Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/87861e8e-e119-338a-9c76-9baa9ffaaa02.roa
File:                     87861e8e-e119-338a-9c76-9baa9ffaaa02.roa (raw, json)
Hash identifier:          7kmenLJ21LYW66mFLCGdyCdjsFBPL6cjpslIEWKqz6Q=
Subject key identifier:   46:73:E2:EE:11:0E:01:59:8E:59:FD:31:5F:3D:68:38:74:82:A2:AA
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584F498857F2896F2A00BB914200
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/87861e8e-e119-338a-9c76-9baa9ffaaa02.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     41095
IP address blocks:        2601:2060::/29 maxlen: 32
                          2601:2080::/29 maxlen: 32
                          2601:20e0::/29 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:57:f2:89:6f:2a:00:bb:91:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5dfc0687-b016-4449-8517-9033f7841229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3f:f6:9b:4b:db:fe:cf:5e:9a:ab:13:8e:5d:
                    2b:03:5a:5b:7f:ee:3a:bd:bc:89:50:d9:ee:9b:32:
                    e0:8d:a7:85:55:42:59:4f:1b:3d:90:21:09:fa:a8:
                    1f:c4:f5:f6:65:c7:5b:8d:f3:5e:b3:7d:0e:98:fc:
                    75:37:42:11:47:36:5e:53:01:ea:b7:5c:14:af:9a:
                    11:61:6a:67:ec:45:b3:16:e5:a9:18:7d:db:ef:fc:
                    e0:23:cf:cc:dd:06:d1:21:07:ee:47:f1:e9:37:a6:
                    0b:e2:57:70:1c:d8:52:fc:19:c4:02:bc:36:79:ae:
                    24:3f:92:57:d9:4e:02:5e:c0:81:f1:4e:72:fd:a4:
                    b4:78:77:25:2e:96:2e:23:e3:2c:65:16:e9:6e:6e:
                    4b:2a:7c:11:2b:5e:da:fe:04:33:52:7d:d3:9c:28:
                    4e:3d:b3:a1:86:c2:d3:15:a7:db:51:d4:81:33:30:
                    e5:83:c3:1c:4a:72:50:ce:76:9a:d4:2b:ce:b7:91:
                    4a:14:77:58:48:fc:27:75:3e:52:7f:28:4d:8a:f2:
                    40:71:33:59:7c:78:5d:8f:19:87:6f:ac:b7:54:ab:
                    8e:98:18:30:c0:62:4d:68:97:b9:6c:22:f8:3c:8c:
                    3a:69:40:9e:b4:06:08:2c:3c:a9:4b:3d:d7:cd:3b:
                    b2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:73:E2:EE:11:0E:01:59:8E:59:FD:31:5F:3D:68:38:74:82:A2:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/87861e8e-e119-338a-9c76-9baa9ffaaa02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:2060::/29
                  2601:2080::/29
                  2601:20e0::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:e9:16:47:76:35:c6:41:82:20:37:67:be:e2:e9:f5:d5:01:
         2a:fe:dc:84:08:be:6b:50:23:1b:3e:ba:9a:f5:91:f9:0d:9d:
         36:69:af:7e:e6:8e:9c:fb:34:05:73:b7:42:e4:d4:1b:b2:61:
         cd:26:e1:62:fd:42:39:36:b6:d6:2a:e2:12:a5:ad:7c:7a:13:
         12:9f:b1:c3:00:7a:34:d2:ce:2b:bc:39:50:03:0b:69:4c:bd:
         f4:77:f8:3a:f9:fb:d6:67:b0:ad:dd:e8:3d:ba:bd:b6:6c:f2:
         21:93:2c:05:e0:3c:f8:0a:be:68:a3:3e:2d:63:10:55:45:7d:
         23:37:8b:43:9c:26:6b:45:f1:eb:29:e0:86:3a:aa:9d:f9:4c:
         bd:66:13:33:f6:12:fa:69:5f:f0:e9:f7:42:b9:b6:81:fc:d7:
         f7:70:97:e0:52:56:ae:21:47:f9:5e:fc:ed:31:99:8e:2d:63:
         21:92:01:e0:4b:f2:57:12:ef:d9:aa:f0:72:bc:8a:50:83:07:
         68:25:7c:56:65:dc:cc:35:78:17:14:e8:2c:52:90:d6:e8:d9:
         99:a9:4b:66:0e:2a:32:4e:b0:d0:69:d6:4d:51:4f:d0:57:91:
         23:d9:22:a4:8a:2e:bf:6d:56:01:bc:d5:97:ca:a7:58:2a:c4:
         c3:d3:b9:7c
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE9JiFfyiW8qALuRQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NWRmYzA2ODctYjAxNi00NDQ5LTg1MTctOTAzM2Y3ODQxMjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT/2m0vb/s9emqsTjl0rA1pbf+46vbyJUNnu
mzLgjaeFVUJZTxs9kCEJ+qgfxPX2ZcdbjfNes30OmPx1N0IRRzZeUwHqt1wUr5oR
YWpn7EWzFuWpGH3b7/zgI8/M3QbRIQfuR/HpN6YL4ldwHNhS/BnEArw2ea4kP5JX
2U4CXsCB8U5y/aS0eHclLpYuI+MsZRbpbm5LKnwRK17a/gQzUn3TnChOPbOhhsLT
FafbUdSBMzDlg8McSnJQznaa1CvOt5FKFHdYSPwndT5SfyhNivJAcTNZfHhdjxmH
b6y3VKuOmBgwwGJNaJe5bCL4PIw6aUCetAYILDypSz3XzTuyWwIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFEZz4u4RDgFZjln9MV89aDh0gqKqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvODc4NjFlOGUtZTExOS0z
MzhhLTljNzYtOWJhYTlmZmFhYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDJgEgYAMF
AyYBIIADBQMmASDgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAFLpFkd2NcZBgiA3Z77i6fXVASr+3IQIvmtQ
Ixs+upr1kfkNnTZpr37mjpz7NAVzt0Lk1BuyYc0m4WL9Qjk2ttYq4hKlrXx6ExKf
scMAejTSziu8OVADC2lMvfR3+Dr5+9ZnsK3d6D26vbZs8iGTLAXgPPgKvmijPi1j
EFVFfSM3i0OcJmtF8esp4IY6qp35TL1mEzP2EvppX/Dp90K5toH81/dwl+BSVq4h
R/le/O0xmY4tYyGSAeBL8lcS79mq8HK8ilCDB2glfFZl3Mw1eBcU6CxSkNbo2Zmp
S2YOKjJOsNBp1k1RT9BXkSPZIqSKLr9tVgG81ZfKp1gqxMPTuXw=
-----END CERTIFICATE-----
Generated at Mon Oct 12 22:24:23 2026 by rpki-client