Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/5bf9da42-fe79-3455-8869-3015b3ade0a5.roa
File:                     5bf9da42-fe79-3455-8869-3015b3ade0a5.roa (raw, json)
Hash identifier:          G3vEE2jD7XShqIrCaQsU3ZJqSoUQrDzyoTq/9pB4awI=
Subject key identifier:   8D:31:25:EC:5C:97:23:F2:5B:A2:59:15:7B:92:C2:1F:F0:77:A4:55
Certificate issuer:       /CN=58e07563-c033-4e44-b58b-ee57eafd8f85
Certificate serial:       010D0C9F4328584F03A78B67F8900E5CACFEF300
Authority key identifier: 46:A3:BD:93:78:F2:9A:FF:35:29:C2:DE:8D:53:FE:0C:63:61:3F:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/5bf9da42-fe79-3455-8869-3015b3ade0a5.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     399060
IP address blocks:        2606:440::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/58e07563-c033-4e44-b58b-ee57eafd8f85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/58e07563-c033-4e44-b58b-ee57eafd8f85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:8b:67:f8:90:0e:5c:ac:fe:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58e07563-c033-4e44-b58b-ee57eafd8f85
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=88820042-b033-4dda-a43c-a944c61ae69b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c2:24:81:a5:be:63:a8:51:5d:19:ff:7d:a7:
                    96:0f:fe:b1:ea:1d:30:76:a8:6f:e7:05:ca:d8:b0:
                    b6:14:e5:b5:e6:6f:43:cd:e2:07:33:28:27:4d:56:
                    1c:a1:11:e1:8c:03:5f:c9:31:d0:89:31:f1:65:88:
                    6a:b5:16:46:40:37:99:f7:95:80:e5:75:90:a1:a6:
                    3a:5b:db:81:02:af:d5:68:89:f9:3a:b3:68:3a:98:
                    08:92:f2:7a:b9:ab:b7:2b:4e:04:c8:59:26:ad:2f:
                    80:10:45:33:40:4c:65:a6:e8:fe:17:5c:40:7c:2b:
                    dc:33:ec:0c:f5:74:ab:aa:b1:33:f2:5d:c3:ee:ad:
                    50:0c:a0:69:6e:c6:40:06:37:36:28:d1:1f:04:68:
                    00:8d:47:f3:3b:56:3e:45:32:31:d7:95:e5:bf:9a:
                    0f:7d:3a:74:47:be:55:30:e5:06:e2:ba:2d:24:c0:
                    05:18:c7:cb:ac:40:f8:1c:f1:be:52:0a:2f:f7:06:
                    69:bd:e0:bf:32:f0:b6:7a:61:26:78:b1:98:a3:20:
                    e6:ee:97:da:ed:2f:7c:3b:6f:6d:6c:88:a8:58:34:
                    36:2e:59:ae:a4:8b:5f:ae:e7:4a:76:59:a9:f0:2c:
                    17:cc:85:37:1b:a0:7b:e7:e4:15:80:7c:54:72:32:
                    da:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:31:25:EC:5C:97:23:F2:5B:A2:59:15:7B:92:C2:1F:F0:77:A4:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/5bf9da42-fe79-3455-8869-3015b3ade0a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/58e07563-c033-4e44-b58b-ee57eafd8f85.crl

            X509v3 Authority Key Identifier:
                keyid:46:A3:BD:93:78:F2:9A:FF:35:29:C2:DE:8D:53:FE:0C:63:61:3F:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:78:81:f2:56:f5:9c:1d:95:37:a7:47:ad:95:1a:43:82:82:
         9f:f6:c8:d9:19:40:8b:2a:8a:ea:1e:35:aa:a3:1a:32:cd:e9:
         e7:97:8b:77:26:8a:8c:2f:c2:93:35:5e:45:87:af:99:7b:06:
         f0:50:af:0a:c0:22:9f:64:2b:4e:72:1c:62:3a:43:a7:0a:48:
         a5:c4:e6:5a:8e:c4:16:31:82:33:4e:39:36:a6:a4:2a:e7:60:
         69:7d:8d:e8:aa:f7:01:8e:76:2c:35:86:54:a3:66:c5:3a:17:
         96:b1:21:03:41:af:db:36:80:d6:7b:69:a0:ae:e4:30:de:b1:
         f6:f7:ba:07:51:aa:01:8e:37:f3:8c:1f:5b:2b:84:79:69:09:
         28:c2:34:50:e6:2f:87:18:ef:8c:16:04:bf:20:90:9a:23:44:
         eb:86:31:46:46:68:33:80:2e:e6:e3:1c:ec:7d:26:fb:8f:c5:
         ca:62:26:52:ce:24:1e:da:24:82:12:a5:57:c0:b8:1e:07:5f:
         19:76:f2:b5:65:72:83:7d:8a:68:29:d7:d8:2a:86:7a:cf:ab:
         73:6d:53:8f:a1:c8:9e:04:37:44:e3:a6:5f:03:cb:1f:e0:ae:
         69:c5:25:f0:a6:6f:d1:cc:71:68:d8:3d:0e:79:7d:76:94:29:
         49:46:08:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:36:59 2026 by rpki-client