Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/5bf9da42-fe79-3455-8869-3015b3ade0a5.roa
File:                     5bf9da42-fe79-3455-8869-3015b3ade0a5.roa (raw, json)
Hash identifier:          0b5oN4pfsz9hAgqbGVVc6z1e5ZaSQlHWFZH7ciHkxUo=
Subject key identifier:   40:95:41:65:74:19:F5:0E:AC:0E:58:CD:A8:B0:64:90:30:93:2A:7B
Certificate issuer:       /CN=58e07563-c033-4e44-b58b-ee57eafd8f85
Certificate serial:       010D0C9F4328584D80FFEE7052C403F144227440
Authority key identifier: 46:A3:BD:93:78:F2:9A:FF:35:29:C2:DE:8D:53:FE:0C:63:61:3F:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/5bf9da42-fe79-3455-8869-3015b3ade0a5.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     399060
IP address blocks:        2606:440::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/58e07563-c033-4e44-b58b-ee57eafd8f85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/58e07563-c033-4e44-b58b-ee57eafd8f85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:ee:70:52:c4:03:f1:44:22:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58e07563-c033-4e44-b58b-ee57eafd8f85
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=ddc4f31a-cbb7-42c7-b1ac-0285c2855637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7b:7e:81:76:0e:c7:13:9e:b0:7d:23:a3:78:
                    72:04:6f:c2:e4:51:68:f7:90:5a:37:c5:25:bb:79:
                    e4:e2:ea:8f:a9:b2:a9:e2:9f:14:5e:0e:9a:c8:1d:
                    fc:da:7b:78:a4:09:ba:0e:b9:9c:ee:e8:77:42:ea:
                    48:64:e2:23:80:29:9c:c1:da:5f:1d:32:ea:91:ba:
                    80:44:83:7c:3f:df:b4:04:3f:16:38:55:9a:f3:7d:
                    04:15:2c:5b:fe:03:1f:e5:87:0c:e7:34:77:48:03:
                    51:70:4c:2d:c3:c6:09:1b:9c:c4:8b:4d:98:43:a8:
                    b7:fc:d1:f7:d3:a8:f9:b6:b1:4c:fe:e4:c9:2b:d1:
                    ef:b9:80:b2:62:bd:8b:4c:15:5f:0b:aa:9b:95:46:
                    67:48:02:21:6c:ba:f1:bb:be:65:df:db:ba:b3:5a:
                    2f:c7:4a:eb:19:f1:93:4f:ee:ea:f5:95:ad:54:f5:
                    c3:02:f3:a8:a4:05:92:b2:24:a5:08:04:7c:4f:e0:
                    be:d6:b9:ac:67:ed:65:fe:05:2f:7f:12:4c:af:18:
                    76:e5:48:5a:00:6a:2c:e8:19:8e:15:1f:af:1e:25:
                    a4:e9:03:fe:d8:e0:95:28:51:e1:61:10:3a:0b:ec:
                    8c:79:36:6b:30:57:3b:49:74:b8:fd:6f:30:ad:d5:
                    2c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:95:41:65:74:19:F5:0E:AC:0E:58:CD:A8:B0:64:90:30:93:2A:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/5bf9da42-fe79-3455-8869-3015b3ade0a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85/58e07563-c033-4e44-b58b-ee57eafd8f85.crl

            X509v3 Authority Key Identifier:
                keyid:46:A3:BD:93:78:F2:9A:FF:35:29:C2:DE:8D:53:FE:0C:63:61:3F:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/58e07563-c033-4e44-b58b-ee57eafd8f85.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:fb:05:87:ac:99:2b:c9:5e:fe:0b:6c:e6:a7:30:ae:23:f1:
         20:8b:48:9f:c5:bf:0f:67:6a:08:4a:e5:79:f5:f2:61:10:1a:
         fd:86:47:61:46:12:85:26:30:3e:3b:04:1a:52:90:24:91:ce:
         92:ba:7d:a8:7d:bd:7e:32:d7:e1:4d:00:e2:ec:5f:8a:4a:a9:
         bd:2b:20:b9:25:4e:ab:9e:89:a4:29:da:fe:07:28:a0:82:82:
         5d:b3:e3:33:6c:05:0b:22:0d:e8:60:66:f3:83:ca:df:e3:0b:
         fe:cd:e4:17:7c:3c:2f:f5:a4:11:2e:50:26:c7:3a:4e:69:58:
         55:94:0d:81:21:a8:6a:6a:a9:6a:d5:55:a1:27:5b:f0:fb:af:
         42:68:00:9a:dd:d2:fa:2a:e5:40:5f:e6:77:74:7a:16:75:60:
         e6:5f:2f:8b:57:32:b8:1f:69:5f:99:20:38:08:f7:6f:9a:4e:
         5b:82:c3:61:34:52:37:f3:25:b7:b8:1e:b8:41:96:1f:e1:63:
         31:93:ef:7d:1d:83:83:fc:bb:77:b4:36:1d:bf:4e:46:62:b6:
         f5:3f:2f:a5:a4:47:cc:c9:19:86:be:e8:05:2a:39:c1:9e:c5:
         d4:dc:80:97:8a:b9:c5:c6:71:f6:d5:56:46:6c:b9:82:0c:76:
         7f:63:c3:bd
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2A/+5wUsQD8UQidEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNThlMDc1NjMtYzAzMy00ZTQ0LWI1OGItZWU1N2VhZmQ4
Zjg1MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk
ZGRjNGYzMWEtY2JiNy00MmM3LWIxYWMtMDI4NWMyODU1NjM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXt+gXYOxxOesH0jo3hyBG/C5FFo95BaN8Ul
u3nk4uqPqbKp4p8UXg6ayB382nt4pAm6Drmc7uh3QupIZOIjgCmcwdpfHTLqkbqA
RIN8P9+0BD8WOFWa830EFSxb/gMf5YcM5zR3SANRcEwtw8YJG5zEi02YQ6i3/NH3
06j5trFM/uTJK9HvuYCyYr2LTBVfC6qblUZnSAIhbLrxu75l39u6s1ovx0rrGfGT
T+7q9ZWtVPXDAvOopAWSsiSlCAR8T+C+1rmsZ+1l/gUvfxJMrxh25UhaAGos6BmO
FR+vHiWk6QP+2OCVKFHhYRA6C+yMeTZrMFc7SXS4/W8wrdUsPwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFECVQWV0GfUOrA5YzaiwZJAwkyp7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81OGUw
NzU2My1jMDMzLTRlNDQtYjU4Yi1lZTU3ZWFmZDhmODUvNWJmOWRhNDItZmU3OS0z
NDU1LTg4NjktMzAxNWIzYWRlMGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNThlMDc1NjMtYzAzMy00ZTQ0LWI1
OGItZWU1N2VhZmQ4Zjg1LzU4ZTA3NTYzLWMwMzMtNGU0NC1iNThiLWVlNTdlYWZk
OGY4NS5jcmwwHwYDVR0jBBgwFoAURqO9k3jymv81KcLejVP+DGNhP+kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81OGUwNzU2My1jMDMzLTRlNDQtYjU4Yi1lZTU3
ZWFmZDhmODUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYEQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB9+wWHrJkryV7+C2zmpzCuI/Egi0ifxb8PZ2oISuV59fJhEBr9hkdh
RhKFJjA+OwQaUpAkkc6Sun2ofb1+MtfhTQDi7F+KSqm9KyC5JU6rnomkKdr+Byig
goJds+MzbAULIg3oYGbzg8rf4wv+zeQXfDwv9aQRLlAmxzpOaVhVlA2BIahqaqlq
1VWhJ1vw+69CaACa3dL6KuVAX+Z3dHoWdWDmXy+LVzK4H2lfmSA4CPdvmk5bgsNh
NFI38yW3uB64QZYf4WMxk+99HYOD/Lt3tDYdv05GYrb1Py+lpEfMyRmGvugFKjnB
nsXU3ICXirnFxnH21VZGbLmCDHZ/Y8O9
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:07:47 2026 by rpki-client