Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/709fe60d-d819-3050-8157-1856d5db72af.roa
File:                     709fe60d-d819-3050-8157-1856d5db72af.roa (raw, json)
Hash identifier:          4daXGc+oYIFSnUOiVKB49dg8jsrJ6usp9sBlviKX9aU=
Subject key identifier:   45:84:6B:71:2E:82:26:48:C3:CF:AD:25:42:FA:A6:EC:48:54:94:95
Certificate issuer:       /CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493
Certificate serial:       010D0C9F4328584CC77747E492EE016B1321BE80
Authority key identifier: 0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/709fe60d-d819-3050-8157-1856d5db72af.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     23393
IP address blocks:        2610:1c8:b001::/48 maxlen: 48
                          2610:1c8:b002::/48 maxlen: 48
                          2610:1c8:b003::/48 maxlen: 48
                          2610:1c8:b004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:47:e4:92:ee:01:6b:13:21:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=47632b0f-8119-4028-ad29-dfb6fae646d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cf:5d:54:68:4c:b2:cc:b9:fa:1d:25:e2:46:
                    84:6d:c7:f7:05:6b:37:25:36:aa:0a:37:20:09:55:
                    c4:13:4e:58:57:c7:88:de:19:37:6b:5c:18:a4:dc:
                    91:16:0a:76:64:ac:a2:60:d4:bd:a4:23:39:4a:c7:
                    09:e7:11:8f:a0:ad:57:d2:b3:21:f4:bf:55:42:a8:
                    3e:2f:36:74:86:ab:12:3d:83:dc:14:79:b4:89:41:
                    29:7f:d0:df:b6:02:94:88:53:55:65:89:5e:06:4c:
                    2c:14:8b:6c:19:f1:96:7f:d1:e2:0e:36:91:b7:db:
                    cb:06:7a:9e:43:94:0f:7f:b6:9f:3b:5e:b8:ce:7c:
                    67:be:09:df:9a:5d:76:14:30:4d:5c:87:ba:43:60:
                    8a:9b:72:15:29:ec:73:fb:e3:94:a2:18:13:90:7f:
                    6a:2a:23:f1:f8:1e:1e:25:0b:19:e4:7d:a7:cd:b5:
                    c6:09:6d:1b:3d:b0:46:6e:0e:2e:6c:c3:9f:96:89:
                    ac:8e:86:9d:58:37:02:86:59:de:f3:82:29:27:b4:
                    0c:98:14:4f:b3:44:61:17:da:25:1b:3c:61:f1:05:
                    22:79:7c:91:79:55:6a:74:79:4d:0a:24:b7:2f:17:
                    fc:aa:c6:84:e4:04:d8:31:97:e9:97:23:cc:b8:e7:
                    b2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:84:6B:71:2E:82:26:48:C3:CF:AD:25:42:FA:A6:EC:48:54:94:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/709fe60d-d819-3050-8157-1856d5db72af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.crl

            X509v3 Authority Key Identifier:
                keyid:0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:1c8:b001::-2610:1c8:b004:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:2c:e8:6a:80:05:8b:4d:7e:f0:1c:d3:cc:63:b3:0c:38:91:
         6b:8d:84:97:92:a3:7d:12:d2:46:c9:9c:38:16:6d:d1:59:23:
         2c:e5:46:55:6d:b5:06:be:97:37:64:33:a3:6f:40:1a:38:6e:
         b3:28:f0:7a:fa:80:4a:fb:fd:a2:96:0b:97:34:1c:77:48:99:
         03:5a:57:ac:46:6a:cc:18:8d:d5:89:8d:20:b3:31:ac:1d:ce:
         5b:a0:c1:79:5e:5b:f5:ca:fa:a6:ac:10:25:2b:39:b2:06:6b:
         f5:a2:94:78:64:a6:5d:82:0f:71:2b:cb:c0:7c:33:4a:bc:0e:
         5c:8d:90:84:b5:a9:d8:72:e8:c9:5d:c4:10:bf:b5:8d:38:02:
         89:9d:b2:b8:f1:9b:02:8e:c1:9f:f9:3b:0c:aa:25:3c:76:6a:
         7f:3b:cc:ad:ce:d8:67:bc:55:7c:8d:75:f8:9a:07:44:a6:81:
         1e:58:97:1b:e4:44:43:42:ca:00:dc:aa:c5:a4:97:83:ba:14:
         b9:61:d3:fb:b7:99:05:32:8c:54:cc:bf:4e:ff:b6:a9:cd:70:
         d1:6b:47:2a:6f:68:a0:4f:42:fc:60:6b:a4:53:52:5c:d3:99:
         a7:e0:35:99:09:63:44:be:4e:27:3f:e7:e1:f5:fb:08:9c:fe:
         38:66:6c:1b
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEzHd0fkku4BaxMhvoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNThmZWRmYmUtNTYzYy00MWQzLTlmZDItZmNmMjJkYWM3
NDkzMB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk
NDc2MzJiMGYtODExOS00MDI4LWFkMjktZGZiNmZhZTY0NmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc9dVGhMssy5+h0l4kaEbcf3BWs3JTaqCjcg
CVXEE05YV8eI3hk3a1wYpNyRFgp2ZKyiYNS9pCM5SscJ5xGPoK1X0rMh9L9VQqg+
LzZ0hqsSPYPcFHm0iUEpf9DftgKUiFNVZYleBkwsFItsGfGWf9HiDjaRt9vLBnqe
Q5QPf7afO164znxnvgnfml12FDBNXIe6Q2CKm3IVKexz++OUohgTkH9qKiPx+B4e
JQsZ5H2nzbXGCW0bPbBGbg4ubMOflomsjoadWDcChlne84IpJ7QMmBRPs0RhF9ol
Gzxh8QUieXyReVVqdHlNCiS3Lxf8qsaE5ATYMZfplyPMuOeyfQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFEWEa3EugiZIw8+tJUL6puxIVJSVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81OGZl
ZGZiZS01NjNjLTQxZDMtOWZkMi1mY2YyMmRhYzc0OTMvNzA5ZmU2MGQtZDgxOS0z
MDUwLTgxNTctMTg1NmQ1ZGI3MmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNThmZWRmYmUtNTYzYy00MWQzLTlm
ZDItZmNmMjJkYWM3NDkzLzU4ZmVkZmJlLTU2M2MtNDFkMy05ZmQyLWZjZjIyZGFj
NzQ5My5jcmwwHwYDVR0jBBgwFoAUDWpXiLpV9Ezanp4K422Jg+WKm1IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy81OGZlZGZiZS01NjNjLTQxZDMtOWZkMi1mY2Yy
MmRhYzc0OTMuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmEAHI
sAEDBwAmEAHIsAQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAfCzoaoAFi01+8BzTzGOzDDiRa42El5KjfRLS
RsmcOBZt0VkjLOVGVW21Br6XN2Qzo29AGjhusyjwevqASvv9opYLlzQcd0iZA1pX
rEZqzBiN1YmNILMxrB3OW6DBeV5b9cr6pqwQJSs5sgZr9aKUeGSmXYIPcSvLwHwz
SrwOXI2QhLWp2HLoyV3EEL+1jTgCiZ2yuPGbAo7Bn/k7DKolPHZqfzvMrc7YZ7xV
fI11+JoHRKaBHliXG+REQ0LKANyqxaSXg7oUuWHT+7eZBTKMVMy/Tv+2qc1w0WtH
Km9ooE9C/GBrpFNSXNOZp+A1mQljRL5OJz/n4fX7CJz+OGZsGw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:51:16 2026 by rpki-client