Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e22535c-66ce-36cf-93fc-5e992947b804.roa
File:                     4e22535c-66ce-36cf-93fc-5e992947b804.roa (raw, json)
Hash identifier:          zUE+BR692MU8P40/kD6jEPCgBemgYsPoPqiGpCRCxNo=
Subject key identifier:   DB:0F:DE:DB:32:A9:54:34:E8:81:3E:92:7D:2D:04:02:5C:73:35:C6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC922A3E7EE9233CAB2D9B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e22535c-66ce-36cf-93fc-5e992947b804.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     15517
IP address blocks:        2001:470:2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:2a:3e:7e:e9:23:3c:ab:2d:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=2d2164f0-f51b-409a-9566-bc1cab97bd62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:25:1e:f0:b5:8d:b2:bd:bc:dd:e4:32:0b:fa:
                    49:9e:93:12:a8:73:7b:76:18:30:bb:de:87:31:66:
                    9f:4b:4b:8e:d5:88:64:a2:fc:04:d5:54:8d:0a:cb:
                    03:37:2d:62:12:3e:b6:24:29:4d:e4:f3:1d:37:e1:
                    b5:85:63:42:48:89:d6:61:23:4b:c7:8a:05:cb:fc:
                    f5:b8:f3:ec:9b:98:c0:59:38:37:48:b4:2d:fa:b5:
                    12:d9:38:e6:92:92:36:22:19:4d:43:44:a6:fb:73:
                    46:ee:a3:ed:64:37:2e:f6:d2:ef:ed:05:4b:45:d0:
                    8b:3f:f2:d5:39:d3:db:bf:ea:d2:d9:62:cf:b0:3c:
                    48:9f:08:2d:20:53:32:0e:d1:50:46:b3:68:1e:d0:
                    40:d4:1f:ee:dc:a4:55:14:f9:5b:05:64:4b:76:6c:
                    2e:1a:64:15:ca:38:77:c7:43:05:9e:e4:51:03:30:
                    44:e0:7b:da:af:2d:fc:fc:79:4e:ee:73:02:aa:3c:
                    25:3c:91:69:cc:e5:ee:2b:80:2a:0f:d8:c7:e5:b9:
                    a4:8c:4d:98:16:49:33:c8:fb:8d:3a:54:5c:96:1a:
                    98:98:4e:76:53:7b:b0:f1:fa:3f:31:dc:89:aa:f4:
                    4c:34:aa:ec:3a:c0:4c:f5:ad:01:4f:dd:d0:58:41:
                    84:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0F:DE:DB:32:A9:54:34:E8:81:3E:92:7D:2D:04:02:5C:73:35:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e22535c-66ce-36cf-93fc-5e992947b804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ea:c9:73:87:cb:e5:56:ee:a4:e8:cb:81:6e:8e:5d:9a:6c:
         cd:70:71:a7:0d:d9:f1:25:83:65:fe:04:2f:92:1c:9c:bc:70:
         7a:c6:e8:e5:2f:0b:99:6b:c4:b5:f4:e8:8e:22:fe:f1:ef:48:
         80:e0:c3:77:f8:f9:91:2a:95:27:ad:6c:3e:66:d2:f1:e2:85:
         a8:ff:79:01:ec:61:37:32:58:b5:92:2a:52:76:37:c9:12:fd:
         a0:cd:55:85:9d:d7:12:00:de:66:f3:ed:2e:ea:cb:9b:16:65:
         94:f2:6b:87:9c:ac:91:6d:9c:73:90:13:8d:b1:28:ed:da:24:
         f6:10:0f:e8:7b:89:d0:9d:3b:f5:c0:20:a2:f2:2f:d9:db:f8:
         f8:90:c0:d6:40:2a:02:f7:c8:19:28:0f:a0:3f:a6:84:02:a2:
         68:df:df:34:0b:61:67:ca:27:85:fe:0f:c0:3a:dc:d7:b4:18:
         76:17:5d:86:6a:5c:f6:80:10:7b:b9:53:0c:30:23:39:b0:b0:
         44:d7:71:5a:dd:29:a4:c3:cd:d8:b2:4c:ab:16:b8:da:34:27:
         48:7d:19:ec:85:00:4a:00:b0:b4:a1:9f:5e:73:73:ae:59:b3:
         16:a5:4a:af:eb:a8:4a:ae:1a:cf:27:89:cb:91:91:29:5c:5b:
         e0:39:52:3c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ckio+fukjPKstmwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
MmQyMTY0ZjAtZjUxYi00MDlhLTk1NjYtYmMxY2FiOTdiZDYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCUe8LWNsr283eQyC/pJnpMSqHN7dhgwu96H
MWafS0uO1YhkovwE1VSNCssDNy1iEj62JClN5PMdN+G1hWNCSInWYSNLx4oFy/z1
uPPsm5jAWTg3SLQt+rUS2TjmkpI2IhlNQ0Sm+3NG7qPtZDcu9tLv7QVLRdCLP/LV
OdPbv+rS2WLPsDxInwgtIFMyDtFQRrNoHtBA1B/u3KRVFPlbBWRLdmwuGmQVyjh3
x0MFnuRRAzBE4Hvary38/HlO7nMCqjwlPJFpzOXuK4AqD9jH5bmkjE2YFkkzyPuN
OlRclhqYmE52U3uw8fo/MdyJqvRMNKrsOsBM9a0BT93QWEGEywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNsP3tsyqVQ06IE+kn0tBAJcczXGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGUyMjUzNWMtNjZjZS0z
NmNmLTkzZmMtNWU5OTI5NDdiODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAt
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA/qyXOHy+VW7qToy4Fujl2abM1wcacN2fElg2X+BC+SHJy8cHrG
6OUvC5lrxLX06I4i/vHvSIDgw3f4+ZEqlSetbD5m0vHihaj/eQHsYTcyWLWSKlJ2
N8kS/aDNVYWd1xIA3mbz7S7qy5sWZZTya4ecrJFtnHOQE42xKO3aJPYQD+h7idCd
O/XAIKLyL9nb+PiQwNZAKgL3yBkoD6A/poQComjf3zQLYWfKJ4X+D8A63Ne0GHYX
XYZqXPaAEHu5UwwwIzmwsETXcVrdKaTDzdiyTKsWuNo0J0h9GeyFAEoAsLShn15z
c65ZsxalSq/rqEquGs8nicuRkSlcW+A5Ujw=
-----END CERTIFICATE-----
Generated at Sat Sep 19 08:27:27 2026 by rpki-client