Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c32e1b2c-9b98-380e-bd08-ad6f9e24ccca.roa
File:                     c32e1b2c-9b98-380e-bd08-ad6f9e24ccca.roa (raw, json)
Hash identifier:          SEhtTbPULyZzvOAxvvM1j1/vN94/vDh7p3EnFaFz26g=
Subject key identifier:   1F:1B:AD:AB:B0:9D:F9:36:7E:AE:9E:F7:AA:95:61:62:E1:FF:21:78
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584F49773ECA4DFEBE988C7DCEC0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c32e1b2c-9b98-380e-bd08-ad6f9e24ccca.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     174
IP address blocks:        2601:2008::/29 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:3e:ca:4d:fe:be:98:8c:7d:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fdd6249a-1e67-4250-9ee6-4044a57c8395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:6e:f6:c7:75:22:26:d7:5a:74:ab:dd:d0:
                    c7:2f:c9:99:86:70:f0:4b:c0:c1:b4:41:ad:0a:64:
                    42:89:ac:ba:c4:46:1d:22:36:ff:a4:53:2b:27:8a:
                    2c:9b:40:42:ec:49:b2:19:74:c2:e0:a7:1f:e4:3d:
                    ca:9b:c6:d8:f4:a0:19:bf:fa:5e:b0:16:5c:f5:66:
                    a8:49:bc:b1:51:d1:3d:b1:03:2b:22:7f:72:35:dc:
                    28:cc:ee:fc:68:89:8c:b8:96:d8:1d:cd:10:df:f7:
                    25:49:40:37:7e:1b:ca:f8:e3:ca:ce:a9:94:d4:02:
                    a1:4d:01:19:92:dd:29:75:c0:d1:a6:5d:22:6a:af:
                    5d:0a:9e:3a:ed:6e:0c:cc:85:f6:fe:c0:0d:16:0d:
                    e1:53:45:10:29:10:97:cd:30:fa:45:ce:76:ea:40:
                    18:bc:af:78:9d:a5:de:8d:1b:ae:35:66:ae:9f:32:
                    c4:ed:cd:a3:6d:9b:6b:71:9c:07:40:5c:b8:25:66:
                    9b:7d:a1:ba:1d:e9:09:3c:a8:f8:aa:e5:e2:63:02:
                    08:01:d9:11:da:dc:a9:59:52:3a:d1:34:2f:18:e0:
                    c4:4c:e8:8e:62:47:61:7d:4f:2f:ab:20:55:39:cc:
                    8a:fe:83:f7:64:f2:08:4f:a8:4d:a4:86:3f:b3:70:
                    ec:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1B:AD:AB:B0:9D:F9:36:7E:AE:9E:F7:AA:95:61:62:E1:FF:21:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c32e1b2c-9b98-380e-bd08-ad6f9e24ccca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:2008::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:38:a0:bf:81:ae:f5:22:e8:c7:4c:60:9c:f0:a0:fd:2b:ec:
         ee:2f:44:12:9c:27:3c:9e:8f:3d:f6:6f:e3:ae:ab:3b:ad:fd:
         e9:fd:4a:2d:46:6e:f7:2f:3a:1e:99:8f:bc:ac:fc:75:fe:b1:
         65:92:23:dd:d2:6d:d0:eb:eb:ad:a8:94:67:9f:c4:98:91:a8:
         57:f1:56:12:02:e2:55:e3:32:86:fd:14:9e:b4:15:7d:e4:39:
         55:62:d8:53:86:82:5b:3f:50:c5:e2:f4:33:03:e2:4b:e6:fb:
         6c:82:d9:e0:6d:e2:18:88:9d:e8:46:33:d2:0a:cf:75:af:0a:
         b5:2f:d6:9f:25:82:fb:f5:3f:19:83:f8:40:74:e7:b6:a6:a0:
         68:8f:84:80:d8:59:08:e4:f4:83:f3:da:74:78:0d:71:e8:34:
         ec:6e:95:c9:40:45:b6:84:67:e0:3b:d4:f1:18:f3:76:83:da:
         3c:2a:29:b7:e8:7e:7f:b1:b1:0e:f3:71:2b:d9:e5:4e:02:81:
         b8:7c:cf:a1:8a:53:7f:25:f6:8e:1c:84:ae:67:f2:ca:6f:5d:
         b8:30:f4:24:79:7f:a0:33:93:d2:f5:07:dd:83:cb:87:c5:4c:
         a8:58:45:20:62:4c:bc:34:4d:e0:e6:43:f8:6c:74:b0:4b:91:
         ba:80:a6:15
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jdz7KTf6+mIx9zsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZmRkNjI0OWEtMWU2Ny00MjUwLTllZTYtNDA0NGE1N2M4Mzk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWxu9sd1IibXWnSr3dDHL8mZhnDwS8DBtEGt
CmRCiay6xEYdIjb/pFMrJ4osm0BC7EmyGXTC4Kcf5D3Km8bY9KAZv/pesBZc9Wao
SbyxUdE9sQMrIn9yNdwozO78aImMuJbYHc0Q3/clSUA3fhvK+OPKzqmU1AKhTQEZ
kt0pdcDRpl0iaq9dCp467W4MzIX2/sANFg3hU0UQKRCXzTD6Rc526kAYvK94naXe
jRuuNWaunzLE7c2jbZtrcZwHQFy4JWabfaG6HekJPKj4quXiYwIIAdkR2typWVI6
0TQvGODETOiOYkdhfU8vqyBVOcyK/oP3ZPIIT6hNpIY/s3DsrQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFB8brauwnfk2fq6e96qVYWLh/yF4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYzMyZTFiMmMtOWI5OC0z
ODBlLWJkMDgtYWQ2ZjllMjRjY2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDJgEgCDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC7OKC/ga71IujHTGCc8KD9K+zuL0QSnCc8no899m/jrqs7rf3p/Uot
Rm73LzoemY+8rPx1/rFlkiPd0m3Q6+utqJRnn8SYkahX8VYSAuJV4zKG/RSetBV9
5DlVYthThoJbP1DF4vQzA+JL5vtsgtngbeIYiJ3oRjPSCs91rwq1L9afJYL79T8Z
g/hAdOe2pqBoj4SA2FkI5PSD89p0eA1x6DTsbpXJQEW2hGfgO9TxGPN2g9o8Kim3
6H5/sbEO83Er2eVOAoG4fM+hilN/JfaOHISuZ/LKb124MPQkeX+gM5PS9Qfdg8uH
xUyoWEUgYky8NE3g5kP4bHSwS5G6gKYV
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:22:13 2026 by rpki-client