Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dd485a6e-5c74-3597-a4e2-f296943c1657.roa
File:                     dd485a6e-5c74-3597-a4e2-f296943c1657.roa (raw, json)
Hash identifier:          jvOdiYjZ3QLDaSRg1UnCSjGGNi5KOsahqIUEluwLOww=
Subject key identifier:   05:BD:05:1E:1B:90:62:9B:54:72:60:1B:3B:EB:AF:69:80:4D:58:14
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC923B5AA70AB6DF80DE1E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dd485a6e-5c74-3597-a4e2-f296943c1657.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     11738
IP address blocks:        2001:470:1e9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:3b:5a:a7:0a:b6:df:80:de:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=b7013b60-fd46-4845-b37f-fc3b38a66273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:04:90:41:83:9d:8c:28:9d:32:b3:24:ea:a0:
                    f9:b4:f2:dd:72:78:02:ec:64:a0:5e:18:3c:7a:dd:
                    d6:7e:72:5d:6b:47:0e:51:7a:48:fe:1b:4e:ab:b1:
                    81:4c:d0:e2:6c:ea:3d:ed:8f:a7:a4:3a:e0:6c:f4:
                    0c:9d:0b:7f:eb:a0:89:c6:21:83:a8:76:83:52:44:
                    c3:0e:7a:f7:4f:e0:c3:d9:11:e7:f6:19:cc:3f:54:
                    b0:5a:ac:ea:5c:7d:0a:b6:95:19:fc:5a:67:3b:54:
                    a1:07:86:c2:61:55:9f:e3:16:e5:b7:b3:6b:c1:64:
                    33:d3:44:af:98:29:e4:be:75:53:a5:de:e8:16:67:
                    8e:17:f3:31:4d:b8:16:8b:5e:87:b1:63:13:1b:40:
                    2d:99:76:f7:d1:dd:07:92:30:08:b6:95:0f:02:40:
                    ea:80:1a:bd:39:23:3c:ec:8e:8a:9e:d4:a9:73:74:
                    89:c9:43:9a:1b:4f:03:da:67:cd:48:c9:6f:3a:d9:
                    e7:60:a3:9d:a0:50:0c:a4:03:96:e7:e0:9b:5c:e9:
                    c5:ee:74:7d:e2:3a:13:dd:99:14:bc:03:42:1a:94:
                    6e:06:72:59:3a:40:6e:8c:6b:7f:b9:ff:a7:a5:8d:
                    59:be:7b:72:8e:6b:bf:f6:9c:79:bc:9f:3a:6a:66:
                    df:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BD:05:1E:1B:90:62:9B:54:72:60:1B:3B:EB:AF:69:80:4D:58:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dd485a6e-5c74-3597-a4e2-f296943c1657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1e9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:5d:f5:ba:a9:1c:91:cf:67:06:2e:31:dc:2c:d0:96:f7:ef:
         e6:99:c3:51:c6:69:f4:ea:57:b5:5f:a5:17:b0:42:38:95:ea:
         55:5c:40:86:41:fe:01:55:ee:c7:d6:53:ac:47:68:35:ef:fc:
         fd:0b:0b:5f:f9:7d:26:84:fc:bd:78:59:2a:94:b4:a3:45:71:
         0a:d7:4e:ef:4f:a4:a3:31:da:49:4f:4d:13:8f:cb:f3:98:f1:
         fd:13:9a:82:cf:93:08:c1:b4:15:65:5a:a3:61:dd:91:00:75:
         fd:70:f0:03:9c:ac:a3:d1:ea:f8:eb:42:68:0a:5a:11:16:7b:
         55:fb:2a:7f:19:8a:91:ec:bf:12:03:52:9c:29:15:86:4b:3b:
         b6:75:54:4e:3d:54:3b:cf:a2:03:ea:73:cb:95:11:07:b9:74:
         ab:f0:f5:34:0f:97:5b:3c:0b:17:fa:12:3a:a0:26:66:62:7e:
         ed:a7:b3:66:91:1f:ff:5b:30:9c:88:34:51:4d:46:ea:0e:d3:
         9a:c7:e7:fd:79:b2:ba:42:a0:00:cc:2c:03:45:7f:20:4b:c0:
         11:fd:60:1f:73:38:dd:b4:fd:09:00:2b:00:fe:d3:c1:83:5d:
         0f:cf:a7:6a:08:21:f1:84:d1:11:e1:ea:b8:42:e6:56:b9:a3:
         f1:eb:09:6c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ckjtapwq234DeHgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
YjcwMTNiNjAtZmQ0Ni00ODQ1LWIzN2YtZmMzYjM4YTY2MjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgSQQYOdjCidMrMk6qD5tPLdcngC7GSgXhg8
et3WfnJda0cOUXpI/htOq7GBTNDibOo97Y+npDrgbPQMnQt/66CJxiGDqHaDUkTD
Dnr3T+DD2RHn9hnMP1SwWqzqXH0KtpUZ/FpnO1ShB4bCYVWf4xblt7NrwWQz00Sv
mCnkvnVTpd7oFmeOF/MxTbgWi16HsWMTG0AtmXb30d0HkjAItpUPAkDqgBq9OSM8
7I6KntSpc3SJyUOaG08D2mfNSMlvOtnnYKOdoFAMpAOW5+CbXOnF7nR94joT3ZkU
vANCGpRuBnJZOkBujGt/uf+npY1Zvntyjmu/9px5vJ86ambfhQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAW9BR4bkGKbVHJgGzvrr2mATVgUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGQ0ODVhNmUtNWM3NC0z
NTk3LWE0ZTItZjI5Njk0M2MxNjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHp
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAxd9bqpHJHPZwYuMdws0Jb37+aZw1HGafTqV7VfpRewQjiV6lVc
QIZB/gFV7sfWU6xHaDXv/P0LC1/5fSaE/L14WSqUtKNFcQrXTu9PpKMx2klPTROP
y/OY8f0TmoLPkwjBtBVlWqNh3ZEAdf1w8AOcrKPR6vjrQmgKWhEWe1X7Kn8ZipHs
vxIDUpwpFYZLO7Z1VE49VDvPogPqc8uVEQe5dKvw9TQPl1s8Cxf6EjqgJmZifu2n
s2aRH/9bMJyINFFNRuoO05rH5/15srpCoADMLANFfyBLwBH9YB9zON20/QkAKwD+
08GDXQ/Pp2oIIfGE0RHh6rhC5la5o/HrCWw=
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:31:03 2026 by rpki-client