Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5236160-440c-3603-b1db-31ca88f51c98.roa
File:                     d5236160-440c-3603-b1db-31ca88f51c98.roa (raw, json)
Hash identifier:          mNL6ZSoCKwYaEIJP883vhXTaFP594W9mvR9wFGvx44o=
Subject key identifier:   72:07:67:65:71:FD:E8:DB:CF:F4:FE:3E:71:C8:B7:15:C0:89:74:8C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F497C50A1919235E769D26F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5236160-440c-3603-b1db-31ca88f51c98.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     9498
IP address blocks:        2600:140f:e400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7c:50:a1:91:92:35:e7:69:d2:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7a6244db-d96b-4f59-a1fb-8b3cdde4e01c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9d:c3:c0:47:3a:2e:9c:10:31:24:c2:de:41:
                    60:45:f3:26:54:62:2d:fc:73:69:47:64:89:e8:c9:
                    6e:d0:7a:3a:0c:83:b1:9f:b3:3b:be:ae:59:02:3b:
                    7f:0c:20:6c:46:d3:e7:58:c9:79:7a:0e:0c:1f:a0:
                    29:56:d6:f7:7f:af:66:6c:37:44:d3:2f:e2:fe:b3:
                    1e:de:c8:8f:7d:f3:fd:25:f9:e5:9d:fe:be:22:37:
                    cb:de:b6:a1:98:08:2f:67:d4:a6:be:ff:fc:67:87:
                    da:09:8e:c1:c7:4b:a9:f5:0c:c8:ff:96:03:4b:f5:
                    b9:d2:90:67:eb:01:c4:9b:b7:7a:88:fe:fa:13:de:
                    3e:56:25:7e:51:49:2a:95:49:04:9b:e8:61:68:9d:
                    aa:16:3f:97:cb:56:d4:82:50:5b:ae:62:24:de:7e:
                    f1:7c:b8:7d:6b:88:08:e4:66:78:44:fc:44:4b:db:
                    e8:b8:f8:70:ee:56:c9:1b:d5:93:3f:4e:90:4f:fa:
                    9c:0a:7f:90:64:c9:e8:21:b5:cb:4f:ab:39:e2:e7:
                    74:5e:ba:18:62:f6:54:d9:c6:8d:96:f4:e1:54:07:
                    a2:00:d3:ce:15:4a:6e:c5:f2:8b:04:7c:a7:7f:be:
                    c9:88:dc:d0:3f:00:f0:50:13:8c:8e:63:0f:0c:13:
                    eb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:07:67:65:71:FD:E8:DB:CF:F4:FE:3E:71:C8:B7:15:C0:89:74:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5236160-440c-3603-b1db-31ca88f51c98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:e400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:04:1e:89:50:e2:87:4f:3b:16:6a:a8:9a:de:cc:02:93:2e:
         31:eb:3c:ae:67:02:e2:75:4b:0f:67:aa:d5:ce:ec:5a:44:32:
         e1:9f:8f:c0:a2:ee:51:43:86:8b:37:e3:e7:be:9f:db:5a:27:
         3c:0e:ad:c8:54:f9:6f:ef:c5:dd:3f:52:d3:c9:39:60:03:62:
         0e:e4:a2:4f:f5:3a:8f:f3:04:83:fc:14:9e:e0:eb:b9:eb:88:
         79:23:db:93:6a:64:49:ee:cd:b1:2a:ba:bc:40:27:ab:03:c5:
         17:ca:d3:f6:ac:87:a8:7d:9e:1c:e3:66:a0:fb:3f:50:c5:d6:
         92:0e:50:3d:44:84:8a:c6:97:52:a1:5e:b2:77:12:2b:7c:0e:
         f4:1d:98:1e:6f:fd:3f:9d:59:be:5c:de:9c:1b:94:95:89:ef:
         36:9f:5a:6f:56:bf:f5:0d:f1:46:1e:df:14:25:9a:24:5f:0a:
         cf:85:8c:af:6d:2e:6e:b8:00:91:e1:71:ef:61:d8:53:1f:8e:
         53:6a:96:a0:de:c4:9d:ac:f7:be:bb:82:ed:91:07:a8:95:6d:
         98:3d:c9:d4:0e:94:70:68:02:c2:7c:16:2e:7e:c7:78:00:c1:
         fc:ab:49:d9:f8:e2:3f:aa:9d:d6:06:16:b1:46:64:ce:56:1b:
         1a:d4:cf:93
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JfFChkZI152nSb4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
N2E2MjQ0ZGItZDk2Yi00ZjU5LWExZmItOGIzY2RkZTRlMDFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhp3DwEc6LpwQMSTC3kFgRfMmVGIt/HNpR2SJ
6Mlu0Ho6DIOxn7M7vq5ZAjt/DCBsRtPnWMl5eg4MH6ApVtb3f69mbDdE0y/i/rMe
3siPffP9Jfnlnf6+IjfL3rahmAgvZ9Smvv/8Z4faCY7Bx0up9QzI/5YDS/W50pBn
6wHEm7d6iP76E94+ViV+UUkqlUkEm+hhaJ2qFj+Xy1bUglBbrmIk3n7xfLh9a4gI
5GZ4RPxES9vouPhw7lbJG9WTP06QT/qcCn+QZMnoIbXLT6s54ud0XroYYvZU2caN
lvThVAeiANPOFUpuxfKLBHynf77JiNzQPwDwUBOMjmMPDBPrnQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHIHZ2Vx/ejbz/T+PnHItxXAiXSMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDUyMzYxNjAtNDQwYy0z
NjAzLWIxZGItMzFjYTg4ZjUxYzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUD+QA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI8EHolQ4odPOxZqqJrezAKTLjHrPK5nAuJ1Sw9nqtXO7FpEMuGf
j8Ci7lFDhos34+e+n9taJzwOrchU+W/vxd0/UtPJOWADYg7kok/1Oo/zBIP8FJ7g
67nriHkj25NqZEnuzbEqurxAJ6sDxRfK0/ash6h9nhzjZqD7P1DF1pIOUD1EhIrG
l1KhXrJ3Eit8DvQdmB5v/T+dWb5c3pwblJWJ7zafWm9Wv/UN8UYe3xQlmiRfCs+F
jK9tLm64AJHhce9h2FMfjlNqlqDexJ2s9767gu2RB6iVbZg9ydQOlHBoAsJ8Fi5+
x3gAwfyrSdn44j+qndYGFrFGZM5WGxrUz5M=
-----END CERTIFICATE-----
Generated at Tue Oct 6 08:44:35 2026 by rpki-client