Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ca2a875-5dc6-3f7f-a0eb-cc588ed79136.roa
File:                     3ca2a875-5dc6-3f7f-a0eb-cc588ed79136.roa (raw, json)
Hash identifier:          ywSko19wwfCG/0fc+N4kK48cKtR5x3j6/dwRI57vU30=
Subject key identifier:   AD:95:18:91:A2:90:F4:B6:2B:DE:F1:29:AC:1D:AF:5E:F1:E4:B0:FE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DDF00D5477C97D481EEC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ca2a875-5dc6-3f7f-a0eb-cc588ed79136.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     397165
IP address blocks:        2001:470:15b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:df:00:d5:47:7c:97:d4:81:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=e8c1dc6f-1fea-4b98-9a29-fc1825ded4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:15:03:7d:a5:05:d4:8e:c0:35:95:ef:6a:75:
                    e1:fa:60:31:02:bc:6c:3c:7c:f9:35:8a:d4:bf:50:
                    bf:32:98:d6:11:6a:12:27:90:a1:b1:6c:c4:e9:f1:
                    d2:85:88:b9:06:f6:c9:ae:e5:8b:fe:4c:97:82:17:
                    78:79:0f:11:91:d1:a0:16:c7:4a:8f:6f:e0:25:05:
                    e1:b7:3c:d3:bf:d8:6d:77:e6:bd:08:90:e9:10:71:
                    ea:42:ed:46:ab:6a:e0:ad:86:00:44:f0:1d:22:93:
                    d6:f6:5e:67:15:c6:41:2a:52:38:80:9a:77:37:04:
                    ec:bd:15:bf:1d:a1:62:56:35:4a:83:2a:71:70:82:
                    cf:b6:85:b8:39:00:a9:4f:83:8f:ef:08:55:3f:3c:
                    a6:5d:a5:34:dc:db:c3:d8:01:2b:f7:18:e8:a0:99:
                    00:a3:2b:8c:57:32:3e:2d:31:17:ea:e2:39:d5:24:
                    54:5d:13:0f:f2:75:53:d9:4c:18:44:9b:b0:79:c1:
                    14:23:4f:d9:44:ea:49:dc:5c:95:7b:01:b7:de:33:
                    2a:58:8f:c7:73:8c:07:d4:f2:0a:4b:bd:d2:c5:1b:
                    75:9a:a5:46:00:42:3e:09:b2:5a:cc:f8:f7:aa:85:
                    e9:61:97:10:5c:1d:ee:87:f9:bc:f8:97:32:67:41:
                    d4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:95:18:91:A2:90:F4:B6:2B:DE:F1:29:AC:1D:AF:5E:F1:E4:B0:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ca2a875-5dc6-3f7f-a0eb-cc588ed79136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:15b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:fc:31:5a:a5:ce:bf:59:1e:5c:05:bd:e4:e2:b4:21:b5:a7:
         8a:f1:db:2d:be:76:3f:37:65:ac:d2:0f:2c:9f:84:6d:8a:7e:
         83:db:12:b7:5d:3b:ec:5b:85:ed:1d:3e:9f:40:7e:3e:7d:7d:
         cb:59:97:c7:83:3e:9b:e3:58:fe:76:cb:90:c0:35:33:d4:5c:
         98:21:31:ac:2e:cf:9c:52:fe:db:5f:ad:3f:73:ae:3d:44:ab:
         64:52:d5:e4:6a:a3:c5:47:f7:3d:88:36:e5:aa:10:59:f3:06:
         c7:6c:08:35:34:22:78:48:d5:45:9b:57:26:30:2c:91:2e:d5:
         14:ad:b6:8d:ad:0a:95:f6:7d:15:f9:b5:13:1d:19:6d:01:d9:
         1e:9d:0b:44:53:71:57:ce:13:63:c8:96:b0:46:1e:d9:f6:27:
         7c:e8:4e:00:d4:6e:59:ca:45:8d:22:50:49:8c:7b:98:fb:7a:
         fc:05:42:8d:4b:a6:1c:83:72:ae:08:f8:8f:8a:fa:16:f8:17:
         bf:68:76:da:7e:a3:74:40:2e:5a:f4:7a:68:40:ae:11:b6:f3:
         02:21:e5:cc:ec:4e:0a:31:48:ab:aa:d0:94:b4:41:ad:aa:da:
         08:38:ea:7b:3c:86:17:81:48:a9:9c:ce:8f:02:6f:ce:79:ad:
         27:3c:a8:ae
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+fd8A1Ud8l9SB7sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk
ZThjMWRjNmYtMWZlYS00Yjk4LTlhMjktZmMxODI1ZGVkNGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRUDfaUF1I7ANZXvanXh+mAxArxsPHz5NYrU
v1C/MpjWEWoSJ5ChsWzE6fHShYi5BvbJruWL/kyXghd4eQ8RkdGgFsdKj2/gJQXh
tzzTv9htd+a9CJDpEHHqQu1Gq2rgrYYARPAdIpPW9l5nFcZBKlI4gJp3NwTsvRW/
HaFiVjVKgypxcILPtoW4OQCpT4OP7whVPzymXaU03NvD2AEr9xjooJkAoyuMVzI+
LTEX6uI51SRUXRMP8nVT2UwYRJuwecEUI0/ZROpJ3FyVewG33jMqWI/Hc4wH1PIK
S73SxRt1mqVGAEI+CbJazPj3qoXpYZcQXB3uh/m8+JcyZ0HUQQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK2VGJGikPS2K97xKawdr17x5LD+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2NhMmE4NzUtNWRjNi0z
ZjdmLWEwZWItY2M1ODhlZDc5MTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFb
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABD8MVqlzr9ZHlwFveTitCG1p4rx2y2+dj83ZazSDyyfhG2KfoPb
ErddO+xbhe0dPp9Afj59fctZl8eDPpvjWP52y5DANTPUXJghMawuz5xS/ttfrT9z
rj1Eq2RS1eRqo8VH9z2INuWqEFnzBsdsCDU0InhI1UWbVyYwLJEu1RStto2tCpX2
fRX5tRMdGW0B2R6dC0RTcVfOE2PIlrBGHtn2J3zoTgDUblnKRY0iUEmMe5j7evwF
Qo1LphyDcq4I+I+K+hb4F79odtp+o3RALlr0emhArhG28wIh5czsTgoxSKuq0JS0
Qa2q2gg46ns8hheBSKmczo8Cb855rSc8qK4=
-----END CERTIFICATE-----
Generated at Sat Oct 24 15:43:06 2026 by rpki-client