Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/bb9871fe-1fe0-3fb0-acd6-9ba9d5d31284.roa
File:                     bb9871fe-1fe0-3fb0-acd6-9ba9d5d31284.roa (raw, json)
Hash identifier:          iZWFaatV+eeIRJc4MEQvurFkwAS/GeQxzn2Xh1wy6SY=
Subject key identifier:   AA:4F:43:DC:C6:14:CE:D3:D5:4C:8D:C1:F2:84:B9:A9:A1:01:08:68
Certificate issuer:       /CN=762c45fd-61f9-43a6-8ad5-fea5ef27b187
Certificate serial:       010D0C9F4328584E58E4956B47344D7A430A8E00
Authority key identifier: 8D:C3:30:A2:3D:E2:01:CB:19:30:E7:68:F2:13:0E:A8:3E:36:F9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/bb9871fe-1fe0-3fb0-acd6-9ba9d5d31284.roa
Signing time:             Tue 30 Jun 2026 21:00:12 +0000
ROA not before:           Tue 30 Jun 2026 21:00:12 +0000
ROA not after:            Mon 28 Sep 2026 21:00:12 +0000
asID:                     213734
IP address blocks:        2606:58c0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:58:e4:95:6b:47:34:4d:7a:43:0a:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762c45fd-61f9-43a6-8ad5-fea5ef27b187
        Validity
            Not Before: Jun 30 21:00:12 2026 GMT
            Not After : Sep 28 21:00:12 2026 GMT
        Subject: CN=46fcda4a-9c49-4a42-a7d8-5219c79f9043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4d:a2:21:9a:3f:90:b7:62:b2:11:4a:56:17:
                    87:45:aa:20:52:3c:ad:2e:b4:1a:c4:33:9e:5e:41:
                    62:91:09:ef:03:c2:0d:98:21:6e:9b:36:75:ee:51:
                    f7:28:ea:65:65:fc:9e:69:3a:df:8f:35:bc:63:99:
                    0e:02:93:e6:4d:0e:e7:2c:c4:d6:cc:d4:43:f1:dc:
                    83:a7:98:d6:5e:52:83:f2:29:fd:23:38:a9:37:24:
                    c8:7e:30:e2:b5:d8:73:69:4d:92:2d:bb:20:d4:c8:
                    a3:7e:b8:c4:e4:8c:5f:b6:95:5a:44:ab:df:8b:a4:
                    ee:5d:96:91:93:54:6c:c6:b2:9f:40:74:88:11:60:
                    fe:53:7b:7e:93:8a:17:43:2f:27:83:62:fc:3a:3b:
                    76:32:1d:2d:a3:f5:0f:7b:16:cf:10:3a:ff:45:fd:
                    25:73:20:e4:0d:b9:76:98:3a:1f:ce:5c:5e:a9:b9:
                    e9:94:ef:f8:64:de:90:6c:9e:c5:e7:16:02:82:b6:
                    f9:d3:ef:28:ab:5e:66:40:e8:1a:ba:62:d9:f5:67:
                    99:ba:b5:21:28:38:78:ed:4e:cb:f2:39:8b:08:3a:
                    f9:de:1e:52:87:45:18:2b:18:c7:b0:9d:40:d0:80:
                    d3:ec:cd:1d:3d:05:9c:aa:10:f6:06:05:ca:f7:99:
                    ce:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4F:43:DC:C6:14:CE:D3:D5:4C:8D:C1:F2:84:B9:A9:A1:01:08:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/bb9871fe-1fe0-3fb0-acd6-9ba9d5d31284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.crl

            X509v3 Authority Key Identifier:
                keyid:8D:C3:30:A2:3D:E2:01:CB:19:30:E7:68:F2:13:0E:A8:3E:36:F9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:58c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:74:41:1d:12:4c:9b:45:c8:5a:f4:18:86:b9:bd:3a:c4:27:
         26:d8:3c:04:d3:ce:d2:99:d7:a8:c3:d2:89:56:19:2c:b8:50:
         09:ce:0d:3f:9a:29:e0:73:90:65:58:58:e8:00:33:8d:84:81:
         68:3e:67:a9:4b:46:df:b7:a1:97:b1:cd:7b:f6:50:34:3e:24:
         d7:d2:81:b5:7b:a1:38:d4:2c:25:44:69:21:39:36:6e:a0:9a:
         58:75:47:93:5c:78:40:3d:4a:8b:4b:77:09:26:4b:cd:e9:49:
         e1:1c:e1:ac:97:34:3b:94:87:01:ec:e0:e2:42:2e:e3:66:8a:
         33:dc:2c:ac:37:98:39:c3:14:77:92:0f:0f:f2:3a:fc:c9:2c:
         91:18:ad:6e:49:d8:35:9a:cc:54:b5:77:85:d7:08:6b:26:aa:
         7f:a5:7a:53:13:26:0c:fe:8d:3f:2e:5a:1d:1c:58:a8:86:49:
         68:8b:54:34:50:2d:80:a2:e3:ee:fc:a1:7d:5f:64:08:17:67:
         5e:80:ac:ad:52:12:e9:c0:55:c9:02:e4:aa:13:71:c2:0f:0c:
         74:d0:47:43:dd:da:b6:38:b7:b1:c5:e2:cb:72:5b:64:a8:e7:
         7b:87:84:21:45:60:97:cb:2e:ab:a5:cc:78:c8:81:a9:49:3c:
         0f:e9:af:ea
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5Y5JVrRzRNekMKjgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzYyYzQ1ZmQtNjFmOS00M2E2LThhZDUtZmVhNWVmMjdi
MTg3MB4XDTI2MDYzMDIxMDAxMloXDTI2MDkyODIxMDAxMlowLzEtMCsGA1UEAxMk
NDZmY2RhNGEtOWM0OS00YTQyLWE3ZDgtNTIxOWM3OWY5MDQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu02iIZo/kLdishFKVheHRaogUjytLrQaxDOe
XkFikQnvA8INmCFumzZ17lH3KOplZfyeaTrfjzW8Y5kOApPmTQ7nLMTWzNRD8dyD
p5jWXlKD8in9IzipNyTIfjDitdhzaU2SLbsg1MijfrjE5IxftpVaRKvfi6TuXZaR
k1RsxrKfQHSIEWD+U3t+k4oXQy8ng2L8Ojt2Mh0to/UPexbPEDr/Rf0lcyDkDbl2
mDofzlxeqbnplO/4ZN6QbJ7F5xYCgrb50+8oq15mQOgaumLZ9WeZurUhKDh47U7L
8jmLCDr53h5Sh0UYKxjHsJ1A0IDT7M0dPQWcqhD2BgXK95nOJwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKpPQ9zGFM7T1UyNwfKEuamhAQhoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NjJj
NDVmZC02MWY5LTQzYTYtOGFkNS1mZWE1ZWYyN2IxODcvYmI5ODcxZmUtMWZlMC0z
ZmIwLWFjZDYtOWJhOWQ1ZDMxMjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzYyYzQ1ZmQtNjFmOS00M2E2LThh
ZDUtZmVhNWVmMjdiMTg3Lzc2MmM0NWZkLTYxZjktNDNhNi04YWQ1LWZlYTVlZjI3
YjE4Ny5jcmwwHwYDVR0jBBgwFoAUjcMwoj3iAcsZMOdo8hMOqD42+bEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjJjNDVmZC02MWY5LTQzYTYtOGFkNS1mZWE1
ZWYyN2IxODcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZYwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCLdEEdEkybRcha9BiGub06xCcm2DwE087Smdeow9KJVhksuFAJzg0/
mingc5BlWFjoADONhIFoPmepS0bft6GXsc179lA0PiTX0oG1e6E41CwlRGkhOTZu
oJpYdUeTXHhAPUqLS3cJJkvN6UnhHOGslzQ7lIcB7ODiQi7jZooz3CysN5g5wxR3
kg8P8jr8ySyRGK1uSdg1msxUtXeF1whrJqp/pXpTEyYM/o0/LlodHFiohkloi1Q0
UC2AouPu/KF9X2QIF2degKytUhLpwFXJAuSqE3HCDwx00EdD3dq2OLexxeLLcltk
qOd7h4QhRWCXyy6rpcx4yIGpSTwP6a/q
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:47:59 2026 by rpki-client