Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/58ea7f89-b5b6-3671-a6c0-811e6620195c.roa
File:                     58ea7f89-b5b6-3671-a6c0-811e6620195c.roa (raw, json)
Hash identifier:          5hdmP8MtBcluREwqNQgdqNxb1Q7YhcinJ7IjRSLi0mM=
Subject key identifier:   73:3E:CE:CF:7F:E0:12:4D:B6:03:62:6C:5A:94:27:36:D6:B2:D6:E1
Certificate issuer:       /CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
Certificate serial:       010D0C9F4328584EAD1C52DC7724FDA40EA9EF00
Authority key identifier: ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/58ea7f89-b5b6-3671-a6c0-811e6620195c.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     54885
IP address blocks:        2601:3000::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:52:dc:77:24:fd:a4:0e:a9:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=89ed892b-75fe-4231-9483-3836f1a7ed32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:29:0d:1b:d4:5d:79:72:46:f8:b4:d6:51:eb:
                    a8:c3:b0:a9:8d:c0:8b:be:03:3a:fa:93:b4:8f:43:
                    18:ca:4a:65:a9:05:66:d9:67:d9:d2:b2:f0:3e:16:
                    ca:ed:d4:d7:f1:9f:5b:c1:ea:d8:54:c3:e7:b5:5e:
                    d8:59:eb:bc:26:45:27:9d:4b:6a:df:f8:36:5d:b6:
                    bd:5d:91:01:fd:63:99:97:5e:d5:8c:68:cf:25:6f:
                    b5:57:ab:0b:52:78:09:25:3c:de:c5:e4:da:9e:e0:
                    c6:6a:a9:7c:36:d4:11:51:34:16:d8:bb:15:9e:e5:
                    94:d3:f0:7d:4d:86:cf:8c:c4:66:4a:fa:29:c7:06:
                    d1:19:df:29:26:94:b5:29:54:ad:93:67:76:36:e5:
                    ae:c1:f4:d3:51:dc:4c:08:4b:98:95:59:6c:64:61:
                    27:01:85:b4:af:ee:3d:df:5f:35:9d:51:6f:e9:5e:
                    96:95:63:75:28:bd:63:18:ac:59:7e:da:46:a1:cd:
                    df:93:39:ac:cf:0f:41:33:34:38:99:3f:04:70:bd:
                    f2:48:c7:d8:ba:6e:5c:a0:1c:53:a3:57:43:b2:22:
                    8d:d7:71:db:6a:21:ea:a4:d6:34:56:99:20:c1:58:
                    27:b5:20:e1:e6:ee:99:1a:79:ac:37:d6:83:84:a6:
                    8b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3E:CE:CF:7F:E0:12:4D:B6:03:62:6C:5A:94:27:36:D6:B2:D6:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/58ea7f89-b5b6-3671-a6c0-811e6620195c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl

            X509v3 Authority Key Identifier:
                keyid:ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:3000::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:fc:ee:c0:71:37:06:35:4c:8c:a9:73:6e:f3:8d:e5:61:ac:
         b3:66:8b:9a:9b:5a:ac:73:c2:8d:07:c8:e2:db:ef:95:22:00:
         11:7a:cb:90:3d:47:f9:9d:eb:14:93:8d:01:a8:03:b7:7d:1a:
         3f:c8:df:35:85:f5:60:2a:69:c4:51:0a:67:8f:ed:81:03:13:
         59:45:38:4e:32:ed:26:b7:71:f4:04:21:e1:5a:b0:ab:83:80:
         ee:69:91:ff:fc:0d:02:42:44:3e:bb:70:da:b8:4e:ca:24:bb:
         b5:33:1b:0d:b0:a4:ff:56:e8:6b:6d:c5:5a:4a:ed:5e:7e:9f:
         c4:79:5b:bb:cf:7f:ba:61:5a:77:fd:67:09:09:0a:65:d6:fa:
         9c:b0:84:a4:0f:7c:67:3e:16:90:ff:bf:2c:26:7e:38:3b:c1:
         7c:6f:fd:dc:a4:cd:46:40:cc:ac:8f:01:a1:f3:da:d9:b9:5a:
         c3:9b:89:b0:f4:da:0c:cc:f9:38:98:9b:d7:ac:52:da:c0:97:
         9e:0d:7e:d4:24:f4:b2:85:2c:a0:38:f8:52:cc:be:d2:ed:a0:
         08:de:84:e0:82:9d:12:c5:a7:00:6b:39:9f:a9:7d:22:a4:76:
         e8:a0:a5:c2:9e:6a:ed:34:01:75:17:bd:35:59:d5:b9:1f:5b:
         94:76:cb:e0
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6tHFLcdyT9pA6p7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWE2MzYxZDItYmNlNy00MDlhLThmMTktZGRkODFhMWY2
MjQ5MB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk
ODllZDg5MmItNzVmZS00MjMxLTk0ODMtMzgzNmYxYTdlZDMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSkNG9RdeXJG+LTWUeuow7CpjcCLvgM6+pO0
j0MYykplqQVm2WfZ0rLwPhbK7dTX8Z9bwerYVMPntV7YWeu8JkUnnUtq3/g2Xba9
XZEB/WOZl17VjGjPJW+1V6sLUngJJTzexeTanuDGaql8NtQRUTQW2LsVnuWU0/B9
TYbPjMRmSvopxwbRGd8pJpS1KVStk2d2NuWuwfTTUdxMCEuYlVlsZGEnAYW0r+49
3181nVFv6V6WlWN1KL1jGKxZftpGoc3fkzmszw9BMzQ4mT8EcL3ySMfYum5coBxT
o1dDsiKN13HbaiHqpNY0VpkgwVgntSDh5u6ZGnmsN9aDhKaLXQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHM+zs9/4BJNtgNibFqUJzbWstbhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YTYz
NjFkMi1iY2U3LTQwOWEtOGYxOS1kZGQ4MWExZjYyNDkvNThlYTdmODktYjViNi0z
NjcxLWE2YzAtODExZTY2MjAxOTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWE2MzYxZDItYmNlNy00MDlhLThm
MTktZGRkODFhMWY2MjQ5LzlhNjM2MWQyLWJjZTctNDA5YS04ZjE5LWRkZDgxYTFm
NjI0OS5jcmwwHwYDVR0jBBgwFoAU7aJGTlftF2Y9jLAvYYv0eGpLW7kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YTYzNjFkMi1iY2U3LTQwOWEtOGYxOS1kZGQ4
MWExZjYyNDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgEwADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA8/O7AcTcGNUyMqXNu843lYayzZouam1qsc8KNB8ji2++VIgAResuQ
PUf5nesUk40BqAO3fRo/yN81hfVgKmnEUQpnj+2BAxNZRThOMu0mt3H0BCHhWrCr
g4DuaZH//A0CQkQ+u3DauE7KJLu1MxsNsKT/VuhrbcVaSu1efp/EeVu7z3+6YVp3
/WcJCQpl1vqcsISkD3xnPhaQ/78sJn44O8F8b/3cpM1GQMysjwGh89rZuVrDm4mw
9NoMzPk4mJvXrFLawJeeDX7UJPSyhSygOPhSzL7S7aAI3oTggp0SxacAazmfqX0i
pHbooKXCnmrtNAF1F701WdW5H1uUdsvg
-----END CERTIFICATE-----
Generated at Thu Aug 13 22:01:17 2026 by rpki-client