Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f8dbd4b-e317-3da4-b4f9-b74a50bfd592.roa
File:                     5f8dbd4b-e317-3da4-b4f9-b74a50bfd592.roa (raw, json)
Hash identifier:          ZnTmwa1CPpuq3yq0acgfUGalfiCyKIOGYeF0j3Lc0n8=
Subject key identifier:   A2:41:F3:26:F1:88:9C:22:79:BC:5A:34:02:73:D4:B2:8C:11:E7:03
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DE2B5F44C3EC30C7293251F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f8dbd4b-e317-3da4-b4f9-b74a50bfd592.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     45499
IP address blocks:        2001:470:2f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:f4:4c:3e:c3:0c:72:93:25:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=fa26eb5f-d4eb-46ee-9ebb-6aa9d0831482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9f:30:21:73:c5:c5:70:e8:15:34:44:66:ed:
                    2c:3b:be:db:a5:9d:6f:a4:db:f7:02:95:1c:84:ec:
                    2d:a2:ad:c7:f6:be:89:e2:b3:93:da:a0:d3:99:1f:
                    15:1a:0b:9f:4b:d3:2e:22:0b:b8:16:f9:45:8e:fc:
                    97:18:43:02:6a:f0:5b:58:15:0f:62:5c:39:df:59:
                    74:10:37:7a:ec:0f:8f:ac:94:fc:aa:83:5c:32:55:
                    14:45:03:25:2b:f7:e8:94:3d:83:2f:34:f2:45:e6:
                    79:5d:f3:92:b4:60:c7:cf:fa:d0:ab:86:12:57:e5:
                    80:eb:26:34:a9:00:48:14:d9:9a:d9:d7:47:80:15:
                    bf:c2:38:d0:ed:31:91:bf:34:25:51:93:fe:c8:91:
                    bd:18:6b:4a:71:5a:a0:26:f8:ea:18:2d:d4:ce:31:
                    2c:19:87:b9:01:da:f3:45:9a:4b:fc:01:0d:c1:81:
                    db:cf:16:f8:7c:f9:69:c8:b9:e8:01:ef:85:13:ac:
                    16:45:c1:1a:ab:f0:26:a4:46:42:9c:33:a8:69:71:
                    67:27:52:35:8f:70:ed:7c:08:07:8c:8d:9c:5b:39:
                    cc:a5:3c:a2:28:2d:33:44:41:8d:b6:18:67:ff:64:
                    07:e4:21:f5:c2:4a:c9:53:4a:ca:31:b3:14:88:2b:
                    81:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:41:F3:26:F1:88:9C:22:79:BC:5A:34:02:73:D4:B2:8C:11:E7:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f8dbd4b-e317-3da4-b4f9-b74a50bfd592.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2f0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:35:92:5c:45:d7:c4:be:cd:37:cb:9b:94:0c:05:47:4f:47:
         38:c0:f3:fd:3e:b3:9f:25:fd:e8:6b:04:47:0d:4c:cb:28:b7:
         5c:84:3d:58:e5:e0:ba:1b:ea:16:83:d3:9d:54:56:5f:08:9a:
         b1:5d:3a:6f:fe:ff:a8:f4:d4:2a:1b:b9:f4:b7:38:81:0f:c0:
         3b:5e:37:60:10:97:50:23:56:f2:b0:f6:e1:87:72:41:0e:85:
         b4:42:2b:4d:dc:67:6a:c6:a9:de:bb:a9:f6:94:96:ac:58:20:
         75:88:56:02:5d:47:be:e6:d8:34:a8:5a:15:64:cc:ed:0f:a0:
         2c:96:92:f0:05:58:7f:f3:b6:a4:42:c9:f7:95:1b:40:eb:9f:
         af:01:24:85:7e:6c:8a:64:66:c1:4d:62:da:ed:37:70:d5:9f:
         a5:b6:ce:b5:f6:55:7c:25:e9:91:e8:57:3a:ba:d3:7a:ac:2a:
         4a:21:d8:99:3c:ed:36:76:94:cb:8f:e0:96:42:ad:38:0e:4a:
         66:76:67:06:18:97:5f:ee:70:76:be:ca:0d:84:44:68:4e:38:
         92:44:b1:34:ad:54:4e:a9:ed:e1:14:5b:60:b8:49:42:5d:ef:
         f0:6c:53:c1:34:17:09:b0:45:a4:28:56:d9:87:1b:9f:f8:c1:
         41:7d:1e:b5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3itfRMPsMMcpMlH4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk
ZmEyNmViNWYtZDRlYi00NmVlLTllYmItNmFhOWQwODMxNDgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ8wIXPFxXDoFTREZu0sO77bpZ1vpNv3ApUc
hOwtoq3H9r6J4rOT2qDTmR8VGgufS9MuIgu4FvlFjvyXGEMCavBbWBUPYlw531l0
EDd67A+PrJT8qoNcMlUURQMlK/folD2DLzTyReZ5XfOStGDHz/rQq4YSV+WA6yY0
qQBIFNma2ddHgBW/wjjQ7TGRvzQlUZP+yJG9GGtKcVqgJvjqGC3UzjEsGYe5Adrz
RZpL/AENwYHbzxb4fPlpyLnoAe+FE6wWRcEaq/AmpEZCnDOoaXFnJ1I1j3DtfAgH
jI2cWznMpTyiKC0zREGNthhn/2QH5CH1wkrJU0rKMbMUiCuBUQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKJB8ybxiJwiebxaNAJz1LKMEecDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWY4ZGJkNGItZTMxNy0z
ZGE0LWI0ZjktYjc0YTUwYmZkNTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ81klxF18S+zTfLm5QMBUdPRzjA8/0+s58l/ehrBEcNTMsot1yE
PVjl4Lob6haD051UVl8ImrFdOm/+/6j01CobufS3OIEPwDteN2AQl1AjVvKw9uGH
ckEOhbRCK03cZ2rGqd67qfaUlqxYIHWIVgJdR77m2DSoWhVkzO0PoCyWkvAFWH/z
tqRCyfeVG0Drn68BJIV+bIpkZsFNYtrtN3DVn6W2zrX2VXwl6ZHoVzq603qsKkoh
2Jk87TZ2lMuP4JZCrTgOSmZ2ZwYYl1/ucHa+yg2ERGhOOJJEsTStVE6p7eEUW2C4
SUJd7/BsU8E0FwmwRaQoVtmHG5/4wUF9HrU=
-----END CERTIFICATE-----
Generated at Fri May 29 15:05:06 2026 by rpki-client