Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/80d47f22-5ee3-3afa-af28-b930d14bc671.roa
File:                     80d47f22-5ee3-3afa-af28-b930d14bc671.roa (raw, json)
Hash identifier:          Ngx/TPJ27inMQppFuo9BlVMow4PaIuENgWfjjdOF+e8=
Subject key identifier:   C8:17:F7:57:5E:F8:4C:12:98:5D:7D:66:CF:EC:59:03:00:F1:26:0D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F6F23170AD600521A03039900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/80d47f22-5ee3-3afa-af28-b930d14bc671.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     53856
IP address blocks:        2001:470:584::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:23:17:0a:d6:00:52:1a:03:03:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=7a45a93b-ca49-4a50-bbd2-2a7a9b3c3cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6c:c8:22:df:a8:fb:84:3b:41:12:cb:10:a4:
                    70:6e:11:39:d1:bb:b3:be:2d:7a:df:e5:50:5f:c0:
                    92:e1:8b:87:7b:51:0e:32:d4:b2:07:76:99:c7:be:
                    91:86:81:65:4a:d0:e6:77:79:2f:cb:8b:f0:1a:1f:
                    bd:dc:52:c5:7f:6d:85:73:e0:1b:e9:27:01:e1:31:
                    b6:f4:b6:4b:02:e9:bc:93:7d:d5:15:83:f3:8f:b0:
                    6c:62:f1:85:d5:03:ac:7d:63:b6:7e:b0:ab:93:a2:
                    bb:28:75:22:89:17:89:85:ff:d0:09:2d:87:0e:45:
                    43:f9:58:91:6c:88:26:1d:78:62:a8:e0:9e:3e:c4:
                    30:d7:d1:84:3e:e6:50:1d:07:53:75:c5:54:5b:84:
                    e1:41:b0:4a:53:3f:da:42:01:c8:9c:2a:40:50:9b:
                    be:cb:d0:ab:f3:7f:c1:99:12:c7:ed:75:31:89:05:
                    ba:60:e0:31:54:67:53:7c:43:0f:8c:60:12:fe:fc:
                    5e:9c:49:76:47:26:bc:f2:37:ae:ad:b6:cc:41:64:
                    70:a6:99:fc:c2:02:f7:45:1b:ea:b8:41:70:f7:3e:
                    17:6c:68:60:db:7f:95:53:a2:26:37:4c:1d:62:cf:
                    74:aa:ee:78:4f:41:8b:e7:72:21:6b:78:b4:2a:a1:
                    5b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:17:F7:57:5E:F8:4C:12:98:5D:7D:66:CF:EC:59:03:00:F1:26:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/80d47f22-5ee3-3afa-af28-b930d14bc671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:584::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:c8:ce:25:04:09:d4:ac:74:03:75:c9:7f:3d:65:61:43:06:
         76:d1:ef:76:ba:a9:bd:01:4f:15:b8:a8:68:9b:13:77:e0:d1:
         c3:98:54:e5:be:4e:3a:42:45:40:ba:ec:b9:c2:44:a3:90:ea:
         fa:1a:37:ca:2b:31:f6:3e:ca:b7:6b:fe:5b:5a:2d:80:f9:fd:
         3a:aa:15:45:6c:53:a5:98:4f:58:15:35:69:1e:5a:73:ed:06:
         e5:60:56:c1:5e:27:31:03:a2:27:9a:30:c0:a2:ef:d2:e4:64:
         d9:32:ed:16:2d:e1:44:55:9d:ca:ed:cb:de:1c:84:47:71:23:
         b7:ee:cb:0e:3a:86:3c:aa:18:87:55:61:fd:59:67:a4:ad:89:
         b3:81:13:9c:6b:3d:cf:e3:83:f0:16:08:60:b8:fa:0d:60:c7:
         e3:cf:a3:d0:a5:0c:c8:a2:44:b7:18:5f:45:cc:8b:02:fe:c3:
         e7:a1:f3:0b:77:46:ef:db:9e:c6:95:0f:c7:26:b4:86:4e:15:
         17:61:90:29:9c:cf:e2:5a:6e:4e:2a:5b:dd:d8:1f:d5:3d:10:
         c1:95:f3:e7:5e:be:9c:12:c4:ad:74:7c:e0:5e:a1:42:81:11:
         e9:49:45:74:20:06:1e:82:3d:75:b3:5f:46:73:9a:ae:76:e4:
         28:b6:2a:fc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9vIxcK1gBSGgMDmQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk
N2E0NWE5M2ItY2E0OS00YTUwLWJiZDItMmE3YTliM2MzY2M5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GzIIt+o+4Q7QRLLEKRwbhE50buzvi163+VQ
X8CS4YuHe1EOMtSyB3aZx76RhoFlStDmd3kvy4vwGh+93FLFf22Fc+Ab6ScB4TG2
9LZLAum8k33VFYPzj7BsYvGF1QOsfWO2frCrk6K7KHUiiReJhf/QCS2HDkVD+ViR
bIgmHXhiqOCePsQw19GEPuZQHQdTdcVUW4ThQbBKUz/aQgHInCpAUJu+y9Cr83/B
mRLH7XUxiQW6YOAxVGdTfEMPjGAS/vxenEl2Rya88jeurbbMQWRwppn8wgL3RRvq
uEFw9z4XbGhg23+VU6ImN0wdYs90qu54T0GL53Iha3i0KqFbwwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMgX91de+EwSmF19Zs/sWQMA8SYNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODBkNDdmMjItNWVlMy0z
YWZhLWFmMjgtYjkzMGQxNGJjNjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAWE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACHIziUECdSsdAN1yX89ZWFDBnbR73a6qb0BTxW4qGibE3fg0cOY
VOW+TjpCRUC67LnCRKOQ6voaN8orMfY+yrdr/ltaLYD5/TqqFUVsU6WYT1gVNWke
WnPtBuVgVsFeJzEDoieaMMCi79LkZNky7RYt4URVncrty94chEdxI7fuyw46hjyq
GIdVYf1ZZ6StibOBE5xrPc/jg/AWCGC4+g1gx+PPo9ClDMiiRLcYX0XMiwL+w+eh
8wt3Ru/bnsaVD8cmtIZOFRdhkCmcz+Jabk4qW93YH9U9EMGV8+devpwSxK10fOBe
oUKBEelJRXQgBh6CPXWzX0Zzmq525Ci2Kvw=
-----END CERTIFICATE-----
Generated at Sun Nov 1 17:36:59 2026 by rpki-client