Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa
File:                     2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa (raw, json)
Hash identifier:          jwBTg1n+iigL8dUvGN797l4+wHf9Q1FniCXe7Jio0XY=
Subject key identifier:   CE:FB:80:67:EE:04:6B:CA:87:03:5D:C1:78:43:5F:07:31:10:F7:A9
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F4328584F4F081883B1718737482C0700
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     61112
IP address blocks:        2602:fa4f:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:18:83:b1:71:87:37:48:2c:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=ab2bb226-9586-4def-9440-4630291b9c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:42:29:81:10:4d:c5:57:fb:f9:86:11:8e:1d:
                    29:bb:39:34:ac:36:0c:b2:d8:83:96:19:ef:a7:7b:
                    86:d3:c9:14:59:9b:81:a0:64:db:c7:5e:3e:82:f1:
                    7e:b8:7e:9a:f6:13:48:59:1d:b7:cf:a8:8e:85:20:
                    da:9f:44:2f:28:43:f2:b1:18:af:42:e8:bf:de:01:
                    5b:87:93:d7:e6:2d:c5:5c:97:34:9c:53:f0:37:78:
                    aa:33:8c:3f:1d:39:d2:15:18:4e:e3:8a:e6:a9:4c:
                    fe:89:b9:5e:0f:57:71:20:46:59:74:13:6e:a3:6b:
                    79:30:23:d1:7f:43:19:f1:38:69:72:20:9f:c2:4b:
                    0c:4c:f0:c3:cf:8a:a8:10:60:99:c4:78:e2:ba:ad:
                    54:7b:48:d5:4d:b7:be:e7:69:31:18:cb:f7:77:fd:
                    a3:2b:e8:c3:67:63:34:77:0a:49:62:08:9a:ce:b7:
                    9e:2b:c1:6a:f8:83:1f:de:cf:0a:e6:e8:c7:13:77:
                    92:ea:cc:45:2b:da:b8:53:cb:31:9b:9a:fd:dc:e1:
                    02:23:16:7c:b3:88:a7:66:16:71:e9:eb:b8:e5:4a:
                    c6:d6:d1:e0:20:fd:bb:3a:07:f3:a1:d2:00:85:f7:
                    5b:15:6d:af:b1:db:f4:fe:bd:cf:b2:36:4f:fd:f1:
                    af:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FB:80:67:EE:04:6B:CA:87:03:5D:C1:78:43:5F:07:31:10:F7:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:9b:ee:5a:2a:02:02:17:3d:07:f6:b4:cd:e4:45:ef:93:38:
         82:86:a2:f6:16:7f:e2:f3:6b:e7:e6:9f:bd:e2:e4:a0:0c:7b:
         68:04:82:32:4d:ae:94:30:0a:e6:ba:27:62:de:0a:48:fa:48:
         a2:e7:a3:26:b6:ab:b4:5f:fa:3b:d4:0e:22:da:20:b2:ca:ab:
         02:c7:6d:ea:61:d7:73:eb:fa:fe:ee:d4:42:8b:a5:2c:c9:61:
         f8:2e:b3:ec:db:cd:b8:b5:b5:50:5c:8a:d2:68:16:12:c8:31:
         20:60:cb:a2:5d:82:87:51:07:4e:c3:66:90:aa:64:2d:26:2a:
         d9:5c:f9:f3:53:ac:f6:5f:93:93:05:9e:5c:b3:77:c0:fd:92:
         12:7f:0f:07:b3:da:1f:fa:b4:0f:b6:02:d8:ad:c8:89:7f:9c:
         04:2b:3e:ee:d3:d2:11:61:14:b6:37:7a:1c:fd:62:15:f4:d1:
         7f:08:92:7f:40:d3:ab:eb:3f:3e:bc:12:cc:8b:4b:99:f3:d1:
         b1:0a:31:0b:34:37:33:8e:af:3f:76:6b:2e:6c:2a:bd:16:28:
         9d:9d:8e:1c:40:48:fa:80:f7:9a:7f:a6:c1:37:92:91:84:c7:
         f7:03:b1:5d:32:19:9d:d8:25:4e:73:88:e8:17:d4:e3:b2:0c:
         17:b9:b2:63
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9PCBiDsXGHN0gsBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTllOGUxYmYtOGRhNy00ZmJjLTk1ODgtNTc0OGU1NjY2
YmY3MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
YWIyYmIyMjYtOTU4Ni00ZGVmLTk0NDAtNDYzMDI5MWI5YzZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukIpgRBNxVf7+YYRjh0puzk0rDYMstiDlhnv
p3uG08kUWZuBoGTbx14+gvF+uH6a9hNIWR23z6iOhSDan0QvKEPysRivQui/3gFb
h5PX5i3FXJc0nFPwN3iqM4w/HTnSFRhO44rmqUz+ibleD1dxIEZZdBNuo2t5MCPR
f0MZ8ThpciCfwksMTPDDz4qoEGCZxHjiuq1Ue0jVTbe+52kxGMv3d/2jK+jDZ2M0
dwpJYgiazreeK8Fq+IMf3s8K5ujHE3eS6sxFK9q4U8sxm5r93OECIxZ8s4inZhZx
6eu45UrG1tHgIP27OgfzodIAhfdbFW2vsdv0/r3PsjZP/fGvOQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFM77gGfuBGvKhwNdwXhDXwcxEPepMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4
ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4ZTU2NjZiZjcvMmJhYmIwYTEtOWExYS0z
YmQ0LTlmMTQtZWJmNmRkMzA5Mzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTllOGUxYmYtOGRhNy00ZmJjLTk1
ODgtNTc0OGU1NjY2YmY3LzU5ZThlMWJmLThkYTctNGZiYy05NTg4LTU3NDhlNTY2
NmJmNy5jcmwwHwYDVR0jBBgwFoAUtNZDsQeUm4ue2sZQQJEbH4XciIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81OWU4ZTFiZi04ZGE3LTRmYmMtOTU4OC01NzQ4
ZTU2NjZiZjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6TwMw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEARZvuWioCAhc9B/a0zeRF75M4goai9hZ/4vNr5+afveLkoAx7aASC
Mk2ulDAK5ronYt4KSPpIouejJrartF/6O9QOItogssqrAsdt6mHXc+v6/u7UQoul
LMlh+C6z7NvNuLW1UFyK0mgWEsgxIGDLol2Ch1EHTsNmkKpkLSYq2Vz581Os9l+T
kwWeXLN3wP2SEn8PB7PaH/q0D7YC2K3IiX+cBCs+7tPSEWEUtjd6HP1iFfTRfwiS
f0DTq+s/PrwSzItLmfPRsQoxCzQ3M46vP3ZrLmwqvRYonZ2OHEBI+oD3mn+mwTeS
kYTH9wOxXTIZndglTnOI6BfU47IMF7myYw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 12:48:31 2026 by rpki-client