Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/71a05446-573b-3a24-99a0-495678d400f9.roa
File:                     71a05446-573b-3a24-99a0-495678d400f9.roa (raw, json)
Hash identifier:          ZPeycE+lX+bgJk9NaI3LIfC4WJP+yfIgQWWE1axt38c=
Subject key identifier:   12:4A:69:94:52:74:95:B2:C9:E0:B3:36:BC:0A:2F:0E:32:D7:71:00
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F549DA88F3D44932CDC4A3200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/71a05446-573b-3a24-99a0-495678d400f9.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     14277
IP address blocks:        2001:470:4e5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:a8:8f:3d:44:93:2c:dc:4a:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=bc00c501-d9a9-484a-90d9-e345461d7ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b8:66:9b:23:9b:a8:ad:c7:b0:78:1d:e9:40:
                    f4:b8:be:3b:a4:6d:41:8f:1c:d5:13:4d:70:40:d3:
                    18:3b:da:86:1a:bd:5e:df:96:88:34:11:89:6f:b9:
                    25:e3:2e:e3:2c:f9:ec:da:1e:98:66:4c:0e:77:98:
                    3a:b0:e2:b2:a8:86:19:a1:e7:74:97:1d:47:37:d5:
                    f9:38:a9:29:88:84:4e:b5:09:44:0b:09:78:72:0e:
                    95:ce:76:78:0d:9f:2a:1d:70:e3:70:64:c4:e1:93:
                    9b:39:ab:33:0e:fb:a2:8c:ef:74:c9:4b:46:4f:82:
                    5f:42:59:c1:ad:52:1b:2d:73:76:d9:f7:68:07:c6:
                    6f:ad:cb:79:80:b5:30:cb:bf:0f:7d:40:b2:19:9d:
                    2f:b1:25:d0:6b:6e:25:85:b3:de:9d:20:4d:8a:4b:
                    7b:d3:c8:c7:6e:36:ca:76:b6:df:06:f8:5f:11:e4:
                    1b:70:83:6a:df:88:02:e8:88:97:ca:04:6c:84:c0:
                    aa:19:21:b7:b2:19:a3:94:40:77:00:23:77:b9:c7:
                    a8:06:14:e4:bb:1a:16:39:16:db:af:6a:3a:4a:d4:
                    57:42:86:9a:0d:88:a1:2e:74:81:18:a9:df:04:82:
                    e8:e2:94:97:c5:29:65:b5:cc:2d:49:7a:cb:6c:fb:
                    24:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4A:69:94:52:74:95:B2:C9:E0:B3:36:BC:0A:2F:0E:32:D7:71:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/71a05446-573b-3a24-99a0-495678d400f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4e5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:d2:1f:38:d2:08:30:b7:76:b7:aa:d8:8e:f7:ff:84:a9:37:
         c5:64:e7:54:4f:f3:20:ae:9a:7b:4f:0b:cd:0a:1e:48:12:e1:
         06:f9:57:d5:16:e9:4b:50:52:f3:91:6e:67:7d:22:a3:3e:0b:
         51:f0:51:b9:63:26:64:6c:c7:2e:a9:90:45:84:4d:d0:cb:28:
         41:e5:fd:21:54:cc:57:7c:62:1d:77:17:a9:12:f2:bd:31:19:
         65:3c:a6:d0:de:25:84:c3:2a:58:53:7b:89:b9:61:60:da:32:
         96:76:94:75:6e:21:62:e4:98:33:a9:81:ca:46:75:a7:9d:de:
         a6:cf:2b:16:f8:4c:d2:24:fc:59:19:6e:e9:39:32:fd:ae:25:
         8b:e6:21:3a:40:c9:7d:f7:bf:da:d6:2f:93:58:eb:e7:9e:73:
         dd:eb:2d:cb:9f:84:b6:d9:e3:54:84:2a:04:6e:98:23:97:5d:
         0d:d2:ba:b0:1c:0b:69:f8:e0:c9:b8:69:30:2f:25:6a:45:43:
         0a:b7:34:8b:2e:e9:b1:f1:8a:42:85:30:13:fa:a0:8b:ee:30:
         97:33:74:1c:9c:39:69:36:f3:75:53:d2:ab:4e:48:7d:09:2f:
         07:2d:df:9f:7a:b3:dd:9b:81:10:4e:ed:e5:6b:62:c1:df:39:
         b7:d6:26:8e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9UnaiPPUSTLNxKMgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
YmMwMGM1MDEtZDlhOS00ODRhLTkwZDktZTM0NTQ2MWQ3ZmYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rhmmyObqK3HsHgd6UD0uL47pG1BjxzVE01w
QNMYO9qGGr1e35aINBGJb7kl4y7jLPns2h6YZkwOd5g6sOKyqIYZoed0lx1HN9X5
OKkpiIROtQlECwl4cg6VznZ4DZ8qHXDjcGTE4ZObOaszDvuijO90yUtGT4JfQlnB
rVIbLXN22fdoB8Zvrct5gLUwy78PfUCyGZ0vsSXQa24lhbPenSBNikt708jHbjbK
drbfBvhfEeQbcINq34gC6IiXygRshMCqGSG3shmjlEB3ACN3uceoBhTkuxoWORbb
r2o6StRXQoaaDYihLnSBGKnfBILo4pSXxSlltcwtSXrLbPskwQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBJKaZRSdJWyyeCzNrwKLw4y13EAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzFhMDU0NDYtNTczYi0z
YTI0LTk5YTAtNDk1Njc4ZDQwMGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJnSHzjSCDC3dreq2I73/4SpN8Vk51RP8yCumntPC80KHkgS4Qb5
V9UW6UtQUvORbmd9IqM+C1HwUbljJmRsxy6pkEWETdDLKEHl/SFUzFd8Yh13F6kS
8r0xGWU8ptDeJYTDKlhTe4m5YWDaMpZ2lHVuIWLkmDOpgcpGdaed3qbPKxb4TNIk
/FkZbuk5Mv2uJYvmITpAyX33v9rWL5NY6+eec93rLcufhLbZ41SEKgRumCOXXQ3S
urAcC2n44Mm4aTAvJWpFQwq3NIsu6bHxikKFMBP6oIvuMJczdBycOWk283VT0qtO
SH0JLwct3596s92bgRBO7eVrYsHfObfWJo4=
-----END CERTIFICATE-----
Generated at Sun Oct 11 08:13:41 2026 by rpki-client