Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76/13ddeb58-f5dd-351c-b87f-c2a259df72fb.roa
File:                     13ddeb58-f5dd-351c-b87f-c2a259df72fb.roa (raw, json)
Hash identifier:          iGQQL4vDobxOKAJ6NUIQL3Qu980lV/d8EgLVaztdRLg=
Subject key identifier:   3A:06:D7:56:EB:20:D3:8A:B4:51:B4:31:E8:7E:6C:45:35:1A:08:66
Certificate issuer:       /CN=b0b793c2-6ed4-4642-8683-e5b61e8d9f76
Certificate serial:       010D0C9F4328584F9BCDF04B9E6027F91DE11D40
Authority key identifier: 54:03:5D:9D:C6:C9:A8:AC:72:F6:C0:58:84:A6:E7:7C:07:BA:38:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76/13ddeb58-f5dd-351c-b87f-c2a259df72fb.roa
Signing time:             Sat 24 Oct 2026 13:00:12 +0000
ROA not before:           Sat 24 Oct 2026 13:00:12 +0000
ROA not after:            Fri 22 Jan 2027 14:00:12 +0000
asID:                     397301
IP address blocks:        2607:7580::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76/b0b793c2-6ed4-4642-8683-e5b61e8d9f76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76/b0b793c2-6ed4-4642-8683-e5b61e8d9f76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9b:cd:f0:4b:9e:60:27:f9:1d:e1:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b793c2-6ed4-4642-8683-e5b61e8d9f76
        Validity
            Not Before: Oct 24 13:00:12 2026 GMT
            Not After : Jan 22 14:00:12 2027 GMT
        Subject: CN=5768aea9-b75e-4523-9fd8-21cccfa5ff2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:90:f0:ff:fb:a6:da:f6:59:6e:53:94:0f:84:
                    0c:82:33:b0:1d:f4:a1:a9:18:a5:97:4c:31:a4:99:
                    50:32:e5:bd:c2:53:fa:b5:9c:55:0f:15:a4:f6:37:
                    93:e0:75:31:cb:42:73:f3:ab:97:73:d4:7f:32:12:
                    2f:13:8b:92:53:8c:14:c2:5c:48:c5:1e:19:63:a1:
                    87:79:80:87:b4:c4:74:fe:0e:cf:5f:b4:26:88:24:
                    0e:3f:d1:31:88:65:c3:27:87:e4:6b:52:83:17:ef:
                    38:db:06:3e:64:00:bf:d0:b2:33:aa:20:b4:2f:2b:
                    3c:13:35:ec:54:3a:e6:73:f9:57:9d:48:fc:75:7c:
                    40:8b:ee:af:63:2b:89:b5:20:49:56:af:e0:a4:e0:
                    2e:8f:5b:7e:e5:21:2b:cc:35:68:a0:c7:9c:0b:2d:
                    e0:74:72:ca:6e:09:82:a3:55:cc:1d:df:f4:dc:45:
                    22:9f:71:b4:16:7e:92:c8:34:e0:d6:5f:94:14:68:
                    97:20:61:95:95:0d:c6:7f:ca:62:7d:b1:7f:08:9d:
                    7d:e3:93:e3:06:3e:3f:f4:3d:5b:16:5d:55:f6:7d:
                    7d:72:73:c2:d7:ad:73:b2:43:e9:15:53:ab:1b:f7:
                    ed:32:59:8f:65:8a:e2:29:11:7c:86:fb:64:a4:6e:
                    97:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:06:D7:56:EB:20:D3:8A:B4:51:B4:31:E8:7E:6C:45:35:1A:08:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76/13ddeb58-f5dd-351c-b87f-c2a259df72fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76/b0b793c2-6ed4-4642-8683-e5b61e8d9f76.crl

            X509v3 Authority Key Identifier:
                keyid:54:03:5D:9D:C6:C9:A8:AC:72:F6:C0:58:84:A6:E7:7C:07:BA:38:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b0b793c2-6ed4-4642-8683-e5b61e8d9f76.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:7580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:93:fc:53:db:05:59:6f:6e:d8:87:22:50:c7:b3:95:bd:34:
         15:99:c8:2e:05:ae:40:e8:7d:df:d3:de:c8:07:4c:96:da:c7:
         5c:70:e0:cb:c5:da:5b:bd:9d:2d:55:59:ab:a1:dd:98:5c:e4:
         49:74:18:31:09:42:d4:87:2a:46:87:b7:77:5b:e3:3b:19:1a:
         a1:fc:7a:ae:6d:36:fc:c2:2d:f2:ba:1e:78:aa:ac:aa:ac:ad:
         ce:e1:3e:4e:85:a7:11:c7:ac:20:bd:75:45:07:06:87:25:38:
         43:89:10:03:42:7e:1d:a0:65:2d:19:ed:08:ab:e8:76:34:c7:
         b7:85:be:bb:4b:f8:a9:67:71:95:a9:36:dc:c3:01:a8:25:38:
         7e:35:12:6f:af:4d:3c:ef:1b:c2:a1:69:72:dc:d3:ae:5e:3d:
         d2:a3:20:c6:46:88:bb:3c:82:2f:fe:b5:ea:20:7a:37:ad:b9:
         0b:00:f1:7b:37:90:3e:22:73:dc:fa:a8:bf:b6:1b:ba:d6:45:
         1d:7e:f1:46:5b:fa:18:03:c5:b5:39:ea:e7:1b:d0:28:ba:53:
         b2:89:b7:38:56:bd:91:b4:fa:bd:34:c3:fa:9f:27:8c:6e:b0:
         ba:0b:8a:44:fb:a0:74:03:fc:6e:f2:af:d6:d5:1b:89:56:f2:
         5a:1c:b1:82
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE+bzfBLnmAn+R3hHUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjBiNzkzYzItNmVkNC00NjQyLTg2ODMtZTViNjFlOGQ5
Zjc2MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk
NTc2OGFlYTktYjc1ZS00NTIzLTlmZDgtMjFjY2NmYTVmZjJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipDw//um2vZZblOUD4QMgjOwHfShqRill0wx
pJlQMuW9wlP6tZxVDxWk9jeT4HUxy0Jz86uXc9R/MhIvE4uSU4wUwlxIxR4ZY6GH
eYCHtMR0/g7PX7QmiCQOP9ExiGXDJ4fka1KDF+842wY+ZAC/0LIzqiC0Lys8EzXs
VDrmc/lXnUj8dXxAi+6vYyuJtSBJVq/gpOAuj1t+5SErzDVooMecCy3gdHLKbgmC
o1XMHd/03EUin3G0Fn6SyDTg1l+UFGiXIGGVlQ3Gf8pifbF/CJ1945PjBj4/9D1b
Fl1V9n19cnPC161zskPpFVOrG/ftMlmPZYriKRF8hvtkpG6X/QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFDoG11brINOKtFG0Meh+bEU1GghmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iMGI3
OTNjMi02ZWQ0LTQ2NDItODY4My1lNWI2MWU4ZDlmNzYvMTNkZGViNTgtZjVkZC0z
NTFjLWI4N2YtYzJhMjU5ZGY3MmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjBiNzkzYzItNmVkNC00NjQyLTg2
ODMtZTViNjFlOGQ5Zjc2L2IwYjc5M2MyLTZlZDQtNDY0Mi04NjgzLWU1YjYxZThk
OWY3Ni5jcmwwHwYDVR0jBBgwFoAUVANdncbJqKxy9sBYhKbnfAe6ONMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9iMGI3OTNjMi02ZWQ0LTQ2NDItODY4My1lNWI2
MWU4ZDlmNzYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgd1gDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAQk/xT2wVZb27YhyJQx7OVvTQVmcguBa5A6H3f097IB0yW2sdccODL
xdpbvZ0tVVmrod2YXORJdBgxCULUhypGh7d3W+M7GRqh/HqubTb8wi3yuh54qqyq
rK3O4T5OhacRx6wgvXVFBwaHJThDiRADQn4doGUtGe0Iq+h2NMe3hb67S/ipZ3GV
qTbcwwGoJTh+NRJvr0087xvCoWly3NOuXj3SoyDGRoi7PIIv/rXqIHo3rbkLAPF7
N5A+InPc+qi/thu61kUdfvFGW/oYA8W1OernG9AoulOyibc4Vr2RtPq9NMP6nyeM
brC6C4pE+6B0A/xu8q/W1RuJVvJaHLGC
-----END CERTIFICATE-----
Generated at Tue Oct 27 06:11:37 2026 by rpki-client