Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/a6d68c1e-9961-33a5-b8a2-3e917f115c56.roa
File:                     a6d68c1e-9961-33a5-b8a2-3e917f115c56.roa (raw, json)
Hash identifier:          QkmUVgKCDsfLeWnuXPRd95GN0BxKRGLJplGl8tqYoeE=
Subject key identifier:   A7:75:AC:B7:D5:F5:CC:EF:4E:10:18:F2:62:7D:B7:7A:72:26:82:7A
Certificate issuer:       /CN=58d440e8-959f-43ab-a410-371a599ce552
Certificate serial:       010D0C9F4328584E3A2F3F0F37B05926222CA500
Authority key identifier: FA:8F:D3:BC:E0:72:04:46:78:07:43:1B:41:90:EA:40:C1:6E:F8:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/a6d68c1e-9961-33a5-b8a2-3e917f115c56.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     26806
IP address blocks:        2620:f6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:3f:0f:37:b0:59:26:22:2c:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d440e8-959f-43ab-a410-371a599ce552
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=fc6a1316-e702-4fec-9ee1-a57c13f75bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:10:91:a6:94:af:05:cd:f8:1d:f2:e5:d3:1a:
                    44:9e:fd:71:d4:1d:62:45:cc:a6:a9:51:da:9d:11:
                    db:f2:e5:75:bd:cc:65:41:f4:ee:b8:ce:61:27:49:
                    e2:6f:4d:ce:90:cc:79:5a:0b:48:89:a0:7b:49:67:
                    e3:f0:1c:22:68:3f:c8:92:b5:a8:55:93:fe:10:73:
                    41:85:dd:bf:57:c2:30:03:25:36:18:2f:fc:08:25:
                    fe:fa:c4:e1:06:33:34:96:34:53:13:d3:de:b7:aa:
                    55:6a:b6:fd:60:82:c9:4c:bc:b1:a9:f4:de:06:64:
                    c5:74:a7:ce:78:7d:1f:45:f3:06:8f:ee:84:23:c9:
                    a5:fa:64:b1:9c:d8:ba:a0:11:7a:68:37:f1:67:55:
                    83:8d:d9:13:18:4b:b2:46:cf:dc:f2:3e:46:04:3b:
                    e3:69:e8:4c:32:f4:2e:1c:86:5a:63:fc:41:13:8e:
                    9d:76:49:d7:ea:0b:83:89:d2:f4:d8:17:96:68:2a:
                    c9:7d:9b:0b:72:31:21:cd:d0:79:8f:b5:76:a5:82:
                    6e:79:29:c8:40:80:db:55:9e:31:c2:a7:c7:3d:dd:
                    8f:1f:ad:a1:2f:b7:c8:9b:3b:68:d9:dc:2c:45:19:
                    0e:f5:14:30:77:8c:26:ec:21:56:c2:2a:0a:68:d2:
                    59:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:75:AC:B7:D5:F5:CC:EF:4E:10:18:F2:62:7D:B7:7A:72:26:82:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/a6d68c1e-9961-33a5-b8a2-3e917f115c56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.crl

            X509v3 Authority Key Identifier:
                keyid:FA:8F:D3:BC:E0:72:04:46:78:07:43:1B:41:90:EA:40:C1:6E:F8:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:f6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:8f:7c:39:4c:c8:ad:a2:34:d5:5f:fa:2b:24:ef:22:4c:7d:
         18:d3:c2:b9:24:ce:1d:58:88:56:ac:bb:0b:48:18:e5:a6:c4:
         1b:bd:6c:30:87:7b:35:80:78:ba:2e:16:93:bd:dd:21:0c:e9:
         67:49:e8:18:60:18:a7:67:62:f1:08:44:7b:54:c3:86:6a:ef:
         22:4d:21:21:0d:97:c1:38:1f:e3:1e:17:d1:5b:8a:f4:bb:1b:
         c3:34:d0:9b:0e:ca:ee:2d:15:77:83:f5:28:e6:c5:35:e0:42:
         5a:5b:3a:5b:62:48:12:8d:89:6e:4e:06:51:bd:43:2f:46:16:
         c8:e7:93:6e:17:71:2f:0a:4b:6b:cb:ef:23:1d:87:68:16:9e:
         f8:85:cc:1f:4b:40:ad:3e:c7:21:12:63:3e:4d:eb:84:86:3a:
         d6:9e:88:1c:25:43:65:73:cd:80:e9:9f:75:b4:9b:87:00:2a:
         23:b2:2b:8a:9d:80:96:b0:f4:97:8e:10:64:f6:c7:82:d8:bb:
         af:8d:37:27:19:df:45:63:de:57:a3:b3:27:8a:60:d4:45:84:
         78:4e:9d:d9:17:3b:da:1e:ff:0d:15:40:4a:cf:f3:73:93:b3:
         8d:e5:7e:92:ca:ef:46:31:41:a1:76:6d:18:a2:9f:17:5d:5a:
         87:f0:1b:62
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE46Lz8PN7BZJiIspQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNThkNDQwZTgtOTU5Zi00M2FiLWE0MTAtMzcxYTU5OWNl
NTUyMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk
ZmM2YTEzMTYtZTcwMi00ZmVjLTllZTEtYTU3YzEzZjc1YmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hCRppSvBc34HfLl0xpEnv1x1B1iRcymqVHa
nRHb8uV1vcxlQfTuuM5hJ0nib03OkMx5WgtIiaB7SWfj8BwiaD/IkrWoVZP+EHNB
hd2/V8IwAyU2GC/8CCX++sThBjM0ljRTE9Pet6pVarb9YILJTLyxqfTeBmTFdKfO
eH0fRfMGj+6EI8ml+mSxnNi6oBF6aDfxZ1WDjdkTGEuyRs/c8j5GBDvjaehMMvQu
HIZaY/xBE46ddknX6guDidL02BeWaCrJfZsLcjEhzdB5j7V2pYJueSnIQIDbVZ4x
wqfHPd2PH62hL7fImzto2dwsRRkO9RQwd4wm7CFWwioKaNJZwQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKd1rLfV9czvThAY8mJ9t3pyJoJ6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81OGQ0
NDBlOC05NTlmLTQzYWItYTQxMC0zNzFhNTk5Y2U1NTIvYTZkNjhjMWUtOTk2MS0z
M2E1LWI4YTItM2U5MTdmMTE1YzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNThkNDQwZTgtOTU5Zi00M2FiLWE0
MTAtMzcxYTU5OWNlNTUyLzU4ZDQ0MGU4LTk1OWYtNDNhYi1hNDEwLTM3MWE1OTlj
ZTU1Mi5jcmwwHwYDVR0jBBgwFoAU+o/TvOByBEZ4B0MbQZDqQMFu+IMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81OGQ0NDBlOC05NTlmLTQzYWItYTQxMC0zNzFh
NTk5Y2U1NTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA9gAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFuPfDlMyK2iNNVf+isk7yJMfRjTwrkkzh1YiFasuwtIGOWmxBu9
bDCHezWAeLouFpO93SEM6WdJ6BhgGKdnYvEIRHtUw4Zq7yJNISENl8E4H+MeF9Fb
ivS7G8M00JsOyu4tFXeD9SjmxTXgQlpbOltiSBKNiW5OBlG9Qy9GFsjnk24XcS8K
S2vL7yMdh2gWnviFzB9LQK0+xyESYz5N64SGOtaeiBwlQ2VzzYDpn3W0m4cAKiOy
K4qdgJaw9JeOEGT2x4LYu6+NNycZ30Vj3lejsyeKYNRFhHhOndkXO9oe/w0VQErP
83OTs43lfpLK70YxQaF2bRiinxddWofwG2I=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:44:45 2026 by rpki-client