Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92561d87-9e51-3c09-bdc8-0f657dca15e0.roa
File:                     92561d87-9e51-3c09-bdc8-0f657dca15e0.roa (raw, json)
Hash identifier:          /fklA83eQhiBcVhoNrp5mKNJxSA5x/UrDISHioA8xZw=
Subject key identifier:   36:C1:D8:0A:77:E2:72:04:52:A1:CB:1A:C8:11:62:C0:DB:DA:BB:19
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F6AA3A8518589D38E8680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92561d87-9e51-3c09-bdc8-0f657dca15e0.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     41435
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:6a:a3:a8:51:85:89:d3:8e:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=24563cb4-f7cd-4421-9220-27bf0251352a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:07:e9:58:82:3e:4e:a5:74:8a:95:9d:96:ab:
                    53:ef:e0:06:d3:83:d1:89:d4:36:eb:2a:7a:0d:3e:
                    60:a6:0c:4c:fc:42:8a:4d:99:b8:40:55:56:e7:3d:
                    fc:4a:c4:ef:b5:ff:65:df:8e:c3:bf:09:e0:86:03:
                    22:1b:9c:9f:35:24:42:68:d8:2c:52:dc:ec:d7:19:
                    6c:98:31:54:fc:ce:0d:ff:14:fe:4e:23:15:99:ed:
                    b4:8a:78:d5:b0:84:61:fa:88:b4:51:8b:89:9e:b8:
                    7c:72:1f:73:76:b8:a2:ee:79:f2:e9:51:cf:93:0c:
                    0f:b3:e0:83:ab:b1:6f:32:19:27:8b:ae:80:96:c6:
                    14:44:06:9c:91:9f:d5:53:41:4d:80:6a:6c:fe:77:
                    33:f4:de:d8:39:4b:4f:2f:e7:8c:0c:1f:ed:95:d5:
                    b3:f0:40:f0:49:d5:1f:d2:12:0f:f2:e4:93:48:9e:
                    52:e3:16:ce:47:9d:18:d6:4c:d9:0f:4c:bc:42:06:
                    cb:8c:72:d3:1b:fa:a5:4c:46:e9:98:de:6b:c1:e0:
                    ed:9a:e3:02:9f:26:af:aa:6a:89:f1:87:32:95:cf:
                    95:8d:79:a3:ca:f0:9f:0d:c7:22:5c:c8:c6:e1:c3:
                    b0:77:3c:72:65:7b:f9:4e:ff:28:fd:b5:d2:81:a0:
                    27:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C1:D8:0A:77:E2:72:04:52:A1:CB:1A:C8:11:62:C0:DB:DA:BB:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92561d87-9e51-3c09-bdc8-0f657dca15e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:62:c5:d5:fa:23:d3:6d:a0:52:be:31:09:66:fa:4b:44:50:
         40:85:1f:eb:22:b8:87:12:d0:96:a4:18:0f:45:b8:3a:27:3c:
         4d:3e:2d:ce:80:03:c2:74:d3:6f:ff:a6:87:5e:91:3b:4d:66:
         4f:f7:64:fb:f1:37:2f:ba:c2:fb:b5:20:a7:2d:b3:39:9d:09:
         88:c0:32:a9:86:5c:75:b4:9b:a9:11:66:bb:01:bd:34:16:d1:
         33:0a:2c:c5:e6:8b:71:33:17:49:fc:c7:a7:88:83:a7:27:8a:
         15:6e:35:05:ef:21:dc:08:56:2d:a7:f0:ea:bc:a0:ea:69:48:
         37:30:0c:8b:43:3d:54:15:6f:3a:8b:22:1c:51:49:e5:98:56:
         a4:3f:4c:97:2f:84:1e:e9:8c:6e:f5:41:ea:cd:34:52:6b:88:
         bb:31:30:55:29:d4:82:b8:0b:74:ee:4a:02:74:b0:43:4d:5b:
         99:68:ac:81:72:63:7f:b5:eb:96:c8:cb:c5:11:a9:ba:7c:8d:
         bd:45:5c:50:f7:73:26:3e:ac:67:d4:68:5b:3d:42:b0:65:63:
         37:c3:b6:8a:14:8e:59:7e:70:37:5b:0f:3b:ec:ed:b0:ca:4c:
         79:e1:39:f0:c5:0f:ec:b1:89:de:78:83:68:81:4d:04:c3:15:
         5a:dd:14:99
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE46L2qjqFGFidOOhoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk
MjQ1NjNjYjQtZjdjZC00NDIxLTkyMjAtMjdiZjAyNTEzNTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wfpWII+TqV0ipWdlqtT7+AG04PRidQ26yp6
DT5gpgxM/EKKTZm4QFVW5z38SsTvtf9l347DvwnghgMiG5yfNSRCaNgsUtzs1xls
mDFU/M4N/xT+TiMVme20injVsIRh+oi0UYuJnrh8ch9zdrii7nny6VHPkwwPs+CD
q7FvMhkni66AlsYURAackZ/VU0FNgGps/ncz9N7YOUtPL+eMDB/tldWz8EDwSdUf
0hIP8uSTSJ5S4xbOR50Y1kzZD0y8QgbLjHLTG/qlTEbpmN5rweDtmuMCnyavqmqJ
8Ycylc+VjXmjyvCfDcciXMjG4cOwdzxyZXv5Tv8o/bXSgaAnwwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDbB2Ap34nIEUqHLGsgRYsDb2rsZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTI1NjFkODctOWU1MS0z
YzA5LWJkYzgtMGY2NTdkY2ExNWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKZixdX6I9NtoFK+MQlm+ktEUECFH+siuIcS0JakGA9FuDonPE0+
Lc6AA8J002//podekTtNZk/3ZPvxNy+6wvu1IKctszmdCYjAMqmGXHW0m6kRZrsB
vTQW0TMKLMXmi3EzF0n8x6eIg6cnihVuNQXvIdwIVi2n8Oq8oOppSDcwDItDPVQV
bzqLIhxRSeWYVqQ/TJcvhB7pjG71QerNNFJriLsxMFUp1IK4C3TuSgJ0sENNW5lo
rIFyY3+165bIy8URqbp8jb1FXFD3cyY+rGfUaFs9QrBlYzfDtooUjll+cDdbDzvs
7bDKTHnhOfDFD+yxid54g2iBTQTDFVrdFJk=
-----END CERTIFICATE-----
Generated at Fri Jul 3 19:13:09 2026 by rpki-client