Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e54a944-730a-34d7-b327-ded75ab93832.roa
File:                     2e54a944-730a-34d7-b327-ded75ab93832.roa (raw, json)
Hash identifier:          L60SWUUA7/5shgp2k3HQKNGSy3yGp2b7mISDkn7wSws=
Subject key identifier:   3F:24:87:97:1A:91:98:C6:41:8E:BE:C7:7E:C6:A7:F1:FA:10:04:65
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DFD0A91904CF7FBDBCD00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e54a944-730a-34d7-b327-ded75ab93832.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     44209
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:fd:0a:91:90:4c:f7:fb:db:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=272ff8da-91ee-4bda-8a6e-907e7f69f36d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:00:00:b2:4f:c1:94:0f:60:fa:43:84:66:d5:
                    6f:04:c9:26:14:f0:9c:8c:14:1d:a1:fc:dd:de:70:
                    f9:ee:af:93:ab:b9:e2:0e:13:9a:34:ed:2a:40:9e:
                    48:e8:df:f9:6f:03:c5:da:28:8c:ef:9e:69:2e:08:
                    5a:37:52:12:cb:2a:fb:b1:b6:50:1b:5d:df:75:51:
                    e4:38:75:a8:c3:27:37:91:11:8a:47:37:b9:e3:93:
                    fd:19:0c:db:4f:04:57:66:87:45:56:3a:db:dd:73:
                    01:ea:be:b0:7f:36:40:cf:cc:28:34:eb:ab:45:9f:
                    9a:fd:75:a7:27:60:0d:6a:d2:fb:9c:02:84:18:46:
                    e3:dd:d1:6d:ba:62:30:3e:e2:2e:bd:7f:dc:54:1d:
                    1b:3e:c8:89:d2:b5:6f:f4:61:d2:16:27:bb:f3:36:
                    3c:9e:ba:08:ce:39:d4:83:90:d1:5b:14:cc:99:9a:
                    d7:11:51:4c:2b:6b:7e:4f:4c:3c:56:88:11:7f:af:
                    54:f5:10:e9:e6:e5:7a:6f:41:7c:89:d1:23:f2:2d:
                    d4:f5:0d:a2:2d:18:20:8a:64:4f:9b:a1:47:9f:a5:
                    58:dc:ac:10:60:47:6c:58:7f:4d:37:fb:d1:b4:85:
                    1c:98:36:94:51:8f:53:47:cd:c1:a4:6c:3c:97:7d:
                    5a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:24:87:97:1A:91:98:C6:41:8E:BE:C7:7E:C6:A7:F1:FA:10:04:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e54a944-730a-34d7-b327-ded75ab93832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:a9:9c:40:73:1d:0d:21:ef:b0:c2:43:91:2e:7c:f7:3b:9f:
         7e:d5:bd:c0:c4:34:0e:1f:2d:ef:4e:0a:fc:ea:39:26:ac:f6:
         8e:3d:99:25:d8:87:c7:b1:18:b9:94:86:b9:79:c9:92:47:b0:
         c2:a3:1f:3f:67:69:97:cc:42:b5:92:9f:cd:a3:bb:a9:55:08:
         8c:a7:85:32:d3:37:d2:38:28:12:fc:dd:cc:bf:53:a1:a7:9f:
         f3:53:11:4a:fc:c6:92:6d:74:42:8f:26:71:43:2f:c3:c9:78:
         92:97:ba:b9:d7:85:b6:9e:64:f6:cd:97:45:fd:f4:2b:9d:13:
         b9:f3:17:59:44:e8:36:b2:fd:a5:cc:cb:c7:74:7b:ab:ea:49:
         3b:40:6c:1a:ad:ca:87:a9:db:6b:b4:19:66:3e:9a:78:c4:49:
         c3:78:7e:f0:c1:74:cd:d9:43:c5:8e:dc:93:cd:5b:c5:a2:b4:
         ed:c4:6a:e9:30:12:aa:23:14:39:2e:8b:b6:27:b2:1e:34:94:
         50:82:46:24:89:9d:d5:9a:10:82:99:ef:43:b1:09:7b:b7:0c:
         fa:69:ce:f5:83:3b:ed:d9:61:1d:e6:34:ee:8a:9a:fc:d6:2e:
         ba:95:04:7d:6c:d6:b5:06:2f:0d:fe:10:d4:5f:88:c7:2f:e6:
         20:81:af:46
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+ff0KkZBM9/vbzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk
MjcyZmY4ZGEtOTFlZS00YmRhLThhNmUtOTA3ZTdmNjlmMzZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAAAsk/BlA9g+kOEZtVvBMkmFPCcjBQdofzd
3nD57q+Tq7niDhOaNO0qQJ5I6N/5bwPF2iiM755pLghaN1ISyyr7sbZQG13fdVHk
OHWowyc3kRGKRze545P9GQzbTwRXZodFVjrb3XMB6r6wfzZAz8woNOurRZ+a/XWn
J2ANatL7nAKEGEbj3dFtumIwPuIuvX/cVB0bPsiJ0rVv9GHSFie78zY8nroIzjnU
g5DRWxTMmZrXEVFMK2t+T0w8VogRf69U9RDp5uV6b0F8idEj8i3U9Q2iLRggimRP
m6FHn6VY3KwQYEdsWH9NN/vRtIUcmDaUUY9TR83BpGw8l31akwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFD8kh5cakZjGQY6+x37Gp/H6EARlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmU1NGE5NDQtNzMwYS0z
NGQ3LWIzMjctZGVkNzVhYjkzODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADKpnEBzHQ0h77DCQ5EufPc7n37VvcDENA4fLe9OCvzqOSas9o49
mSXYh8exGLmUhrl5yZJHsMKjHz9naZfMQrWSn82ju6lVCIynhTLTN9I4KBL83cy/
U6Gnn/NTEUr8xpJtdEKPJnFDL8PJeJKXurnXhbaeZPbNl0X99CudE7nzF1lE6Day
/aXMy8d0e6vqSTtAbBqtyoep22u0GWY+mnjEScN4fvDBdM3ZQ8WO3JPNW8WitO3E
aukwEqojFDkui7Ynsh40lFCCRiSJndWaEIKZ70OxCXu3DPppzvWDO+3ZYR3mNO6K
mvzWLrqVBH1s1rUGLw3+ENRfiMcv5iCBr0Y=
-----END CERTIFICATE-----
Generated at Mon Oct 26 03:56:56 2026 by rpki-client