Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b4f195e-b7ba-31c3-a975-fe4f7642b48c.roa
File:                     4b4f195e-b7ba-31c3-a975-fe4f7642b48c.roa (raw, json)
Hash identifier:          EaZCyODYjNXQiwEr/5oywZKJlWV7WRGyM6Z3zBeEld8=
Subject key identifier:   7C:5A:1F:F8:D1:3C:2B:A5:3A:F3:03:79:E6:AF:55:6B:6F:06:A2:08
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F130237CCE2E9C5CC396AC5C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b4f195e-b7ba-31c3-a975-fe4f7642b48c.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     48957
IP address blocks:        2001:470:4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:37:cc:e2:e9:c5:cc:39:6a:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=7325c84d-640e-4448-b188-1d8014c336d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:5d:c6:a3:37:fe:a0:e3:15:df:01:35:01:1a:
                    6b:8a:d9:a4:3a:ae:27:fe:b8:a9:53:59:03:cd:04:
                    72:62:68:57:57:d6:c1:31:50:a2:70:1c:af:c7:e8:
                    50:2d:43:95:20:b3:9a:96:48:28:d8:92:08:1b:88:
                    f0:7e:fc:92:5b:4c:01:10:f7:6f:53:2e:b0:ce:1d:
                    31:29:30:6c:a4:e0:90:f1:c1:df:ca:89:5a:ec:4e:
                    52:e9:63:07:43:9e:49:95:81:59:cb:b0:df:bb:16:
                    f2:ee:ab:a5:a9:c8:c6:c4:74:97:f7:6a:10:aa:04:
                    1f:e8:cd:03:a3:ef:ff:86:09:7d:a0:ae:3d:1b:3b:
                    3d:25:4f:47:f6:61:fd:dd:21:fe:6b:7d:26:a9:c3:
                    de:dc:2e:ab:2d:b9:98:d4:e3:b5:4f:c9:cb:17:67:
                    14:5a:15:40:7b:99:86:66:11:26:c0:a3:ae:1d:ca:
                    1f:5f:cb:b9:5b:06:23:0d:b4:0c:a0:c4:b7:a3:97:
                    88:1c:c2:44:a2:ba:06:fd:82:30:f7:8e:48:65:6f:
                    af:bf:d7:9e:39:48:d6:a0:bc:22:84:23:d2:33:e7:
                    c7:b4:bb:ea:72:54:83:d6:31:3c:aa:07:29:44:30:
                    53:af:14:52:31:63:3b:fc:00:71:9b:a3:c6:d5:e9:
                    e2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:5A:1F:F8:D1:3C:2B:A5:3A:F3:03:79:E6:AF:55:6B:6F:06:A2:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b4f195e-b7ba-31c3-a975-fe4f7642b48c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:bf:2f:bc:2c:5d:e6:ff:44:e5:68:e0:07:f1:00:40:7f:a1:
         c3:6a:a6:c0:4c:98:f2:00:94:5e:ea:26:07:73:97:74:45:8f:
         c4:20:a7:08:5f:4b:c1:81:31:dc:76:a3:c8:39:c6:9f:2b:a7:
         cd:a8:89:91:12:63:3e:f1:c5:d9:7c:ae:c4:24:f0:92:bd:a8:
         d0:c9:e1:17:a1:f7:bb:d6:2c:8b:85:8a:a8:30:c4:0a:3b:bb:
         a4:b8:4e:14:11:6c:db:3b:80:42:0a:90:38:f1:b8:67:b8:1b:
         97:3f:6b:0f:5d:83:a1:ad:b9:d6:a6:58:2d:51:a1:65:cf:ba:
         b3:77:e6:fb:63:fc:ab:dd:42:54:9e:da:da:b1:0a:71:a7:40:
         38:1d:d5:8f:07:9b:04:b0:b4:e8:1a:cf:41:62:35:ac:09:5c:
         14:33:5d:32:8c:c1:e7:ec:ec:15:f5:43:ed:3e:5f:1c:c4:7a:
         70:51:b8:ea:27:f0:71:28:f9:82:68:f6:4c:1b:3e:72:e3:91:
         37:77:17:cf:67:01:0a:d6:d0:c4:2b:dc:ee:8a:94:58:dd:b8:
         95:b8:4a:27:ff:89:3e:0b:db:04:c4:22:ec:36:ab:23:44:eb:
         7c:0e:3b:ff:41:51:cc:f1:64:a6:52:4a:09:88:fe:13:27:9a:
         f8:57:fe:06
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8TAjfM4unFzDlqxcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk
NzMyNWM4NGQtNjQwZS00NDQ4LWIxODgtMWQ4MDE0YzMzNmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA813Gozf+oOMV3wE1ARpritmkOq4n/ripU1kD
zQRyYmhXV9bBMVCicByvx+hQLUOVILOalkgo2JIIG4jwfvySW0wBEPdvUy6wzh0x
KTBspOCQ8cHfyola7E5S6WMHQ55JlYFZy7Dfuxby7qulqcjGxHSX92oQqgQf6M0D
o+//hgl9oK49Gzs9JU9H9mH93SH+a30mqcPe3C6rLbmY1OO1T8nLF2cUWhVAe5mG
ZhEmwKOuHcofX8u5WwYjDbQMoMS3o5eIHMJEoroG/YIw945IZW+vv9eeOUjWoLwi
hCPSM+fHtLvqclSD1jE8qgcpRDBTrxRSMWM7/ABxm6PG1eninwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHxaH/jRPCulOvMDeeavVWtvBqIIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGI0ZjE5NWUtYjdiYS0z
MWMzLWE5NzUtZmU0Zjc2NDJiNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAS9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIW/L7wsXeb/ROVo4AfxAEB/ocNqpsBMmPIAlF7qJgdzl3RFj8Qg
pwhfS8GBMdx2o8g5xp8rp82oiZESYz7xxdl8rsQk8JK9qNDJ4Reh97vWLIuFiqgw
xAo7u6S4ThQRbNs7gEIKkDjxuGe4G5c/aw9dg6GtudamWC1RoWXPurN35vtj/Kvd
QlSe2tqxCnGnQDgd1Y8HmwSwtOgaz0FiNawJXBQzXTKMwefs7BX1Q+0+XxzEenBR
uOon8HEo+YJo9kwbPnLjkTd3F89nAQrW0MQr3O6KlFjduJW4Sif/iT4L2wTEIuw2
qyNE63wOO/9BUczxZKZSSgmI/hMnmvhX/gY=
-----END CERTIFICATE-----
Generated at Sat Sep 12 07:51:55 2026 by rpki-client