Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/05e24aa7-e0a3-3368-8e9d-7368f606cdf9.roa
File:                     05e24aa7-e0a3-3368-8e9d-7368f606cdf9.roa (raw, json)
Hash identifier:          Bs98L8uKMXW4b83s5qAAkmkxsqTrVyiPrZDm+IDcYR4=
Subject key identifier:   71:0A:9C:D9:AF:80:49:02:F6:33:F0:A9:54:F8:2A:40:05:97:48:38
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC9233E67AA358F17800B900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/05e24aa7-e0a3-3368-8e9d-7368f606cdf9.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     15096
IP address blocks:        2001:470:113::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:33:e6:7a:a3:58:f1:78:00:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=10168f92-0b53-4757-8a68-11279894b628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:17:0d:af:21:df:e4:4d:6e:28:af:e2:dd:18:
                    98:8f:b4:ae:ce:47:61:0c:00:40:07:fe:1f:7a:e2:
                    8e:95:e9:eb:a5:36:75:f9:87:30:ba:ce:a3:0b:fe:
                    ee:27:f6:89:6a:bf:87:d7:fd:7c:ed:2a:79:fb:a6:
                    50:74:f6:eb:40:1f:eb:a8:b2:84:2c:88:4b:08:05:
                    8d:82:35:4f:c1:ee:43:8e:17:16:f7:15:7f:6f:22:
                    b1:15:13:30:3e:b5:f8:f8:af:0f:e3:b5:88:58:8d:
                    a8:6c:a5:22:c8:ca:d3:cc:e3:ac:5d:a5:d8:cc:26:
                    d8:f2:06:9b:20:07:64:3a:ff:ca:6e:d2:95:16:40:
                    96:8f:35:c5:05:f3:85:7c:e9:1a:a5:0e:cc:c3:1c:
                    05:34:e1:d2:97:83:bd:41:67:d6:71:3e:40:ef:3d:
                    f0:1c:54:90:c4:61:de:d3:df:a2:eb:2c:e7:57:d5:
                    92:ea:08:a6:2d:11:ec:98:1c:fa:ae:eb:4a:3d:28:
                    41:67:19:16:0b:06:21:f7:03:fa:2e:88:d1:b1:f8:
                    9b:40:e6:83:61:27:02:da:fc:45:3a:a8:c3:c6:16:
                    7a:fd:5e:af:61:9d:aa:3f:f5:5f:52:98:e9:68:7d:
                    67:4b:52:0e:5c:4c:c3:a5:30:9f:46:b4:0a:11:2e:
                    fd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0A:9C:D9:AF:80:49:02:F6:33:F0:A9:54:F8:2A:40:05:97:48:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/05e24aa7-e0a3-3368-8e9d-7368f606cdf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:113::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:b6:b3:50:97:9c:25:68:de:18:66:c1:ba:72:e8:b1:0c:8d:
         93:d3:63:22:2a:dd:73:94:0a:2f:ee:eb:a9:f5:48:3d:82:80:
         38:92:8f:bc:4f:ea:25:6d:1a:64:6a:8d:45:a5:e1:99:cc:e7:
         64:c2:5a:f7:8b:64:f2:fa:5c:46:06:f0:1b:de:5e:25:82:0d:
         03:36:b1:4f:df:d3:70:5a:b2:2b:98:70:0c:b6:a2:9a:16:6b:
         d1:41:bc:86:34:7d:2a:02:b1:00:fa:aa:1e:98:75:b6:6e:c3:
         e6:05:05:39:35:a4:c1:aa:26:60:ed:c3:07:e8:4e:8b:04:98:
         73:c3:75:eb:e0:51:73:6a:d4:99:5f:5e:14:2f:67:73:e6:2b:
         52:8b:ab:ce:33:bd:78:3e:48:fa:6e:c0:ba:13:9d:34:8b:b8:
         86:be:07:00:71:b4:2a:45:93:e4:07:62:f5:8b:81:02:78:92:
         ab:ca:c4:92:8b:c9:f8:72:7a:f6:e7:2a:b5:d7:7f:0d:db:f0:
         0b:36:73:ca:3c:ca:3c:1f:2e:d8:15:74:db:ce:28:a0:22:8a:
         86:a7:54:7a:9e:86:8e:2f:e2:19:46:ce:dc:60:42:e9:80:f9:
         ca:fe:5c:69:b0:f9:44:9b:85:2a:2f:5a:2d:05:21:b1:f5:6a:
         b7:91:dd:32
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ckjPmeqNY8XgAuQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
MTAxNjhmOTItMGI1My00NzU3LThhNjgtMTEyNzk4OTRiNjI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xcNryHf5E1uKK/i3RiYj7SuzkdhDABAB/4f
euKOlenrpTZ1+Ycwus6jC/7uJ/aJar+H1/187Sp5+6ZQdPbrQB/rqLKELIhLCAWN
gjVPwe5DjhcW9xV/byKxFRMwPrX4+K8P47WIWI2obKUiyMrTzOOsXaXYzCbY8gab
IAdkOv/KbtKVFkCWjzXFBfOFfOkapQ7MwxwFNOHSl4O9QWfWcT5A7z3wHFSQxGHe
09+i6yznV9WS6gimLRHsmBz6rutKPShBZxkWCwYh9wP6LojRsfibQOaDYScC2vxF
OqjDxhZ6/V6vYZ2qP/VfUpjpaH1nS1IOXEzDpTCfRrQKES79UwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHEKnNmvgEkC9jPwqVT4KkAFl0g4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDVlMjRhYTctZTBhMy0z
MzY4LThlOWQtNzM2OGY2MDZjZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAET
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAK22s1CXnCVo3hhmwbpy6LEMjZPTYyIq3XOUCi/u66n1SD2CgDiS
j7xP6iVtGmRqjUWl4ZnM52TCWveLZPL6XEYG8BveXiWCDQM2sU/f03BasiuYcAy2
opoWa9FBvIY0fSoCsQD6qh6YdbZuw+YFBTk1pMGqJmDtwwfoTosEmHPDdevgUXNq
1JlfXhQvZ3PmK1KLq84zvXg+SPpuwLoTnTSLuIa+BwBxtCpFk+QHYvWLgQJ4kqvK
xJKLyfhyevbnKrXXfw3b8As2c8o8yjwfLtgVdNvOKKAiioanVHqeho4v4hlGztxg
QumA+cr+XGmw+USbhSovWi0FIbH1areR3TI=
-----END CERTIFICATE-----
Generated at Mon Sep 14 21:55:35 2026 by rpki-client