Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/55b902f5-b592-3a6b-8d1b-9f616608d8d4.roa
File:                     55b902f5-b592-3a6b-8d1b-9f616608d8d4.roa (raw, json)
Hash identifier:          q6viUS3fi3GSz4mh1mKRCG8P5SabCm5N69jGoWE9YLk=
Subject key identifier:   B6:87:21:D5:2D:2C:57:95:98:8F:18:6D:E0:4A:B2:A6:2E:11:60:12
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F024230138F2E68B2D9293200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/55b902f5-b592-3a6b-8d1b-9f616608d8d4.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     393950
IP address blocks:        2001:470:32f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:30:13:8f:2e:68:b2:d9:29:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=43e79c41-8069-4a99-a563-e33f81288362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:43:9b:c1:1d:b1:59:70:e5:35:87:2e:a5:
                    8f:35:21:24:3c:a5:c6:03:52:10:cb:53:a7:0c:d6:
                    8c:40:7a:cc:5e:8e:72:8e:74:51:1a:e8:85:7c:37:
                    25:35:89:54:17:23:03:8e:5a:a6:84:12:3e:cd:21:
                    fd:77:3e:ac:30:d3:0c:a9:c3:ae:8f:9f:a6:12:25:
                    ab:06:a9:84:56:f4:f8:af:f5:d6:de:ff:bc:02:77:
                    11:95:dd:22:c5:8c:ac:ac:03:23:ae:99:b9:3a:e6:
                    47:09:27:b7:89:a7:f4:7f:cf:e5:7e:53:6d:a8:b8:
                    07:72:8d:ed:42:05:49:aa:50:3f:39:85:98:55:6d:
                    b0:94:34:de:c9:d6:29:a6:26:ec:f3:bd:74:ad:02:
                    6d:41:bb:4e:17:0f:39:ee:d9:c4:c4:e1:23:da:2d:
                    b5:a3:12:59:d1:7e:36:f6:d4:9e:1c:c5:17:a8:cb:
                    bd:8c:f8:48:63:18:65:8b:10:99:cb:ec:f0:c8:fd:
                    6c:91:cb:84:31:92:49:29:55:c2:ab:3f:86:f1:78:
                    ee:e4:3e:97:46:a4:83:d0:b0:30:3f:38:40:dc:36:
                    23:c8:f1:8f:e6:66:d3:5e:31:36:20:59:a5:86:bb:
                    1d:64:0f:bb:b6:0a:ed:2a:99:78:97:3e:a6:6f:95:
                    e7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:87:21:D5:2D:2C:57:95:98:8F:18:6D:E0:4A:B2:A6:2E:11:60:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/55b902f5-b592-3a6b-8d1b-9f616608d8d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:32f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:69:c7:a5:e0:35:88:6b:f2:8d:92:55:58:ff:fe:d1:50:20:
         a9:76:73:b5:3c:1c:a0:8f:fb:53:0e:50:8b:19:21:69:09:67:
         e0:15:01:bd:8e:c7:6a:b1:95:e3:ef:2a:9f:b8:7a:f4:6d:78:
         26:3e:e3:49:84:eb:ce:6d:90:ff:6e:2a:87:e9:4c:8b:47:43:
         ec:56:90:b9:af:6f:56:94:2e:e0:61:68:02:34:cb:27:eb:ab:
         c3:10:6b:50:be:43:65:98:96:05:f0:fd:ac:07:51:60:6d:bc:
         76:de:20:61:66:f2:02:ef:e1:5e:ba:be:93:e7:ad:98:76:d0:
         e3:3a:1e:c6:29:80:8e:5f:cc:7d:31:ed:40:5c:2d:84:cd:e7:
         ff:75:03:34:95:62:55:4d:a4:03:f0:76:43:ef:18:87:33:e4:
         90:da:e0:ca:9d:c0:15:20:ef:e5:b9:2c:4d:fc:71:7d:ce:52:
         ba:e6:6d:8a:c5:af:b1:10:79:98:7e:6c:4f:dd:b7:56:a0:ac:
         31:22:a4:8b:1c:09:6b:cc:9c:62:09:b7:f3:57:99:42:db:ab:
         a7:66:83:09:d2:7c:98:db:60:41:5a:07:4e:a2:9c:9e:a8:8c:
         8d:6a:c1:3c:ad:ef:99:a5:6b:1c:b2:f9:db:10:9a:f7:9f:7d:
         44:c9:67:b5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8CQjATjy5ostkpMgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk
NDNlNzljNDEtODA2OS00YTk5LWE1NjMtZTMzZjgxMjg4MzYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvZDm8EdsVlw5TWHLqWPNSEkPKXGA1IQy1On
DNaMQHrMXo5yjnRRGuiFfDclNYlUFyMDjlqmhBI+zSH9dz6sMNMMqcOuj5+mEiWr
BqmEVvT4r/XW3v+8AncRld0ixYysrAMjrpm5OuZHCSe3iaf0f8/lflNtqLgHco3t
QgVJqlA/OYWYVW2wlDTeydYppibs8710rQJtQbtOFw857tnExOEj2i21oxJZ0X42
9tSeHMUXqMu9jPhIYxhlixCZy+zwyP1skcuEMZJJKVXCqz+G8Xju5D6XRqSD0LAw
PzhA3DYjyPGP5mbTXjE2IFmlhrsdZA+7tgrtKpl4lz6mb5XnoQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLaHIdUtLFeVmI8YbeBKsqYuEWASMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTViOTAyZjUtYjU5Mi0z
YTZiLThkMWItOWY2MTY2MDhkOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMv
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH9px6XgNYhr8o2SVVj//tFQIKl2c7U8HKCP+1MOUIsZIWkJZ+AV
Ab2Ox2qxlePvKp+4evRteCY+40mE685tkP9uKofpTItHQ+xWkLmvb1aULuBhaAI0
yyfrq8MQa1C+Q2WYlgXw/awHUWBtvHbeIGFm8gLv4V66vpPnrZh20OM6HsYpgI5f
zH0x7UBcLYTN5/91AzSVYlVNpAPwdkPvGIcz5JDa4MqdwBUg7+W5LE38cX3OUrrm
bYrFr7EQeZh+bE/dt1agrDEipIscCWvMnGIJt/NXmULbq6dmgwnSfJjbYEFaB06i
nJ6ojI1qwTyt75mlaxyy+dsQmveffUTJZ7U=
-----END CERTIFICATE-----
Generated at Sat Sep 12 09:03:15 2026 by rpki-client