Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58f7ac63-0e00-3b8e-9a3a-6b80b3be5633.roa
File:                     58f7ac63-0e00-3b8e-9a3a-6b80b3be5633.roa (raw, json)
Hash identifier:          DgeLgBIh7o78J5tTN9jSHxnRUPeD0QqgJ45j/+RT7CE=
Subject key identifier:   17:19:CC:0F:B8:C7:D5:8D:ED:E1:55:A0:A7:C2:9B:14:9E:08:06:6D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EA7879D53C3B82C7ED109AA00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58f7ac63-0e00-3b8e-9a3a-6b80b3be5633.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16003
IP address blocks:        2001:470:4db::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:9d:53:c3:b8:2c:7e:d1:09:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=16c3b36c-7738-468a-ad87-04da50ada49b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:01:1b:e9:97:b7:c3:00:51:1b:00:90:3b:73:
                    a2:13:d9:50:03:c0:8b:74:58:87:16:af:27:9b:b8:
                    a0:20:69:df:f5:cc:41:a9:d6:64:df:a7:fb:1e:f0:
                    38:81:ec:10:d5:3e:6b:38:4d:1e:c5:2a:04:8f:79:
                    4b:10:fe:8c:52:31:73:61:1d:62:88:d4:5f:f5:18:
                    20:57:80:f2:42:58:c1:5d:94:45:13:26:12:ee:c7:
                    af:1f:b8:54:c3:fe:19:d9:36:d6:26:29:10:91:58:
                    c6:fb:dc:1c:14:27:26:1a:0c:fc:53:4f:cd:0f:1d:
                    5c:44:ec:1d:7c:ff:af:f4:05:2d:2d:92:41:97:cc:
                    a2:01:ed:b2:4c:65:94:17:ee:e3:a8:a5:5c:13:5f:
                    20:e6:02:57:67:66:58:1c:68:d7:80:cf:a8:32:af:
                    97:1a:98:bd:42:b9:7e:e8:f8:69:f7:45:cf:05:de:
                    32:70:59:44:f5:c0:42:b6:23:84:73:d5:e7:92:36:
                    96:40:28:0f:64:76:c1:67:f1:bd:ff:e6:68:3f:77:
                    50:bf:4e:e6:be:14:2a:9d:5d:d3:08:57:cf:0b:36:
                    49:3f:b5:26:be:d4:ed:65:aa:b4:36:56:86:cf:bc:
                    a3:ac:72:6b:cd:42:d4:ab:1b:0a:90:64:ea:d2:fc:
                    13:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:19:CC:0F:B8:C7:D5:8D:ED:E1:55:A0:A7:C2:9B:14:9E:08:06:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58f7ac63-0e00-3b8e-9a3a-6b80b3be5633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4db::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:37:de:b5:60:6b:f6:7c:b1:ea:ee:17:b5:56:21:2a:bd:9e:
         b0:b8:94:d5:0d:a5:29:80:55:96:fe:a3:f4:b9:c2:27:0a:59:
         39:2f:20:13:27:a7:f0:36:a8:0f:ab:22:bb:be:bd:61:d8:05:
         f3:e7:1d:f1:b8:86:fb:8d:fa:1a:a4:a0:be:15:96:2c:fe:35:
         b5:d8:2e:ad:3e:01:01:9c:f9:1b:74:b9:e4:8d:30:55:60:a5:
         30:8b:66:4d:1c:f2:b6:23:85:97:d9:60:d0:17:ef:58:f3:47:
         e8:f7:3f:9b:12:c1:16:29:38:ea:89:0b:0b:c3:57:93:75:41:
         47:1b:c4:7e:3a:7e:69:a1:8f:0a:8d:e3:ad:80:d1:fb:3c:9e:
         bd:2c:d6:e4:b9:73:98:23:d6:5e:94:b4:a2:4b:ed:db:7f:13:
         cd:66:82:14:68:d3:2c:5f:62:7c:ca:cb:5c:42:04:c7:cf:b5:
         2d:bd:fe:5d:c2:53:d9:ce:75:98:62:c5:56:1e:b5:06:7d:0e:
         be:1d:3a:5e:1f:5a:bb:2a:6f:53:6d:45:35:95:8e:7e:b2:37:
         ca:68:5c:02:cf:5b:ec:df:62:67:ba:5c:9c:a5:5c:6a:81:02:
         78:89:60:8d:22:ba:ae:b4:7b:96:7f:53:f5:fd:74:62:29:a6:
         8e:c4:d9:95
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nh51Tw7gsftEJqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MTZjM2IzNmMtNzczOC00NjhhLWFkODctMDRkYTUwYWRhNDliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQEb6Ze3wwBRGwCQO3OiE9lQA8CLdFiHFq8n
m7igIGnf9cxBqdZk36f7HvA4gewQ1T5rOE0exSoEj3lLEP6MUjFzYR1iiNRf9Rgg
V4DyQljBXZRFEyYS7sevH7hUw/4Z2TbWJikQkVjG+9wcFCcmGgz8U0/NDx1cROwd
fP+v9AUtLZJBl8yiAe2yTGWUF+7jqKVcE18g5gJXZ2ZYHGjXgM+oMq+XGpi9Qrl+
6Php90XPBd4ycFlE9cBCtiOEc9XnkjaWQCgPZHbBZ/G9/+ZoP3dQv07mvhQqnV3T
CFfPCzZJP7UmvtTtZaq0NlaGz7yjrHJrzULUqxsKkGTq0vwTiQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBcZzA+4x9WN7eFVoKfCmxSeCAZtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNThmN2FjNjMtMGUwMC0z
YjhlLTlhM2EtNmI4MGIzYmU1NjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATb
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF433rVga/Z8seruF7VWISq9nrC4lNUNpSmAVZb+o/S5wicKWTkv
IBMnp/A2qA+rIru+vWHYBfPnHfG4hvuN+hqkoL4Vliz+NbXYLq0+AQGc+Rt0ueSN
MFVgpTCLZk0c8rYjhZfZYNAX71jzR+j3P5sSwRYpOOqJCwvDV5N1QUcbxH46fmmh
jwqN462A0fs8nr0s1uS5c5gj1l6UtKJL7dt/E81mghRo0yxfYnzKy1xCBMfPtS29
/l3CU9nOdZhixVYetQZ9Dr4dOl4fWrsqb1NtRTWVjn6yN8poXALPW+zfYme6XJyl
XGqBAniJYI0iuq60e5Z/U/X9dGIppo7E2ZU=
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:18:41 2026 by rpki-client