Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ba99bc9b-3a0b-3626-a279-87f8661a774c.roa
File:                     ba99bc9b-3a0b-3626-a279-87f8661a774c.roa (raw, json)
Hash identifier:          Ftwo+UcDjqgxh0+MjPoQB5CQQVBvsWOnR+zFCzSvNYo=
Subject key identifier:   96:CE:91:EB:17:4E:3D:21:86:8C:B5:C1:EA:0D:D4:DF:C0:64:CE:47
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584EE4F1F3086CF5C37FCB99CEC0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ba99bc9b-3a0b-3626-a279-87f8661a774c.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     64286
IP address blocks:        2606:f18d::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:f3:08:6c:f5:c3:7f:cb:99:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=9f2d2159-2f93-4e29-8a84-22c71449b570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7a:d9:86:78:fb:a4:cf:f3:c5:83:86:65:c6:
                    32:d9:38:76:31:3b:98:4d:53:e8:fd:8a:db:5e:bc:
                    8d:96:7f:7a:b8:73:d6:d6:dc:8c:8c:98:fc:57:54:
                    7f:f1:f8:3a:43:6f:e8:02:a9:b4:32:91:5e:cf:56:
                    c3:72:04:ae:97:e1:24:99:0a:d7:e1:a6:7b:78:e3:
                    63:f2:19:e0:cd:c3:b7:28:c2:3e:55:13:d7:f6:36:
                    08:4d:ca:7c:37:fe:80:db:80:b2:72:73:6b:fd:33:
                    3d:33:23:cc:68:89:cf:21:22:bb:b3:4d:32:a4:ca:
                    92:3c:14:78:81:20:d9:5d:a4:7b:e4:ff:54:21:6f:
                    db:ca:4c:60:69:fd:58:c0:68:30:62:89:7e:3d:89:
                    54:3f:49:c8:2e:d1:fa:10:55:8a:cf:7b:4b:40:21:
                    1f:a7:e9:ad:7c:8e:bf:4f:f5:06:b2:29:a0:3d:7e:
                    5d:3e:5d:b5:99:66:d2:9e:7b:ca:5d:2f:9d:b0:e5:
                    c1:30:e0:65:39:d8:13:30:ff:23:5c:43:fa:09:3e:
                    d6:33:24:10:87:ac:44:35:c5:7c:82:47:b0:f7:4d:
                    c8:d1:98:96:9f:4a:d1:b2:18:cb:24:79:89:33:92:
                    6c:17:40:9b:f6:32:f6:76:0e:64:b7:ef:e8:11:c3:
                    33:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CE:91:EB:17:4E:3D:21:86:8C:B5:C1:EA:0D:D4:DF:C0:64:CE:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ba99bc9b-3a0b-3626-a279-87f8661a774c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f18d::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:5d:f0:7c:4f:f4:95:0f:80:d9:2a:1f:c0:04:3e:cc:e2:cc:
         cb:2f:f0:48:08:74:e2:4f:94:4b:3c:f1:70:8a:01:c8:1b:26:
         9b:f1:eb:60:3b:02:4c:d2:d4:2d:2b:3d:71:56:33:a6:48:f3:
         7e:19:fd:16:2f:f7:42:25:7e:3a:ec:ed:46:3d:d9:a6:b7:e9:
         25:dc:a3:e9:74:7b:8c:90:3c:c6:8e:45:5f:f6:b9:ef:aa:0d:
         2e:49:9e:f8:94:e5:cf:bc:8d:2b:f4:bf:dc:fa:3d:6c:76:13:
         5e:60:10:2a:8c:94:cf:50:02:71:60:1d:b0:07:5b:e1:9e:ea:
         2c:31:15:49:64:52:73:45:a2:7e:8e:80:19:94:1a:90:b0:cf:
         41:a4:ad:ef:5e:3e:ee:d8:40:05:14:a0:56:27:3b:63:27:3f:
         77:6c:1d:c8:73:27:e8:a5:12:ff:8b:bb:f0:49:c8:72:15:b2:
         12:9e:c6:c8:0a:80:f9:8b:df:e2:46:bd:3c:5f:ab:ea:ef:50:
         21:db:1c:97:08:eb:66:a3:98:14:ef:99:fc:75:1f:16:13:ed:
         f6:a1:2f:a0:c2:ed:72:e1:f1:27:3c:cd:c1:2d:4e:31:c5:8c:
         fb:38:1e:fe:88:4b:17:ee:32:ba:20:8e:c6:0b:5c:4a:0f:c3:
         97:8b:23:d9
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7k8fMIbPXDf8uZzsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk
OWYyZDIxNTktMmY5My00ZTI5LThhODQtMjJjNzE0NDliNTcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHrZhnj7pM/zxYOGZcYy2Th2MTuYTVPo/Yrb
XryNln96uHPW1tyMjJj8V1R/8fg6Q2/oAqm0MpFez1bDcgSul+EkmQrX4aZ7eONj
8hngzcO3KMI+VRPX9jYITcp8N/6A24CycnNr/TM9MyPMaInPISK7s00ypMqSPBR4
gSDZXaR75P9UIW/bykxgaf1YwGgwYol+PYlUP0nILtH6EFWKz3tLQCEfp+mtfI6/
T/UGsimgPX5dPl21mWbSnnvKXS+dsOXBMOBlOdgTMP8jXEP6CT7WMyQQh6xENcV8
gkew903I0ZiWn0rRshjLJHmJM5JsF0Cb9jL2dg5kt+/oEcMz7wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJbOkesXTj0hhoy1weoN1N/AZM5HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYmE5OWJjOWItM2EwYi0z
NjI2LWEyNzktODdmODY2MWE3NzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbxjTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAdXfB8T/SVD4DZKh/ABD7M4szLL/BICHTiT5RLPPFwigHIGyab8etg
OwJM0tQtKz1xVjOmSPN+Gf0WL/dCJX467O1GPdmmt+kl3KPpdHuMkDzGjkVf9rnv
qg0uSZ74lOXPvI0r9L/c+j1sdhNeYBAqjJTPUAJxYB2wB1vhnuosMRVJZFJzRaJ+
joAZlBqQsM9BpK3vXj7u2EAFFKBWJztjJz93bB3IcyfopRL/i7vwSchyFbISnsbI
CoD5i9/iRr08X6vq71Ah2xyXCOtmo5gU75n8dR8WE+32oS+gwu1y4fEnPM3BLU4x
xYz7OB7+iEsX7jK6II7GC1xKD8OXiyPZ
-----END CERTIFICATE-----
Generated at Wed Aug 26 16:14:14 2026 by rpki-client