Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/649e83e9-e363-3e14-afde-69d51ff34eb8.roa
File:                     649e83e9-e363-3e14-afde-69d51ff34eb8.roa (raw, json)
Hash identifier:          vHDf6oQESuvy+h/DlR1OCKOrpHMK4ysYhRs8wcxkM2w=
Subject key identifier:   4C:7B:48:00:8E:74:2D:74:91:C1:10:16:03:A3:2C:54:5E:D9:45:8D
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584F13024A4631D0D269D5A98700
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/649e83e9-e363-3e14-afde-69d51ff34eb8.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     26666
IP address blocks:        2601:2010::/29 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:4a:46:31:d0:d2:69:d5:a9:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=bb775ad7-c6ad-4b7d-b1fd-8e8304df4852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:16:db:b9:40:c2:3e:94:a0:7c:7e:e1:b3:
                    e9:47:17:67:40:f9:28:a2:06:90:cb:bb:fa:97:03:
                    bf:d3:e0:60:19:18:fa:08:e1:8b:74:f1:ea:f4:ff:
                    e0:23:94:6c:fa:df:3b:96:02:8d:37:cf:b4:67:ca:
                    91:e7:21:30:fb:20:e2:c8:9a:80:16:31:be:3b:e8:
                    90:10:b5:82:ea:78:45:f4:d9:40:3b:bd:87:6d:75:
                    e8:fb:7c:fb:be:87:15:7c:6c:d2:b0:22:41:11:05:
                    8b:44:a3:b5:87:1e:b6:23:16:99:19:52:82:97:04:
                    85:6f:b4:7a:a4:fd:82:7e:67:1c:23:d0:97:8d:11:
                    76:76:13:fd:bf:6b:92:fb:cb:de:08:2b:10:68:a3:
                    48:2d:a8:6c:21:08:53:2d:9e:ae:45:f2:6d:f0:f9:
                    ca:13:2d:cd:25:0d:83:d5:aa:6a:86:a1:41:e9:a5:
                    87:3f:52:6e:34:5d:12:ae:33:f0:39:1d:6a:d1:ae:
                    6a:0e:c6:8a:49:98:9b:f3:22:0d:21:c6:ed:c5:bf:
                    02:be:72:1b:c0:a0:34:77:57:f0:01:75:6f:20:5d:
                    42:cd:af:8b:dd:9d:b2:80:ee:cd:bc:04:31:a1:50:
                    83:d5:20:b9:3f:aa:16:14:88:28:e8:a5:0c:1f:12:
                    31:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7B:48:00:8E:74:2D:74:91:C1:10:16:03:A3:2C:54:5E:D9:45:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/649e83e9-e363-3e14-afde-69d51ff34eb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:2010::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a9:d8:e8:23:ca:0e:39:f6:16:ee:9a:24:6e:48:ae:cf:71:
         25:e3:b2:fa:da:59:bd:cb:cf:2e:61:66:5b:96:08:0b:9c:15:
         4b:97:8f:e7:e0:a8:4a:d3:95:fd:43:ed:b7:aa:4d:5c:2e:3b:
         66:66:f6:4b:3e:ce:aa:f3:24:28:43:79:2c:f7:6d:79:fa:fb:
         55:2c:c4:4a:48:e4:2f:a7:a9:8e:70:46:aa:2f:bf:38:0d:51:
         a2:d1:8b:9f:8f:e3:9d:44:1f:ef:de:46:0f:23:f9:89:5e:38:
         0b:c0:94:e1:5e:93:1c:c9:32:b1:df:86:a5:9a:fd:ad:eb:97:
         74:0a:f8:ef:a7:1f:4c:e3:aa:98:ad:73:d9:8f:1e:4a:a4:bf:
         5f:6a:fe:35:74:6f:9c:36:7a:ee:08:53:3c:e2:71:96:4e:3f:
         78:33:e0:3d:3c:46:5b:64:37:ed:48:b3:94:a2:38:96:80:76:
         1e:74:32:4b:83:7c:ea:1c:6b:fa:19:ff:0d:ce:99:aa:28:2f:
         23:1c:ef:2e:90:25:d6:1b:21:59:37:11:20:dc:94:62:0c:0b:
         c9:f9:15:52:77:14:bb:c4:5d:02:b4:eb:21:bc:b6:3b:d5:e9:
         03:e9:1b:9c:96:54:ea:8f:a9:39:0b:3a:b6:0b:83:c2:e2:94:
         14:f7:23:1e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8TAkpGMdDSadWphwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk
YmI3NzVhZDctYzZhZC00YjdkLWIxZmQtOGU4MzA0ZGY0ODUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhEW27lAwj6UoHx+4bPpRxdnQPkoogaQy7v6
lwO/0+BgGRj6COGLdPHq9P/gI5Rs+t87lgKNN8+0Z8qR5yEw+yDiyJqAFjG+O+iQ
ELWC6nhF9NlAO72HbXXo+3z7vocVfGzSsCJBEQWLRKO1hx62IxaZGVKClwSFb7R6
pP2CfmccI9CXjRF2dhP9v2uS+8veCCsQaKNILahsIQhTLZ6uRfJt8PnKEy3NJQ2D
1apqhqFB6aWHP1JuNF0SrjPwOR1q0a5qDsaKSZib8yINIcbtxb8CvnIbwKA0d1fw
AXVvIF1Cza+L3Z2ygO7NvAQxoVCD1SC5P6oWFIgo6KUMHxIxrQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEx7SACOdC10kcEQFgOjLFRe2UWNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvNjQ5ZTgzZTktZTM2My0z
ZTE0LWFmZGUtNjlkNTFmZjM0ZWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDJgEgEDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB5qdjoI8oOOfYW7pokbkiuz3El47L62lm9y88uYWZblggLnBVLl4/n
4KhK05X9Q+23qk1cLjtmZvZLPs6q8yQoQ3ks9215+vtVLMRKSOQvp6mOcEaqL784
DVGi0Yufj+OdRB/v3kYPI/mJXjgLwJThXpMcyTKx34almv2t65d0Cvjvpx9M46qY
rXPZjx5KpL9fav41dG+cNnruCFM84nGWTj94M+A9PEZbZDftSLOUojiWgHYedDJL
g3zqHGv6Gf8NzpmqKC8jHO8ukCXWGyFZNxEg3JRiDAvJ+RVSdxS7xF0CtOshvLY7
1ekD6RucllTqj6k5Czq2C4PC4pQU9yMe
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:17:21 2026 by rpki-client