Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a342de16-317a-33bc-9ea3-9b55da8fe05b.roa
File:                     a342de16-317a-33bc-9ea3-9b55da8fe05b.roa (raw, json)
Hash identifier:          O0rSXGn0KWfYyh3qe1bJHB6ntm/Uwoc4dHSE+n2kmSI=
Subject key identifier:   05:35:A0:94:79:B4:DF:57:FB:78:F4:E6:80:8F:DB:A9:1D:3D:2F:39
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC92412BD3E91DFD5723BC00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a342de16-317a-33bc-9ea3-9b55da8fe05b.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     36527
IP address blocks:        2001:470:2b5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:41:2b:d3:e9:1d:fd:57:23:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=16bca2e0-84dd-41f1-b7da-5db0131a04c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1a:c2:e7:f8:d6:1c:3b:86:e4:87:9a:10:c2:
                    cb:ac:76:29:61:46:5e:f0:56:3e:0d:3d:e1:46:49:
                    54:c7:d7:f9:82:1b:1a:d9:d9:ef:ad:5c:10:4f:c0:
                    c3:af:d1:53:61:6f:13:69:de:2c:68:ec:be:12:2f:
                    89:55:44:f8:18:c2:7a:a5:db:36:a0:f8:9b:93:cc:
                    63:39:63:27:a0:98:3e:dc:82:9a:b7:4b:ce:f5:d7:
                    31:ae:3f:b9:12:ad:e4:f0:a0:5b:9e:40:4f:fd:93:
                    db:d4:9b:3b:4f:58:16:ea:3c:6c:80:7e:90:6e:8b:
                    96:71:14:85:54:d4:8f:44:20:9a:fe:fa:96:4b:8a:
                    48:c0:fc:68:9e:58:59:33:83:93:be:f5:46:20:94:
                    24:28:48:cd:46:ee:ff:d3:fd:5b:7e:23:c8:77:04:
                    f7:f1:f2:a4:a2:06:50:4d:43:86:c4:1d:f6:6b:3b:
                    c7:68:ce:74:64:62:83:75:1b:53:b5:32:9c:8d:8d:
                    a6:1d:51:3a:8f:a4:c3:c2:98:66:c1:7f:fe:0a:5b:
                    69:37:db:38:c6:f8:ec:71:b2:c9:92:90:83:7c:e3:
                    f5:7d:76:f2:0a:c4:e1:1e:d1:ec:8f:df:4e:fa:66:
                    ad:49:48:61:d2:1d:ca:2b:28:b2:31:cf:4c:e6:89:
                    b8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:35:A0:94:79:B4:DF:57:FB:78:F4:E6:80:8F:DB:A9:1D:3D:2F:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a342de16-317a-33bc-9ea3-9b55da8fe05b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2b5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:26:9d:ea:a8:3c:92:6e:07:de:90:94:73:2b:16:58:05:5d:
         7a:81:25:58:f0:42:66:e2:43:c4:ef:af:4e:a7:c5:3d:fa:98:
         e8:a5:a6:f8:1a:f8:b0:10:ec:5c:af:04:34:55:15:0b:f0:e9:
         34:1c:ef:39:69:5e:ab:55:0f:e9:5a:10:e4:63:20:4a:44:cf:
         00:af:c6:35:33:b5:fb:06:92:75:43:7d:f6:ab:50:7c:dc:d5:
         e9:46:f5:f7:09:2a:d6:12:c2:c4:13:a8:11:d7:e6:a3:54:57:
         55:d4:fb:94:b7:49:5b:6a:84:ba:3e:c0:4d:08:88:ba:81:6c:
         1f:7b:e1:92:30:e2:af:d8:bb:17:66:04:de:66:09:65:c8:d0:
         a3:ff:f4:7f:d6:63:11:23:db:b8:dd:db:1c:61:95:1f:66:cd:
         e4:f0:ca:fd:37:d2:84:36:b2:44:cb:30:7b:5d:b0:1f:b0:5f:
         f6:c6:31:19:e8:1d:39:d2:92:55:43:79:e5:82:5f:79:2f:6f:
         23:65:6a:3b:6c:65:d3:7d:fa:a1:1b:ce:fe:92:e7:5c:3c:88:
         9a:ce:a0:d2:c4:22:b1:13:d5:64:94:f4:fc:0f:6e:da:45:67:
         e1:10:36:77:df:da:04:45:66:cf:7a:60:7a:a0:c4:41:9b:82:
         5f:dc:65:2c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ckkEr0+kd/VcjvAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
MTZiY2EyZTAtODRkZC00MWYxLWI3ZGEtNWRiMDEzMWEwNGM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhrC5/jWHDuG5IeaEMLLrHYpYUZe8FY+DT3h
RklUx9f5ghsa2dnvrVwQT8DDr9FTYW8Tad4saOy+Ei+JVUT4GMJ6pds2oPibk8xj
OWMnoJg+3IKat0vO9dcxrj+5Eq3k8KBbnkBP/ZPb1Js7T1gW6jxsgH6QbouWcRSF
VNSPRCCa/vqWS4pIwPxonlhZM4OTvvVGIJQkKEjNRu7/0/1bfiPIdwT38fKkogZQ
TUOGxB32azvHaM50ZGKDdRtTtTKcjY2mHVE6j6TDwphmwX/+CltpN9s4xvjscbLJ
kpCDfOP1fXbyCsThHtHsj99O+matSUhh0h3KKyiyMc9M5om4VwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAU1oJR5tN9X+3j05oCP26kdPS85MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTM0MmRlMTYtMzE3YS0z
M2JjLTllYTMtOWI1NWRhOGZlMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAK1
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH0mneqoPJJuB96QlHMrFlgFXXqBJVjwQmbiQ8Tvr06nxT36mOil
pvga+LAQ7FyvBDRVFQvw6TQc7zlpXqtVD+laEORjIEpEzwCvxjUztfsGknVDffar
UHzc1elG9fcJKtYSwsQTqBHX5qNUV1XU+5S3SVtqhLo+wE0IiLqBbB974ZIw4q/Y
uxdmBN5mCWXI0KP/9H/WYxEj27jd2xxhlR9mzeTwyv030oQ2skTLMHtdsB+wX/bG
MRnoHTnSklVDeeWCX3kvbyNlajtsZdN9+qEbzv6S51w8iJrOoNLEIrET1WSU9PwP
btpFZ+EQNnff2gRFZs96YHqgxEGbgl/cZSw=
-----END CERTIFICATE-----
Generated at Sat Sep 12 07:52:33 2026 by rpki-client