Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9f786403-83f2-34eb-955a-7fa42a21e9a7.roa
File:                     9f786403-83f2-34eb-955a-7fa42a21e9a7.roa (raw, json)
Hash identifier:          TuzM8hWTt2iKtc56TDkZYzFZrGerWhRMPFwoBh8Adak=
Subject key identifier:   3C:7A:4C:A9:62:89:40:EB:9F:14:BC:17:18:FB:73:37:E4:62:F9:02
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F8DE75DB3E73CC9A196A04E20
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9f786403-83f2-34eb-955a-7fa42a21e9a7.roa
Signing time:             Mon 19 Oct 2026 13:30:36 +0000
ROA not before:           Mon 19 Oct 2026 13:30:36 +0000
ROA not after:            Sun 17 Jan 2027 14:30:36 +0000
asID:                     6698
IP address blocks:        2001:470:174::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:e7:5d:b3:e7:3c:c9:a1:96:a0:4e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 19 13:30:36 2026 GMT
            Not After : Jan 17 14:30:36 2027 GMT
        Subject: CN=fa47c92f-871c-436d-9e11-26c7e5fee04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ad:90:96:a2:04:89:e3:5d:28:4b:eb:cf:7e:
                    50:07:7d:66:85:87:85:ed:8f:07:f3:c4:43:bd:c8:
                    62:c5:c1:a1:f7:9c:4f:d0:cb:af:c6:87:3d:56:85:
                    ac:27:e9:96:6d:91:4a:6b:8a:68:c5:70:6d:9a:39:
                    3a:7a:fa:16:cc:d6:23:0f:0e:24:44:ad:1f:a5:3f:
                    be:cf:10:b1:bd:c6:47:80:5f:10:73:ef:5a:8f:57:
                    f7:d4:76:39:49:fa:49:3a:88:7f:2b:ac:9a:a6:ab:
                    99:cf:99:bc:3f:2e:67:b5:8e:09:14:13:cb:00:3b:
                    7e:a7:86:c4:17:3e:4b:e7:d4:e1:2f:6c:f2:8b:dd:
                    bc:a4:15:d7:80:e5:a4:dd:de:87:16:01:68:68:af:
                    e8:f6:b3:0f:b2:0f:cf:d5:dc:c8:cc:7d:4c:9e:d4:
                    b6:61:de:59:e1:f7:bd:27:04:2b:b7:91:eb:5d:df:
                    1e:0f:7e:f5:97:89:e0:55:ed:3b:d4:8b:63:a2:38:
                    12:7b:14:ac:8c:15:b0:d7:87:19:aa:da:65:f8:fc:
                    c1:a4:dc:a5:77:2b:33:a2:46:17:d7:d7:8f:74:9c:
                    57:62:59:de:d3:28:1d:68:a8:1b:6b:c2:4b:5a:e0:
                    21:18:88:a2:4f:8f:3f:01:f5:6d:ba:07:7c:d9:2a:
                    b9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7A:4C:A9:62:89:40:EB:9F:14:BC:17:18:FB:73:37:E4:62:F9:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9f786403-83f2-34eb-955a-7fa42a21e9a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:174::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d0:b8:aa:c8:27:d8:8a:c6:de:b4:55:c9:d0:e4:94:24:bc:
         ed:0e:36:4c:54:57:5e:5d:e7:57:ff:f2:30:14:5f:87:ea:e1:
         0f:e8:95:97:13:2f:ea:35:9c:e5:04:49:e7:18:c3:7c:9f:5c:
         7e:0d:b5:a2:8f:39:d4:65:bf:9a:30:de:92:3d:11:46:f3:ab:
         bd:df:05:dd:f3:2c:ad:bb:21:32:a4:12:e3:ec:a4:ae:fe:de:
         bf:58:65:34:c8:a9:e3:7b:92:60:c1:95:9c:86:48:f9:80:ab:
         5a:a9:0c:5c:a5:34:71:6f:8f:ae:42:cf:35:54:47:49:b0:fe:
         e5:46:b4:30:a5:03:47:51:a7:dc:41:b4:a3:35:e2:e1:a9:69:
         8c:ca:9f:6d:48:b5:42:d0:b1:16:66:22:d7:82:b8:86:a5:f9:
         95:56:dc:af:33:10:0e:bd:fc:70:63:2e:26:f5:63:f9:d0:42:
         f7:ed:15:b7:7c:d8:b0:95:0a:72:53:10:55:15:47:e8:61:f0:
         c9:1c:1d:3b:02:52:ff:5a:43:64:ef:bd:de:8c:d4:0e:df:89:
         c4:65:7b:a9:23:2c:e5:71:5c:1e:25:8e:8e:7a:d8:09:f3:ed:
         34:04:4a:ca:46:7c:73:18:42:77:bc:82:86:c3:5f:97:40:15:
         47:bd:49:5f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+N512z5zzJoZagTiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MTAxOTEzMzAzNloXDTI3MDExNzE0MzAzNlowLzEtMCsGA1UEAxMk
ZmE0N2M5MmYtODcxYy00MzZkLTllMTEtMjZjN2U1ZmVlMDRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq2QlqIEieNdKEvrz35QB31mhYeF7Y8H88RD
vchixcGh95xP0Muvxoc9VoWsJ+mWbZFKa4poxXBtmjk6evoWzNYjDw4kRK0fpT++
zxCxvcZHgF8Qc+9aj1f31HY5SfpJOoh/K6yapquZz5m8Py5ntY4JFBPLADt+p4bE
Fz5L59ThL2zyi928pBXXgOWk3d6HFgFoaK/o9rMPsg/P1dzIzH1MntS2Yd5Z4fe9
JwQrt5HrXd8eD371l4ngVe071ItjojgSexSsjBWw14cZqtpl+PzBpNyldyszokYX
19ePdJxXYlne0ygdaKgba8JLWuAhGIiiT48/AfVtugd82Sq5aQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDx6TKliiUDrnxS8Fxj7czfkYvkCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOWY3ODY0MDMtODNmMi0z
NGViLTk1NWEtN2ZhNDJhMjFlOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAF0
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADHQuKrIJ9iKxt60VcnQ5JQkvO0ONkxUV15d51f/8jAUX4fq4Q/o
lZcTL+o1nOUESecYw3yfXH4NtaKPOdRlv5ow3pI9EUbzq73fBd3zLK27ITKkEuPs
pK7+3r9YZTTIqeN7kmDBlZyGSPmAq1qpDFylNHFvj65CzzVUR0mw/uVGtDClA0dR
p9xBtKM14uGpaYzKn21ItULQsRZmIteCuIal+ZVW3K8zEA69/HBjLib1Y/nQQvft
Fbd82LCVCnJTEFUVR+hh8MkcHTsCUv9aQ2Tvvd6M1A7ficRle6kjLOVxXB4ljo56
2Anz7TQESspGfHMYQne8gobDX5dAFUe9SV8=
-----END CERTIFICATE-----
Generated at Wed Oct 21 04:51:21 2026 by rpki-client