:a3:04:73:ec:26:fe:06:e2:07:e3:fc:df:ee:
                    b2:71:ba:b7:b1:0a:e3:c2:e1:26:a1:f7:65:9b:08:
                    90:09:20:80:d0:1c:bd:0e:85:38:25:9b:81:2a:08:
                    04:fb:f5:e9:79:b4:95:84:25:90:3b:6d:c6:2d:08:
                    ae:75:96:d4:7b:b9:ee:5e:77:4d:89:c2:1e:6e:f2:
                    e7:8f:bd:df:ea:95:3e:7f:94:a0:6c:17:ec:74:00:
                    32:50:2a:b0:c9:6b:27:6c:28:db:56:51:70:25:f1:
                    46:e9:95:3a:28:b7:fb:82:b8:3a:ca:36:ed:3e:70:
                    29:4e:91:26:6e:91:ef:eb:32:4f:29:09:82:9b:b9:
                    36:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D7:11:2A:F0:21:16:8E:AD:FD:20:26:4B:95:8F:78:05:E5:A6:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc0ed464-e3c4-3562-9ff9-3e15c6721914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1405:b000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:e0:d4:0b:08:f5:95:f0:19:dc:19:5a:f4:5b:f3:32:12:ba:
         dc:2b:45:25:9b:55:44:a6:e1:86:bb:db:5f:b1:57:48:57:b1:
         71:49:07:67:7a:10:c1:e5:65:6c:e2:f7:5b:df:7c:51:31:53:
         26:27:2a:36:dd:40:99:5d:ee:18:06:59:45:53:be:08:79:fd:
         be:ec:76:7e:e4:9f:9d:4c:60:d9:a5:2a:80:65:e3:1f:f9:2f:
         73:dc:84:bf:61:99:ad:f3:de:7f:60:d0:8b:0e:d4:6a:0b:6d:
         c4:d2:3f:b0:56:e3:92:88:bb:fd:b6:13:dd:11:7a:d4:db:81:
         15:b5:ed:09:03:4b:7a:aa:d4:67:21:97:a1:cd:17:d8:d0:08:
         db:6b:56:2a:92:ec:61:62:ef:d7:89:f0:dd:ed:63:0a:e5:a4:
         83:f4:13:35:6b:ef:e5:25:3f:a6:aa:00:5c:22:a9:ed:5a:8d:
         a2:f9:00:09:40:dc:a9:d0:08:57:27:19:5a:c8:7d:66:fe:1a:
         22:14:d1:d5:4a:61:81:e7:51:36:2a:0b:bd:35:e0:82:29:c4:
         0f:f2:a3:0e:83:f3:bf:e9:8e:b5:11:ba:b0:43:f4:a0:e0:f0:
         92:cd:ed:45:bc:ca:e0:b1:8b:80:cd:82:5c:2d:2b:d6:23:1b:
         26:5f:0b:23
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhEy4fhslM/Z3PsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Yzg3OWU3OWEtOTRiMy00M2RiLWJhNjYtZDUxNDY5OWEzN2EyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlibMsoFVgbdjYeoWkx4F3zMQjGCB2fgmzr8T
vCMn536cVquKdIkNVR6khf1cSB39aEhAW7gVChJwCi916+owKVYGd6qyfk72QUk/
QpVDN01Fx4Y2/n4AWdzg+83f2pkqBEzV5Q9D0cSmUFgLlhK4Mj1BAVJQtp7L/aME
c+wm/gbiB+P83+6ycbq3sQrjwuEmofdlmwiQCSCA0By9DoU4JZuBKggE+/XpebSV
hCWQO23GLQiudZbUe7nuXndNicIebvLnj73f6pU+f5SgbBfsdAAyUCqwyWsnbCjb
VlFwJfFG6ZU6KLf7grg6yjbtPnApTpEmbpHv6zJPKQmCm7k2FQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMLXESrwIRaOrf0gJkuVj3gF5aadMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2MwZWQ0NjQtZTNjNC0z
NTYyLTlmZjktM2UxNWM2NzIxOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBbAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAADg1AsI9ZXwGdwZWvRb8zISutwrRSWbVUSm4Ya721+xV0hXsXFJ
B2d6EMHlZWzi91vffFExUyYnKjbdQJld7hgGWUVTvgh5/b7sdn7kn51MYNmlKoBl
4x/5L3PchL9hma3z3n9g0IsO1GoLbcTSP7BW45KIu/22E90RetTbgRW17QkDS3qq
1Gchl6HNF9jQCNtrViqS7GFi79eJ8N3tYwrlpIP0EzVr7+UlP6aqAFwiqe1ajaL5
AAlA3KnQCFcnGVrIfWb+GiIU0dVKYYHnUTYqC7014IIpxA/yow6D87/pjrURurBD
9KDg8JLN7UW8yuCxi4DNglwtK9YjGyZfCyM=
-----END CERTIFICATE-----
Generated at Sun Sep 27 05:00:07 2026 by rpki-client