Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6/92beba4d-6f6f-3b2e-89fe-acab0cbe7a93.roa
File:                     92beba4d-6f6f-3b2e-89fe-acab0cbe7a93.roa (raw, json)
Hash identifier:          3M7M6bSaCWwuEiL8rtQB1ZGyqtWBZjtiIJMIbg3Rzgc=
Subject key identifier:   E7:73:66:A3:73:53:34:E8:F2:75:E3:39:18:83:80:1A:5D:AC:0D:15
Certificate issuer:       /CN=b58aaf28-235a-43af-9bdf-f824731e27c6
Certificate serial:       010D0C9F4328584EA79045A33CA5CBD03CEC4D80
Authority key identifier: 59:6D:4D:F3:0F:79:3F:BC:27:7F:CC:07:45:87:2B:14:97:01:5B:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6/92beba4d-6f6f-3b2e-89fe-acab0cbe7a93.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     400424
IP address blocks:        2606:bac0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6/b58aaf28-235a-43af-9bdf-f824731e27c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6/b58aaf28-235a-43af-9bdf-f824731e27c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:45:a3:3c:a5:cb:d0:3c:ec:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b58aaf28-235a-43af-9bdf-f824731e27c6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a4b7f9e2-3472-4330-8639-9f5bfa47a6ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:52:a1:5e:f3:64:f1:44:26:12:fe:b7:a9:42:
                    10:eb:78:2a:06:fa:d3:d3:18:c6:68:fa:37:27:b3:
                    be:51:91:cf:ab:57:f2:4f:57:a6:f3:db:98:aa:8d:
                    88:e8:1e:12:83:1b:18:fd:c6:f1:a0:61:e6:bb:05:
                    e8:0b:0b:0b:6d:32:d5:99:78:93:76:ae:fb:ea:0f:
                    cc:cc:ac:c8:87:82:b1:92:d7:55:48:91:d1:c4:0f:
                    cb:dc:b9:c1:aa:7b:7c:42:8a:19:f4:e4:94:52:27:
                    6e:53:25:a8:34:b1:49:0b:fd:42:aa:a8:c0:fc:37:
                    c7:7b:32:d9:46:27:2f:10:71:82:4f:92:0b:3c:54:
                    e4:55:e0:9a:d9:ad:d8:7a:ea:d6:55:e1:e0:21:00:
                    41:6a:61:19:f2:0c:95:e0:58:48:85:34:f6:2c:40:
                    05:48:39:d5:33:be:b0:6f:0f:b4:ca:e2:db:32:e7:
                    78:78:5a:03:df:34:a2:e3:0c:11:fa:75:f5:8b:ea:
                    e7:21:ce:5f:c4:d1:29:c9:3c:9c:c2:28:0b:25:14:
                    d8:f6:c1:dc:6b:ac:94:4b:c2:dc:24:08:af:e7:17:
                    c6:b0:ad:2a:15:c9:e4:90:64:6a:25:9c:2a:f0:56:
                    56:c7:08:2b:b4:d6:04:fc:b3:ec:2e:65:3e:6e:58:
                    9e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:73:66:A3:73:53:34:E8:F2:75:E3:39:18:83:80:1A:5D:AC:0D:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6/92beba4d-6f6f-3b2e-89fe-acab0cbe7a93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6/b58aaf28-235a-43af-9bdf-f824731e27c6.crl

            X509v3 Authority Key Identifier:
                keyid:59:6D:4D:F3:0F:79:3F:BC:27:7F:CC:07:45:87:2B:14:97:01:5B:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b58aaf28-235a-43af-9bdf-f824731e27c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:46:c2:2b:6f:a7:d5:67:ae:72:61:2a:05:b2:eb:26:62:9f:
         67:d7:ba:3b:ab:68:e7:96:ed:91:d2:6b:1f:70:79:00:4c:da:
         6d:f6:67:7b:01:40:e3:97:88:e0:fc:2a:fc:dc:f3:93:b6:e3:
         8a:d8:29:39:79:67:9a:9e:87:a9:81:b3:96:3c:10:a5:3f:b4:
         bb:b7:4b:5b:1b:42:12:5c:b5:f6:56:b1:63:ba:11:06:5b:b2:
         d0:76:f6:63:0d:d0:94:a7:63:35:72:e0:ca:57:05:e0:38:4e:
         6a:44:9d:e1:8e:f4:f6:87:5d:ef:e7:5b:28:2b:75:fd:60:6b:
         95:98:51:af:87:95:8c:ef:54:24:3c:65:b4:29:1a:e9:8e:d8:
         6b:34:4d:1f:c0:28:49:00:7e:7c:26:e8:b3:b5:ae:af:fb:4b:
         1c:ea:9e:36:3f:c6:28:3e:84:2a:8a:be:07:ce:fe:86:f1:04:
         ee:ee:70:37:82:7f:db:67:67:34:c4:e3:3d:82:bf:eb:da:5e:
         86:ce:43:ce:58:4f:f8:9e:94:ef:a1:09:0e:24:76:b8:24:37:
         36:b6:a5:cb:82:e5:03:09:7c:b1:7b:ea:a3:ab:71:e6:0a:14:
         01:48:2d:a6:ab:40:39:54:de:de:3a:ac:a3:a6:fc:a3:26:ca:
         70:34:b0:10
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6nkEWjPKXL0DzsTYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU4YWFmMjgtMjM1YS00M2FmLTliZGYtZjgyNDczMWUy
N2M2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YTRiN2Y5ZTItMzQ3Mi00MzMwLTg2MzktOWY1YmZhNDdhNmVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFKhXvNk8UQmEv63qUIQ63gqBvrT0xjGaPo3
J7O+UZHPq1fyT1em89uYqo2I6B4SgxsY/cbxoGHmuwXoCwsLbTLVmXiTdq776g/M
zKzIh4KxktdVSJHRxA/L3LnBqnt8QooZ9OSUUiduUyWoNLFJC/1CqqjA/DfHezLZ
RicvEHGCT5ILPFTkVeCa2a3YeurWVeHgIQBBamEZ8gyV4FhIhTT2LEAFSDnVM76w
bw+0yuLbMud4eFoD3zSi4wwR+nX1i+rnIc5fxNEpyTycwigLJRTY9sHca6yUS8Lc
JAiv5xfGsK0qFcnkkGRqJZwq8FZWxwgrtNYE/LPsLmU+blielwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOdzZqNzUzTo8nXjORiDgBpdrA0VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iNThh
YWYyOC0yMzVhLTQzYWYtOWJkZi1mODI0NzMxZTI3YzYvOTJiZWJhNGQtNmY2Zi0z
YjJlLTg5ZmUtYWNhYjBjYmU3YTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYjU4YWFmMjgtMjM1YS00M2FmLTli
ZGYtZjgyNDczMWUyN2M2L2I1OGFhZjI4LTIzNWEtNDNhZi05YmRmLWY4MjQ3MzFl
MjdjNi5jcmwwHwYDVR0jBBgwFoAUWW1N8w95P7wnf8wHRYcrFJcBW1swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9iNThhYWYyOC0yMzVhLTQzYWYtOWJkZi1mODI0
NzMxZTI3YzYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJga6wDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAnRsIrb6fVZ65yYSoFsusmYp9n17o7q2jnlu2R0msfcHkATNpt9md7
AUDjl4jg/Cr83POTtuOK2Ck5eWeanoepgbOWPBClP7S7t0tbG0ISXLX2VrFjuhEG
W7LQdvZjDdCUp2M1cuDKVwXgOE5qRJ3hjvT2h13v51soK3X9YGuVmFGvh5WM71Qk
PGW0KRrpjthrNE0fwChJAH58Juizta6v+0sc6p42P8YoPoQqir4Hzv6G8QTu7nA3
gn/bZ2c0xOM9gr/r2l6GzkPOWE/4npTvoQkOJHa4JDc2tqXLguUDCXyxe+qjq3Hm
ChQBSC2mq0A5VN7eOqyjpvyjJspwNLAQ
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:33:39 2026 by rpki-client