Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/98c4a59e-53eb-33ab-9815-5c2ca32e9e9b.roa
File:                     98c4a59e-53eb-33ab-9815-5c2ca32e9e9b.roa (raw, json)
Hash identifier:          7OFXjkTLmK4oH6yGGGwsvfpcVRCleMdAob7SF1DqG/0=
Subject key identifier:   64:D9:BF:E5:3F:84:27:9F:37:1D:E1:27:F7:B2:9E:E4:1D:FC:A3:F5
Certificate issuer:       /CN=5bac54b9-66dc-4956-863d-1804cfb9e853
Certificate serial:       010D0C9F4328584D60E50692326A999D96684780
Authority key identifier: 7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/98c4a59e-53eb-33ab-9815-5c2ca32e9e9b.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     399077
IP address blocks:        2606:4dc0:6::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:06:92:32:6a:99:9d:96:68:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bac54b9-66dc-4956-863d-1804cfb9e853
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=7756e328-24e4-4aad-8c82-bf921ab66a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:29:ce:dd:f9:c1:5c:e7:91:df:bc:04:e7:72:
                    d3:7d:75:a0:71:a0:26:a3:18:2c:13:8c:ec:7b:54:
                    55:16:35:9c:01:19:f1:fd:47:2f:ee:2f:67:1b:94:
                    87:ad:9d:b2:9a:74:17:11:24:d6:92:86:a6:51:9c:
                    04:ba:d8:2b:77:a7:7c:31:10:b6:c6:fc:7d:81:f2:
                    df:46:1b:dc:c8:12:0f:30:08:82:d2:79:58:90:7b:
                    fc:d3:11:cd:8d:58:e7:1f:78:8c:8f:77:c9:3b:07:
                    39:fa:cc:7f:46:65:a8:aa:e2:16:72:0f:6c:2d:ce:
                    1a:9c:78:21:69:e4:68:b3:02:84:0b:a5:ea:71:2a:
                    5a:9f:b6:71:d2:6f:84:ff:83:44:9b:03:e5:dc:af:
                    c6:62:b4:ee:13:9b:36:35:24:57:eb:98:d1:fc:0c:
                    94:c4:ff:a1:60:f0:a6:2e:bf:83:7a:52:81:c8:54:
                    be:be:97:f4:6f:29:32:0d:3d:c3:95:17:bb:7b:e0:
                    af:65:dd:02:23:4c:96:19:c1:9e:1f:83:ac:e2:25:
                    14:c0:84:2c:5a:3e:7d:5e:2d:e0:74:90:59:1a:cd:
                    c6:fe:8e:47:67:d0:6b:4b:42:55:87:b2:ee:f4:ee:
                    51:bc:1c:a1:3e:b5:fc:2d:41:bb:a0:17:2d:3d:18:
                    61:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D9:BF:E5:3F:84:27:9F:37:1D:E1:27:F7:B2:9E:E4:1D:FC:A3:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/98c4a59e-53eb-33ab-9815-5c2ca32e9e9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl

            X509v3 Authority Key Identifier:
                keyid:7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4dc0:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:e2:6c:1a:67:60:85:60:13:68:da:13:d4:0a:7c:a2:6c:95:
         5b:97:6d:1c:27:38:40:8b:9c:80:16:5f:c7:58:42:7e:01:dd:
         d9:1f:f2:33:a8:64:85:d5:f4:0a:49:7b:3f:64:a3:5d:8f:58:
         b9:06:97:0d:53:b0:be:9a:ae:d4:94:03:95:1f:87:0b:9b:6c:
         54:67:02:c5:e7:ee:d6:dd:e0:ad:cc:7e:31:f7:2f:34:a0:3e:
         d5:ff:52:6d:c7:18:4e:e2:2a:f3:8c:36:04:aa:c1:30:51:01:
         08:b3:4d:f8:ac:9b:47:f2:21:88:1f:dc:f7:e2:1e:6a:d9:51:
         d8:3a:6d:45:10:fc:d7:ea:c2:64:48:3e:23:73:2d:d3:59:a7:
         7c:0a:22:18:ef:79:e8:46:97:dc:98:e0:86:5a:da:f7:0c:ac:
         8a:ce:65:7d:fa:53:94:a7:be:6f:3c:b0:51:50:b6:c9:40:c1:
         7d:f9:3b:0d:22:2d:a1:70:db:44:26:32:70:f8:e2:d9:73:01:
         cd:6a:fd:ce:f9:f8:9f:99:92:51:54:a1:5c:72:87:f8:95:75:
         73:a9:00:c7:7a:a4:f2:5b:df:a6:28:45:95:92:76:73:87:81:
         6a:37:ae:05:2d:57:23:92:ec:75:b3:20:6d:e4:4c:7c:95:f6:
         92:c8:90:ae
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1g5QaSMmqZnZZoR4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWJhYzU0YjktNjZkYy00OTU2LTg2M2QtMTgwNGNmYjll
ODUzMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk
Nzc1NmUzMjgtMjRlNC00YWFkLThjODItYmY5MjFhYjY2YTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhinO3fnBXOeR37wE53LTfXWgcaAmoxgsE4zs
e1RVFjWcARnx/Ucv7i9nG5SHrZ2ymnQXESTWkoamUZwEutgrd6d8MRC2xvx9gfLf
RhvcyBIPMAiC0nlYkHv80xHNjVjnH3iMj3fJOwc5+sx/RmWoquIWcg9sLc4anHgh
aeRoswKEC6XqcSpan7Zx0m+E/4NEmwPl3K/GYrTuE5s2NSRX65jR/AyUxP+hYPCm
Lr+DelKByFS+vpf0bykyDT3DlRe7e+CvZd0CI0yWGcGeH4Os4iUUwIQsWj59Xi3g
dJBZGs3G/o5HZ9BrS0JVh7Lu9O5RvByhPrX8LUG7oBctPRhhiwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGTZv+U/hCefNx3hJ/eynuQd/KP1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81YmFj
NTRiOS02NmRjLTQ5NTYtODYzZC0xODA0Y2ZiOWU4NTMvOThjNGE1OWUtNTNlYi0z
M2FiLTk4MTUtNWMyY2EzMmU5ZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWJhYzU0YjktNjZkYy00OTU2LTg2
M2QtMTgwNGNmYjllODUzLzViYWM1NGI5LTY2ZGMtNDk1Ni04NjNkLTE4MDRjZmI5
ZTg1My5jcmwwHwYDVR0jBBgwFoAUf0qap0BizW2/cBkWzv2bKifmLp4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81YmFjNTRiOS02NmRjLTQ5NTYtODYzZC0xODA0
Y2ZiOWU4NTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZNwAAG
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAInibBpnYIVgE2jaE9QKfKJslVuXbRwnOECLnIAWX8dYQn4B3dkf
8jOoZIXV9ApJez9ko12PWLkGlw1TsL6artSUA5UfhwubbFRnAsXn7tbd4K3MfjH3
LzSgPtX/Um3HGE7iKvOMNgSqwTBRAQizTfism0fyIYgf3PfiHmrZUdg6bUUQ/Nfq
wmRIPiNzLdNZp3wKIhjveehGl9yY4IZa2vcMrIrOZX36U5Snvm88sFFQtslAwX35
Ow0iLaFw20QmMnD44tlzAc1q/c75+J+ZklFUoVxyh/iVdXOpAMd6pPJb36YoRZWS
dnOHgWo3rgUtVyOS7HWzIG3kTHyV9pLIkK4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:38:30 2026 by rpki-client