Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/87861e8e-e119-338a-9c76-9baa9ffaaa02.roa
File:                     87861e8e-e119-338a-9c76-9baa9ffaaa02.roa (raw, json)
Hash identifier:          7HYziyGKHQhm9OyQAaSURG/rTo/eLZHlWgnWZp95pKw=
Subject key identifier:   30:2F:8B:4E:56:70:B3:DD:38:8C:4E:B0:CD:BB:6C:FC:73:46:68:6C
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584EA797CD2DFFA542A26CFFE680
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/87861e8e-e119-338a-9c76-9baa9ffaaa02.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     41095
IP address blocks:        2601:2060::/29 maxlen: 32
                          2601:2080::/29 maxlen: 32
                          2601:20e0::/29 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:cd:2d:ff:a5:42:a2:6c:ff:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8cc0a44d-caca-4e2a-b8ab-b5471c125fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d4:40:99:6b:7c:df:44:37:23:c6:72:5a:76:
                    97:e6:21:1b:46:ff:f3:59:1f:72:f5:1a:21:c6:2c:
                    e2:a0:9c:65:f8:e8:5a:8f:5c:08:c8:89:e7:30:fe:
                    3a:d2:25:06:98:c7:4b:30:2d:45:f3:4c:e7:f4:27:
                    3c:3a:4b:d2:4f:69:10:d7:b3:22:2b:be:fa:1e:b0:
                    00:5b:8d:d0:51:1c:2b:8c:00:8e:7d:ac:0f:e8:2c:
                    1a:e1:1c:07:3e:79:41:6a:0f:fe:c5:f2:87:e2:71:
                    04:15:52:a9:19:3c:a1:7e:38:28:76:31:8c:aa:3c:
                    2a:ae:0f:7d:e9:23:2b:b5:41:37:3f:3a:b6:6b:9b:
                    b9:12:22:4e:f7:5f:82:fd:b3:fb:92:54:af:ba:81:
                    00:09:1e:75:6d:94:66:03:ef:4c:51:a0:ea:ad:dc:
                    bb:14:97:25:b7:30:30:f5:ca:fc:72:84:88:d5:99:
                    2b:36:b4:76:55:65:2d:fb:95:53:41:09:64:4b:0b:
                    d6:a9:e4:96:e0:ca:91:87:18:15:9f:18:85:8f:a1:
                    14:62:af:55:b3:3b:8f:51:5f:57:27:37:6d:64:9d:
                    5d:96:76:77:2f:63:18:8b:1f:34:c6:91:e7:46:50:
                    d4:33:12:73:24:59:a8:76:31:17:93:7e:d2:12:f6:
                    52:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2F:8B:4E:56:70:B3:DD:38:8C:4E:B0:CD:BB:6C:FC:73:46:68:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/87861e8e-e119-338a-9c76-9baa9ffaaa02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:2060::/29
                  2601:2080::/29
                  2601:20e0::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:73:b8:43:e1:67:b3:13:cb:08:bf:4b:6d:8f:d6:12:77:8b:
         f5:6d:8b:2f:d3:d9:f3:b4:20:fe:7f:f2:68:f5:e3:12:0f:d9:
         fa:ec:92:40:32:af:5b:66:1c:71:96:ee:7f:33:ed:74:f0:e8:
         56:3f:ba:21:ee:03:81:48:36:fc:8a:4b:2f:1c:cc:df:7f:f8:
         94:1e:b5:97:0d:dc:ca:12:f0:98:25:d3:9b:13:23:4a:8c:d0:
         17:d0:0c:9d:9d:f1:23:52:62:c1:72:29:ad:9e:ad:56:60:47:
         6e:1f:f8:6e:a0:5e:7b:d6:56:1e:6a:87:dd:76:06:47:05:49:
         ff:d2:3c:4b:b6:51:60:1d:38:9a:5e:88:9c:f6:3b:a7:2a:e8:
         2b:ec:4c:c3:3c:44:5e:bb:f2:94:74:8c:b1:ec:16:23:1d:23:
         90:56:78:33:d4:5c:e9:b1:37:bb:4f:ba:70:c5:df:12:c6:d6:
         19:ad:74:98:a7:4d:96:71:b3:2d:40:a9:64:90:3a:df:5b:2c:
         85:a5:78:26:bd:bf:f5:f8:fe:06:7e:35:76:7e:ee:ad:53:fb:
         9b:29:e2:ac:7a:69:19:1c:83:87:76:84:b7:82:59:60:0a:6f:
         85:68:b5:82:46:0d:af:74:9d:23:b6:7d:8d:66:9d:15:fc:de:
         62:9d:ab:98
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE6nl80t/6VComz/5oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OGNjMGE0NGQtY2FjYS00ZTJhLWI4YWItYjU0NzFjMTI1ZmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNRAmWt830Q3I8ZyWnaX5iEbRv/zWR9y9Roh
xizioJxl+Ohaj1wIyInnMP460iUGmMdLMC1F80zn9Cc8OkvST2kQ17MiK776HrAA
W43QURwrjACOfawP6Cwa4RwHPnlBag/+xfKH4nEEFVKpGTyhfjgodjGMqjwqrg99
6SMrtUE3Pzq2a5u5EiJO91+C/bP7klSvuoEACR51bZRmA+9MUaDqrdy7FJcltzAw
9cr8coSI1ZkrNrR2VWUt+5VTQQlkSwvWqeSW4MqRhxgVnxiFj6EUYq9VszuPUV9X
JzdtZJ1dlnZ3L2MYix80xpHnRlDUMxJzJFmodjEXk37SEvZSCQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFDAvi05WcLPdOIxOsM27bPxzRmhsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvODc4NjFlOGUtZTExOS0z
MzhhLTljNzYtOWJhYTlmZmFhYTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDJgEgYAMF
AyYBIIADBQMmASDgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAHNzuEPhZ7MTywi/S22P1hJ3i/Vtiy/T2fO0
IP5/8mj14xIP2frskkAyr1tmHHGW7n8z7XTw6FY/uiHuA4FINvyKSy8czN9/+JQe
tZcN3MoS8Jgl05sTI0qM0BfQDJ2d8SNSYsFyKa2erVZgR24f+G6gXnvWVh5qh912
BkcFSf/SPEu2UWAdOJpeiJz2O6cq6CvsTMM8RF678pR0jLHsFiMdI5BWeDPUXOmx
N7tPunDF3xLG1hmtdJinTZZxsy1AqWSQOt9bLIWleCa9v/X4/gZ+NXZ+7q1T+5sp
4qx6aRkcg4d2hLeCWWAKb4VotYJGDa90nSO2fY1mnRX83mKdq5g=
-----END CERTIFICATE-----
Generated at Wed Aug 26 18:01:06 2026 by rpki-client