Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b58d872c-3c14-3486-aba9-7e854afd7619.roa
File:                     b58d872c-3c14-3486-aba9-7e854afd7619.roa (raw, json)
Hash identifier:          MPNf0W5cNkHuEXWtysjSeBHkFq3pz+r8ZJhYWnpSj0c=
Subject key identifier:   C4:CE:48:D8:C2:43:C8:F6:74:B8:17:B8:E2:8F:D8:87:C5:A6:CA:F2
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584EA787EEB39BB0DA03B1DED120
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b58d872c-3c14-3486-aba9-7e854afd7619.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     5769
IP address blocks:        216.113.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:ee:b3:9b:b0:da:03:b1:de:d1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b6f79788-ee67-468a-8b2a-285fddc3b94d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7c:3b:64:fe:d9:95:f9:37:7e:f2:68:ff:18:
                    b1:fe:79:a2:c2:78:84:e4:79:a4:35:28:6a:5b:9b:
                    9c:dd:e1:28:6a:ef:45:1b:b1:41:88:19:4a:6c:55:
                    d6:fc:20:78:66:c0:eb:7e:69:9c:6b:2c:a5:60:84:
                    0c:64:f1:11:eb:76:23:57:9f:dc:e7:cc:ca:aa:6d:
                    ed:f1:a8:db:f7:ef:f8:53:24:01:41:1e:58:34:e4:
                    3a:ab:08:fd:33:7f:f7:e0:ab:9c:09:a8:56:a8:f4:
                    08:6f:78:e9:4d:c8:5e:2b:b4:bd:3e:e2:23:9b:d8:
                    b9:44:22:9e:3d:f0:4d:3b:38:49:85:80:01:6f:13:
                    0e:21:08:83:39:28:9e:f1:37:6f:70:34:1c:7a:51:
                    3e:25:cb:4e:8b:0e:b5:b9:84:cd:b9:ee:b6:d2:d0:
                    48:16:64:64:28:87:12:34:47:82:31:6a:1d:5d:5f:
                    d7:4a:5d:c0:4e:71:38:a3:86:f2:0d:bc:4f:05:f0:
                    da:69:a2:77:18:55:25:97:47:fd:fa:f7:6d:17:e3:
                    8d:18:21:1b:4b:c2:38:06:c3:85:ce:ba:a2:ea:88:
                    d5:65:57:36:84:6d:e3:cc:ca:81:db:23:8f:f4:ad:
                    ce:61:f9:5c:b3:50:ac:16:c6:fc:c8:60:2d:37:e2:
                    df:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CE:48:D8:C2:43:C8:F6:74:B8:17:B8:E2:8F:D8:87:C5:A6:CA:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b58d872c-3c14-3486-aba9-7e854afd7619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.113.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:a2:ca:ac:c4:17:2c:6e:50:ed:1f:b3:36:bd:19:f7:51:68:
         6f:b5:eb:05:97:8f:b8:d6:d4:df:62:07:e4:d3:8f:bd:de:dd:
         b3:22:be:da:95:42:d3:25:bf:c1:1a:05:3c:c9:9f:7e:e3:05:
         d4:f2:b5:c3:ff:11:13:2d:9b:c9:5c:2d:43:e1:3d:09:0b:f2:
         09:55:e5:f4:48:b4:dc:b4:84:bb:05:b8:2a:3b:eb:4b:a7:76:
         6e:58:69:f1:14:2b:f2:c9:a0:ad:23:e0:ca:75:a3:56:b5:b2:
         56:d6:e3:4d:76:65:5a:b8:da:0c:05:d7:ef:af:86:af:2a:82:
         18:c5:47:77:35:39:0b:73:cd:69:e9:e9:78:69:04:6b:d2:44:
         2b:99:dd:29:79:79:4f:b1:29:96:ed:00:89:87:e2:03:96:c5:
         05:e0:97:12:43:58:d7:27:b8:e6:7f:a6:0e:0f:56:39:96:d5:
         f2:33:84:42:9a:d5:ef:b1:47:61:e4:4d:d0:54:41:3e:cc:63:
         c2:a1:01:88:bc:72:18:48:d9:0b:77:21:1b:51:80:ce:a1:e8:
         62:0e:fc:32:2d:41:99:dd:21:e8:de:95:fc:18:f7:34:55:70:
         e8:56:95:9d:11:47:43:86:cd:08:1c:68:e3:fd:af:24:81:25:
         d3:52:97:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh+6zm7DaA7He0SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YjZmNzk3ODgtZWU2Ny00NjhhLThiMmEtMjg1ZmRkYzNiOTRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXw7ZP7Zlfk3fvJo/xix/nmiwniE5HmkNShq
W5uc3eEoau9FG7FBiBlKbFXW/CB4ZsDrfmmcayylYIQMZPER63YjV5/c58zKqm3t
8ajb9+/4UyQBQR5YNOQ6qwj9M3/34KucCahWqPQIb3jpTcheK7S9PuIjm9i5RCKe
PfBNOzhJhYABbxMOIQiDOSie8TdvcDQcelE+JctOiw61uYTNue620tBIFmRkKIcS
NEeCMWodXV/XSl3ATnE4o4byDbxPBfDaaaJ3GFUll0f9+vdtF+ONGCEbS8I4BsOF
zrqi6ojVZVc2hG3jzMqB2yOP9K3OYflcs1CsFsb8yGAtN+LfmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMTOSNjCQ8j2dLgXuOKP2IfFpsryMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvYjU4ZDg3MmMtM2MxNC0z
NDg2LWFiYTktN2U4NTRhZmQ3NjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HE8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACiiyqzEFyxuUO0fsza9GfdRaG+16wWXj7jW1N9iB+TTj73e3bMivtqV
QtMlv8EaBTzJn37jBdTytcP/ERMtm8lcLUPhPQkL8glV5fRItNy0hLsFuCo760un
dm5YafEUK/LJoK0j4Mp1o1a1slbW4012ZVq42gwF1++vhq8qghjFR3c1OQtzzWnp
6XhpBGvSRCuZ3Sl5eU+xKZbtAImH4gOWxQXglxJDWNcnuOZ/pg4PVjmW1fIzhEKa
1e+xR2HkTdBUQT7MY8KhAYi8chhI2Qt3IRtRgM6h6GIO/DItQZndIejelfwY9zRV
cOhWlZ0RR0OGzQgcaOP9rySBJdNSlzA=
-----END CERTIFICATE-----
Generated at Sat Aug 8 22:41:04 2026 by rpki-client