Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/a0be1c20-09b7-35fb-b383-81c337bd7b9b.roa
File:                     a0be1c20-09b7-35fb-b383-81c337bd7b9b.roa (raw, json)
Hash identifier:          mnXBz+8t89Z0UX71bymbviG1tPSK65JHZdRnn9PnxUU=
Subject key identifier:   09:EA:FB:EB:1C:49:D9:81:46:EA:63:0B:00:89:10:8C:F7:40:F1:93
Certificate issuer:       /CN=bac49063-78ed-4cca-a152-73b0c601c1bb
Certificate serial:       010D0C9F4328584E66DA0D479BED370976EECA00
Authority key identifier: B6:E1:DA:35:C9:CA:68:3E:39:F5:CF:67:64:78:89:DB:A5:A4:47:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/a0be1c20-09b7-35fb-b383-81c337bd7b9b.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     54058
IP address blocks:        2620:cb:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/bac49063-78ed-4cca-a152-73b0c601c1bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/bac49063-78ed-4cca-a152-73b0c601c1bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:0d:47:9b:ed:37:09:76:ee:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bac49063-78ed-4cca-a152-73b0c601c1bb
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=650bb000-a955-4c4c-923a-37a1a6e902d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3f:58:e9:13:7d:c2:34:15:0f:d4:fc:67:0d:
                    f4:cd:b7:f6:d1:ee:9b:ba:e9:ab:c4:c9:d8:69:12:
                    13:25:5c:80:9b:69:17:bc:80:19:51:a8:d0:7a:2c:
                    2b:b6:38:95:a4:1c:76:2b:27:7e:13:af:61:71:33:
                    df:ec:25:fb:9d:00:2b:3b:1a:43:af:a6:44:fa:23:
                    f8:9a:48:43:d6:3a:91:21:e8:47:85:1c:11:8f:f3:
                    44:7c:97:95:d7:1a:33:76:6d:d9:d5:c4:3e:40:d4:
                    cf:f1:14:98:14:cd:9f:73:88:7d:df:7c:70:6d:a3:
                    5c:59:c9:95:3a:86:4e:35:fd:0c:b5:e4:7e:85:c9:
                    92:36:5f:35:30:45:26:62:3f:94:6a:5c:e4:b3:06:
                    cf:88:9c:7f:7a:df:0a:ad:d9:aa:a5:60:fc:cd:40:
                    49:f2:18:b3:ee:72:de:b8:f2:32:55:91:d5:e8:03:
                    9d:34:b0:f8:04:2e:cd:3c:71:d9:0e:11:08:74:44:
                    27:e8:b7:94:17:9c:31:97:2c:f6:54:8c:3b:6d:12:
                    4d:27:96:c7:c5:4a:43:59:68:d3:a3:27:8d:36:33:
                    cb:7b:7a:25:bb:cc:bd:1a:14:f5:6b:ce:49:85:e8:
                    54:83:45:ef:80:ae:7c:fe:7f:16:9e:7f:bc:d1:56:
                    8a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EA:FB:EB:1C:49:D9:81:46:EA:63:0B:00:89:10:8C:F7:40:F1:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/a0be1c20-09b7-35fb-b383-81c337bd7b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/bac49063-78ed-4cca-a152-73b0c601c1bb.crl

            X509v3 Authority Key Identifier:
                keyid:B6:E1:DA:35:C9:CA:68:3E:39:F5:CF:67:64:78:89:DB:A5:A4:47:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:cb:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ba:79:89:4f:29:5e:de:d6:b8:96:7e:d1:0d:39:23:49:c6:
         2c:a5:50:35:88:d3:b8:b2:7b:69:69:7e:ab:54:af:ca:83:d2:
         16:f5:83:e0:7c:23:75:66:b5:4d:c4:2f:e2:ff:4f:ab:86:2e:
         c5:ed:24:ed:c3:66:ad:f4:96:dd:8e:cc:9f:d3:2c:b3:f6:3c:
         73:de:38:39:e7:d4:68:01:f5:31:00:d5:3c:51:0c:7c:cc:fb:
         45:a2:e9:70:31:c9:41:8b:20:5f:7e:f2:ba:0a:ee:eb:83:9b:
         48:71:bd:3d:0d:de:b2:51:7c:9a:35:82:0b:56:5e:56:3c:7b:
         d1:4d:57:5b:a7:19:57:ee:62:16:28:2a:e8:19:35:f1:ce:cb:
         e1:3e:7b:e1:c8:9a:9a:df:11:06:40:b3:09:96:02:6e:38:5f:
         76:58:45:64:e1:9d:5b:af:a8:44:42:92:f4:c4:92:b9:82:74:
         04:e3:b3:d3:1b:a5:c5:21:0c:8b:e7:86:c3:a1:f2:b8:40:ba:
         a4:83:33:0f:42:66:84:ed:77:37:d3:8e:a4:24:d3:32:31:8f:
         27:3f:9b:21:0a:aa:0f:36:ec:bf:85:09:46:e3:5a:6a:90:7e:
         b8:9e:6c:51:c7:1c:cd:1e:e9:fc:e9:76:20:17:6b:cc:42:29:
         62:2f:b1:73
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5m2g1Hm+03CXbuygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmFjNDkwNjMtNzhlZC00Y2NhLWExNTItNzNiMGM2MDFj
MWJiMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk
NjUwYmIwMDAtYTk1NS00YzRjLTkyM2EtMzdhMWE2ZTkwMmQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj9Y6RN9wjQVD9T8Zw30zbf20e6buumrxMnY
aRITJVyAm2kXvIAZUajQeiwrtjiVpBx2Kyd+E69hcTPf7CX7nQArOxpDr6ZE+iP4
mkhD1jqRIehHhRwRj/NEfJeV1xozdm3Z1cQ+QNTP8RSYFM2fc4h933xwbaNcWcmV
OoZONf0MteR+hcmSNl81MEUmYj+UalzkswbPiJx/et8KrdmqpWD8zUBJ8hiz7nLe
uPIyVZHV6AOdNLD4BC7NPHHZDhEIdEQn6LeUF5wxlyz2VIw7bRJNJ5bHxUpDWWjT
oyeNNjPLe3olu8y9GhT1a85JhehUg0XvgK58/n8Wnn+80VaKYwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAnq++scSdmBRupjCwCJEIz3QPGTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYWM0
OTA2My03OGVkLTRjY2EtYTE1Mi03M2IwYzYwMWMxYmIvYTBiZTFjMjAtMDliNy0z
NWZiLWIzODMtODFjMzM3YmQ3YjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmFjNDkwNjMtNzhlZC00Y2NhLWEx
NTItNzNiMGM2MDFjMWJiL2JhYzQ5MDYzLTc4ZWQtNGNjYS1hMTUyLTczYjBjNjAx
YzFiYi5jcmwwHwYDVR0jBBgwFoAUtuHaNcnKaD459c9nZHiJ26WkR6UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iYWM0OTA2My03OGVkLTRjY2EtYTE1Mi03M2Iw
YzYwMWMxYmIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAy4AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC26eYlPKV7e1riWftENOSNJxiylUDWI07iye2lpfqtUr8qD0hb1
g+B8I3VmtU3EL+L/T6uGLsXtJO3DZq30lt2OzJ/TLLP2PHPeODnn1GgB9TEA1TxR
DHzM+0Wi6XAxyUGLIF9+8roK7uuDm0hxvT0N3rJRfJo1ggtWXlY8e9FNV1unGVfu
YhYoKugZNfHOy+E+e+HImprfEQZAswmWAm44X3ZYRWThnVuvqERCkvTEkrmCdATj
s9MbpcUhDIvnhsOh8rhAuqSDMw9CZoTtdzfTjqQk0zIxjyc/myEKqg827L+FCUbj
WmqQfriebFHHHM0e6fzpdiAXa8xCKWIvsXM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:48:22 2026 by rpki-client