Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9f136df4-21f3-3bb6-979b-78c82c6f9657.roa
File:                     9f136df4-21f3-3bb6-979b-78c82c6f9657.roa (raw, json)
Hash identifier:          z5BdzEf3sfQrOewHybYhAThEdQIZPLD0Xsx2A/MLR+I=
Subject key identifier:   63:02:A2:D4:41:A9:4B:9B:AD:59:C2:1A:DF:C9:3B:E0:68:15:0A:2C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EB57C53F4E02FEB29566D5E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9f136df4-21f3-3bb6-979b-78c82c6f9657.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     17306
IP address blocks:        2001:470:4e8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:53:f4:e0:2f:eb:29:56:6d:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=aad8b18c-e5d9-4549-ab56-a1dd0c681a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:65:09:6a:c4:59:c6:c9:a4:c1:a3:dd:0d:44:
                    6a:c1:98:17:2a:7e:60:fb:dc:38:65:72:02:09:32:
                    9b:81:6e:45:be:ea:40:10:0c:75:1a:cc:78:20:37:
                    35:80:2e:f3:e0:54:9b:3b:5c:cf:51:8f:14:cb:7a:
                    d5:cb:7a:e5:85:f1:15:b8:e0:02:f2:4c:95:3f:ad:
                    0e:17:23:de:1e:f1:6e:ca:a7:ad:37:53:ee:be:4d:
                    3b:5a:70:02:1e:82:27:d0:70:7b:5c:9a:bf:33:94:
                    3a:6f:a4:d3:46:ab:8f:46:7a:c3:51:7e:af:f4:29:
                    03:41:29:21:91:35:ec:7e:1e:4d:21:d5:31:9f:b9:
                    75:c0:93:cf:49:45:ff:77:f4:63:b6:5f:10:bf:b5:
                    e7:36:cc:93:c5:c6:b1:96:d4:53:fa:a2:3d:54:99:
                    f2:ee:02:1e:b6:b0:15:02:d2:67:1a:89:58:db:3e:
                    9c:09:f1:83:b2:48:9c:6d:88:56:a7:00:71:61:8f:
                    98:9a:2f:e6:da:44:1e:ce:e7:8f:56:38:6e:b5:38:
                    c0:39:f4:06:06:be:b3:47:de:be:83:9b:02:98:9f:
                    15:fa:bb:0c:e8:a6:57:5f:b5:31:da:32:89:e2:8b:
                    04:01:a3:f2:ed:1e:f7:7a:8b:ce:20:6a:7d:1b:15:
                    12:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:02:A2:D4:41:A9:4B:9B:AD:59:C2:1A:DF:C9:3B:E0:68:15:0A:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9f136df4-21f3-3bb6-979b-78c82c6f9657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4e8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:8b:67:4c:e0:2f:9f:3d:9a:48:a5:c5:a5:59:61:51:16:07:
         33:e5:3b:3c:66:b0:cd:df:03:97:f4:ab:29:af:7b:75:38:ad:
         3c:ed:c9:5b:9b:fc:f0:e5:87:09:6f:eb:6f:49:92:21:c4:a9:
         60:e2:86:e4:93:b9:09:9d:61:55:55:fb:3b:a7:da:7b:5e:97:
         2c:68:7b:54:97:ca:db:a2:c9:42:58:0c:99:9f:bd:a5:06:78:
         f7:68:d2:27:e0:35:07:6b:68:be:19:fc:68:86:3a:28:31:85:
         2b:c7:80:7c:7f:6a:8b:cc:b7:d5:2b:e6:be:c3:2a:86:e0:bf:
         5d:3b:35:4d:92:76:b2:18:57:20:c9:d9:b5:29:99:ac:1c:1d:
         4a:e3:3f:4d:66:31:5c:f4:3d:08:ea:47:e2:ed:c5:94:d6:5b:
         df:83:af:03:06:b1:cb:74:34:ae:b9:9f:b6:99:81:d2:84:f6:
         1d:db:76:70:94:c4:e9:53:10:05:9e:30:f3:60:96:2a:69:d8:
         d5:7e:cb:bc:63:85:6a:71:bf:c0:4d:8a:ee:09:bd:cb:77:72:
         10:b7:c7:bd:fa:12:bc:48:05:2a:11:9f:ed:b8:b3:c1:49:8b:
         b1:81:20:00:90:79:50:b3:ec:3b:d7:8f:7b:27:ae:90:9a:32:
         c7:5f:df:b7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE61fFP04C/rKVZtXoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk
YWFkOGIxOGMtZTVkOS00NTQ5LWFiNTYtYTFkZDBjNjgxYTJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWUJasRZxsmkwaPdDURqwZgXKn5g+9w4ZXIC
CTKbgW5FvupAEAx1Gsx4IDc1gC7z4FSbO1zPUY8Uy3rVy3rlhfEVuOAC8kyVP60O
FyPeHvFuyqetN1Puvk07WnACHoIn0HB7XJq/M5Q6b6TTRquPRnrDUX6v9CkDQSkh
kTXsfh5NIdUxn7l1wJPPSUX/d/Rjtl8Qv7XnNsyTxcaxltRT+qI9VJny7gIetrAV
AtJnGolY2z6cCfGDskicbYhWpwBxYY+Ymi/m2kQezuePVjhutTjAOfQGBr6zR96+
g5sCmJ8V+rsM6KZXX7Ux2jKJ4osEAaPy7R73eovOIGp9GxUSBQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGMCotRBqUubrVnCGt/JO+BoFQosMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOWYxMzZkZjQtMjFmMy0z
YmI2LTk3OWItNzhjODJjNmY5NjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATo
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACmLZ0zgL589mkilxaVZYVEWBzPlOzxmsM3fA5f0qymve3U4rTzt
yVub/PDlhwlv629JkiHEqWDihuSTuQmdYVVV+zun2ntelyxoe1SXytuiyUJYDJmf
vaUGePdo0ifgNQdraL4Z/GiGOigxhSvHgHx/aovMt9Ur5r7DKobgv107NU2SdrIY
VyDJ2bUpmawcHUrjP01mMVz0PQjqR+LtxZTWW9+DrwMGsct0NK65n7aZgdKE9h3b
dnCUxOlTEAWeMPNglipp2NV+y7xjhWpxv8BNiu4Jvct3chC3x736ErxIBSoRn+24
s8FJi7GBIACQeVCz7DvXj3snrpCaMsdf37c=
-----END CERTIFICATE-----
Generated at Sat Sep 12 07:52:07 2026 by rpki-client