Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/58865ef3-3eca-32e6-97a6-e2fdbae889c0.roa
File:                     58865ef3-3eca-32e6-97a6-e2fdbae889c0.roa (raw, json)
Hash identifier:          ZEyVpXlEud6A2XjIN74FMGtq7P1Hb7zXG+A82KGp5DU=
Subject key identifier:   F4:A2:CF:45:99:B7:CE:62:05:AA:5C:26:7D:6E:30:A7:ED:CD:0E:66
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584F4972EA4A774E4878B70371F0
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/58865ef3-3eca-32e6-97a6-e2fdbae889c0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54994
IP address blocks:        2607:b300:fd0e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:ea:4a:77:4e:48:78:b7:03:71:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=91487a1a-5c75-40ae-afe7-2b90faa86e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:18:fb:58:7f:f2:0a:6e:68:6e:c6:dd:a6:ac:
                    6a:94:40:d8:81:f9:22:a9:47:c3:f2:3a:17:7a:f6:
                    34:e0:31:4a:c5:7d:94:07:ea:c5:e1:e4:2d:46:cb:
                    8c:82:19:f4:82:d8:63:a7:2b:d5:b7:53:ec:09:f8:
                    a6:51:1d:2b:b8:93:18:05:05:3b:26:29:42:a2:95:
                    f6:b1:7e:66:58:d0:a1:ea:46:8d:81:9d:5c:db:40:
                    37:f6:9d:0a:0d:7c:fd:47:8c:5b:60:8e:83:54:28:
                    44:ac:46:0d:03:31:b6:9b:6b:79:75:16:c7:69:cd:
                    ee:2f:0a:2f:2f:1b:f0:e4:00:fd:5a:88:e2:f3:71:
                    8a:1d:51:dd:12:c3:61:78:7a:20:ea:03:09:47:7c:
                    10:08:28:32:8c:ce:0e:34:ef:2b:54:2b:c1:e4:c6:
                    3c:aa:ad:1b:4a:2f:89:bb:3f:38:b1:d2:2b:75:c2:
                    39:ad:bb:49:54:8b:36:3f:1d:81:34:63:a0:53:a6:
                    db:d8:d0:6f:d8:a4:a5:bd:27:91:20:94:27:33:ff:
                    f9:ce:5b:18:02:c0:48:dc:f2:f7:ac:48:da:28:2f:
                    f7:b5:f3:50:c7:13:6f:e4:45:21:cc:55:90:cc:5a:
                    22:7d:12:25:0e:d4:27:74:2c:17:ad:c5:1e:60:3d:
                    f3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A2:CF:45:99:B7:CE:62:05:AA:5C:26:7D:6E:30:A7:ED:CD:0E:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/58865ef3-3eca-32e6-97a6-e2fdbae889c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b300:fd0e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:5d:72:98:43:50:8d:7e:db:9f:4c:4e:cb:6d:6d:37:73:62:
         e2:08:7e:fd:48:bf:8f:9d:62:9a:9b:0e:63:80:dc:24:33:34:
         51:21:ec:20:38:44:c5:67:40:aa:5c:f2:e0:7b:c9:45:85:1f:
         16:5a:eb:dc:b9:52:35:7c:27:d0:a6:94:2f:7c:7e:00:4c:08:
         40:90:0c:04:05:df:86:5f:d5:da:e2:b9:70:42:1a:f1:2a:6c:
         45:87:08:d0:a9:fe:10:0d:c4:80:52:b0:c4:85:bd:33:89:66:
         c3:5d:fd:e5:ed:25:8b:b2:b8:19:85:cb:73:bc:2f:75:50:eb:
         e3:a1:63:a3:7c:91:9e:1e:d7:2f:45:0f:be:c1:71:86:a5:24:
         52:44:bb:25:da:f3:b4:f5:49:40:59:81:ef:8e:da:90:41:30:
         4d:0e:3a:70:f6:35:99:33:e8:1f:3a:21:d4:6a:29:da:28:d7:
         3f:4c:7f:08:88:9c:4f:98:8e:35:48:41:29:4a:96:a6:9e:7c:
         7d:09:30:73:c4:c1:2f:b5:54:cc:a4:9c:b1:7e:a2:a1:7c:01:
         22:66:db:cd:99:1e:29:4b:9c:8d:c9:51:d1:68:c4:b8:6c:3e:
         61:f8:2b:e4:72:c1:46:8a:30:6b:f1:fe:6d:ab:27:13:d2:82:
         74:06:24:54
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JcupKd05IeLcDcfAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3
MGE4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OTE0ODdhMWEtNWM3NS00MGFlLWFmZTctMmI5MGZhYTg2ZTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihj7WH/yCm5obsbdpqxqlEDYgfkiqUfD8joX
evY04DFKxX2UB+rF4eQtRsuMghn0gthjpyvVt1PsCfimUR0ruJMYBQU7JilCopX2
sX5mWNCh6kaNgZ1c20A39p0KDXz9R4xbYI6DVChErEYNAzG2m2t5dRbHac3uLwov
Lxvw5AD9Woji83GKHVHdEsNheHog6gMJR3wQCCgyjM4ONO8rVCvB5MY8qq0bSi+J
uz84sdIrdcI5rbtJVIs2Px2BNGOgU6bb2NBv2KSlvSeRIJQnM//5zlsYAsBI3PL3
rEjaKC/3tfNQxxNv5EUhzFWQzFoifRIlDtQndCwXrcUeYD3zRQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPSiz0WZt85iBapcJn1uMKftzQ5mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk
YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvNTg4NjVlZjMtM2VjYS0z
MmU2LTk3YTYtZTJmZGJhZTg4OWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi
YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0
NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz
YTM5NDcwYTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgezAP0O
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJpdcphDUI1+259MTsttbTdzYuIIfv1Iv4+dYpqbDmOA3CQzNFEh
7CA4RMVnQKpc8uB7yUWFHxZa69y5UjV8J9CmlC98fgBMCECQDAQF34Zf1driuXBC
GvEqbEWHCNCp/hANxIBSsMSFvTOJZsNd/eXtJYuyuBmFy3O8L3VQ6+OhY6N8kZ4e
1y9FD77BcYalJFJEuyXa87T1SUBZge+O2pBBME0OOnD2NZkz6B86IdRqKdoo1z9M
fwiInE+YjjVIQSlKlqaefH0JMHPEwS+1VMyknLF+oqF8ASJm282ZHilLnI3JUdFo
xLhsPmH4K+RywUaKMGvx/m2rJxPSgnQGJFQ=
-----END CERTIFICATE-----
Generated at Wed Oct 21 21:08:08 2026 by rpki-client