Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/77f0fced-3ccd-3a73-9ae9-ea034fa4fe02.roa
File:                     77f0fced-3ccd-3a73-9ae9-ea034fa4fe02.roa (raw, json)
Hash identifier:          u/m4pNFdeusbDptx+B0WmzIVCcBKFTFUk87vOS2L67w=
Subject key identifier:   42:0B:C1:D3:EC:17:BC:6F:CC:F9:1B:CA:24:2F:DF:39:80:FF:36:11
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDDF74D9873AA1047F9774F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/77f0fced-3ccd-3a73-9ae9-ea034fa4fe02.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     209847
IP address blocks:        2001:470:433::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:4d:98:73:aa:10:47:f9:77:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=0ef3289b-d23a-4731-9da2-fc2d3735d004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:05:67:ec:fe:81:f6:d6:9a:02:51:98:1d:10:
                    10:82:84:9a:0c:84:9e:a3:2c:a8:b1:f6:50:13:44:
                    cb:66:20:6f:93:80:8f:dc:32:e9:8a:66:70:ce:8b:
                    f4:7b:37:a6:4f:1b:d6:ab:46:3d:34:42:30:f0:77:
                    67:45:e0:f5:78:58:99:58:bb:59:e8:a8:88:df:bc:
                    0b:5f:61:bf:aa:d4:55:21:3a:d9:63:1e:b4:51:ea:
                    60:ba:9c:c9:09:5b:7c:7f:d3:bc:5a:ab:83:de:a7:
                    63:d2:02:8c:36:ce:25:35:73:95:ad:9d:ba:09:2f:
                    50:4b:c7:70:e9:26:aa:fb:5e:b0:64:aa:e8:5a:3f:
                    92:26:42:79:be:32:87:e9:75:cf:36:1e:3c:98:a3:
                    2c:06:51:39:ad:e8:b7:7a:15:ef:88:71:5b:78:00:
                    99:7e:1a:9d:e6:f3:15:55:27:92:21:73:ab:bd:f7:
                    62:c9:70:ab:c1:0c:c5:df:5f:ca:87:e0:fd:b4:8f:
                    c2:de:a3:a3:fd:09:62:e7:0f:c5:e4:ee:1f:1b:6d:
                    a6:d5:02:a3:5d:dd:80:7b:0f:7f:9b:2f:52:dd:24:
                    20:87:7a:93:a5:95:71:4a:9d:c5:d1:0b:48:af:31:
                    12:e6:b2:12:c2:e7:b5:3c:e4:e8:11:5f:28:6e:7a:
                    ce:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0B:C1:D3:EC:17:BC:6F:CC:F9:1B:CA:24:2F:DF:39:80:FF:36:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/77f0fced-3ccd-3a73-9ae9-ea034fa4fe02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:433::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:3d:46:d0:0f:2d:ea:4f:5b:33:12:b6:02:4c:76:cb:e3:84:
         58:e5:b9:08:53:fb:e2:23:bb:75:f0:dc:c1:17:82:ba:0a:b0:
         75:00:af:f7:76:8b:46:43:c0:c6:0d:54:ee:26:f5:16:01:27:
         f0:fe:ae:3f:5c:e8:e9:37:63:dd:5c:8e:0b:73:ad:76:18:a2:
         35:cc:09:d6:1f:e2:20:a5:41:e1:20:50:ae:5d:b2:84:db:b7:
         55:77:b1:b9:18:be:10:98:5d:ae:6d:39:30:00:51:24:9b:64:
         40:cc:eb:77:b7:e2:ab:19:30:49:ff:99:73:25:b6:39:9a:d8:
         54:6f:ec:7a:0a:1f:c5:f9:cc:5a:28:0c:ed:15:b9:f0:ba:9f:
         0d:3f:62:15:ea:8b:7e:d9:0a:68:f7:00:6b:e5:27:97:f8:3f:
         bf:62:20:d4:7a:9e:37:cc:55:41:e1:44:29:9f:8b:e1:4c:33:
         f0:dd:59:02:3c:b6:94:6b:f6:9b:9c:2c:09:5e:e0:e0:88:0f:
         74:7f:4a:71:78:78:92:f7:8a:b5:56:13:9a:f8:14:e2:06:79:
         ce:ab:76:cc:46:57:ad:53:64:14:fa:e0:ec:5b:ec:fa:38:12:
         66:88:54:84:52:9f:1d:37:30:d3:48:a1:bb:17:a2:15:10:94:
         8c:d6:11:38
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7d902Yc6oQR/l3TwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDgxNzEzMDAxMVoXDTI2MTExNTE0MDAxMVowLzEtMCsGA1UEAxMk
MGVmMzI4OWItZDIzYS00NzMxLTlkYTItZmMyZDM3MzVkMDA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgVn7P6B9taaAlGYHRAQgoSaDISeoyyosfZQ
E0TLZiBvk4CP3DLpimZwzov0ezemTxvWq0Y9NEIw8HdnReD1eFiZWLtZ6KiI37wL
X2G/qtRVITrZYx60UepgupzJCVt8f9O8WquD3qdj0gKMNs4lNXOVrZ26CS9QS8dw
6Saq+16wZKroWj+SJkJ5vjKH6XXPNh48mKMsBlE5rei3ehXviHFbeACZfhqd5vMV
VSeSIXOrvfdiyXCrwQzF31/Kh+D9tI/C3qOj/Qli5w/F5O4fG22m1QKjXd2Aew9/
my9S3SQgh3qTpZVxSp3F0QtIrzES5rISwue1POToEV8obnrOYwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEILwdPsF7xvzPkbyiQv3zmA/zYRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzdmMGZjZWQtM2NjZC0z
YTczLTlhZTktZWEwMzRmYTRmZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQz
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFo9RtAPLepPWzMStgJMdsvjhFjluQhT++Iju3Xw3MEXgroKsHUA
r/d2i0ZDwMYNVO4m9RYBJ/D+rj9c6Ok3Y91cjgtzrXYYojXMCdYf4iClQeEgUK5d
soTbt1V3sbkYvhCYXa5tOTAAUSSbZEDM63e34qsZMEn/mXMltjma2FRv7HoKH8X5
zFooDO0VufC6nw0/YhXqi37ZCmj3AGvlJ5f4P79iINR6njfMVUHhRCmfi+FMM/Dd
WQI8tpRr9pucLAle4OCID3R/SnF4eJL3irVWE5r4FOIGec6rdsxGV61TZBT64Oxb
7Po4EmaIVIRSnx03MNNIobsXohUQlIzWETg=
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:38:13 2026 by rpki-client