Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e4566995-64ca-3988-bd65-3db3e053be63.roa
File:                     e4566995-64ca-3988-bd65-3db3e053be63.roa (raw, json)
Hash identifier:          TTEeCo9w3zyhM8wXpYxVVJQQBsOYPoyjQ1RvwWKwYNs=
Subject key identifier:   F4:6C:92:1E:5F:6B:0E:29:26:7D:3B:C0:1E:EE:8F:C9:AC:95:4B:42
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EA799F9AF3837BE3E9E086D98
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e4566995-64ca-3988-bd65-3db3e053be63.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     38255
IP address blocks:        2001:470:273::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:f9:af:38:37:be:3e:9e:08:6d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=39176d62-b309-4a08-94dc-bf6610f44cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:76:c6:cd:f0:1b:86:52:3e:76:a6:45:e5:37:
                    f2:0e:51:05:ec:30:a1:db:8b:e4:af:df:97:3e:17:
                    65:26:f4:98:9f:54:2a:bc:0b:44:3b:c7:0c:b0:ae:
                    3f:10:52:b5:73:4c:2a:83:05:37:3a:63:00:c8:2d:
                    6d:b0:06:f9:de:ba:a3:f8:f6:93:65:b8:2a:44:27:
                    3e:32:ed:32:a4:ba:22:2d:e9:88:7b:b8:d1:be:21:
                    11:87:39:1d:23:2d:0a:cd:63:fb:7d:d3:b1:8e:e7:
                    cf:ca:c1:6f:74:80:e4:7a:da:72:3f:ce:cd:5f:f5:
                    c7:ed:90:69:34:f5:5d:6b:0c:39:79:81:31:f1:87:
                    9b:5e:2a:ad:d5:a4:af:f5:8b:81:09:cc:0a:06:8c:
                    19:d0:72:fe:f6:4a:4c:c8:66:be:13:45:db:72:98:
                    7c:cf:c1:59:e9:39:f3:b2:38:09:22:b5:b8:99:0d:
                    61:36:b2:e5:e2:ab:f5:c8:e6:16:db:b8:ba:96:cd:
                    6a:e3:45:a8:56:ea:a6:9b:25:52:30:db:29:a8:c6:
                    47:6e:40:86:6b:85:a6:42:0f:f0:67:c0:63:b7:db:
                    f0:76:31:5d:23:7c:cc:4e:f2:df:67:eb:81:5e:84:
                    c4:ec:47:a5:71:91:6d:d3:92:9d:57:64:47:3e:9f:
                    d9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6C:92:1E:5F:6B:0E:29:26:7D:3B:C0:1E:EE:8F:C9:AC:95:4B:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e4566995-64ca-3988-bd65-3db3e053be63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:273::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b0:de:f3:a2:da:b0:db:dd:5a:4e:e4:47:31:9a:e5:a7:27:
         bb:21:16:98:19:ed:19:25:7e:3f:b8:f5:92:6e:5c:6d:ad:7c:
         85:8e:96:0e:2b:2f:06:27:04:74:12:e4:1d:fd:ec:5e:89:13:
         96:62:92:61:24:03:6a:e3:1e:4a:45:8c:8f:26:9d:3a:70:21:
         c4:0b:14:2b:6b:ec:1f:26:93:d1:71:ed:a4:ee:ae:94:82:83:
         87:1f:02:a7:b3:d3:8c:f4:7a:e2:03:76:7d:5c:c9:44:fd:f9:
         27:ae:a3:f6:b3:13:f4:5f:c4:64:e5:c4:0c:e1:65:33:c3:57:
         07:0d:b9:c8:f8:fd:53:ce:c9:c5:5f:c6:9b:6e:81:fb:b8:38:
         99:a3:c8:2f:bc:b0:80:21:18:83:d5:3f:3b:f8:e6:b1:e1:e1:
         44:a0:c9:a5:47:64:8e:02:36:2a:db:72:f0:ee:6f:cb:88:c2:
         f5:de:76:ea:7f:88:c3:b4:a2:56:a7:96:c8:bc:81:ef:8f:c0:
         19:34:19:02:7a:93:30:13:69:27:d0:16:8a:a3:4a:f5:e0:ef:
         50:5f:cc:ce:0a:22:2c:5f:4c:f5:38:fb:e3:eb:f9:b0:1f:4c:
         e9:a7:7e:01:6c:88:db:67:8f:7a:1f:45:b6:51:62:c2:96:b7:
         8d:c7:b3:da
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nmfmvODe+Pp4IbZgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MzkxNzZkNjItYjMwOS00YTA4LTk0ZGMtYmY2NjEwZjQ0Y2FiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13bGzfAbhlI+dqZF5TfyDlEF7DCh24vkr9+X
PhdlJvSYn1QqvAtEO8cMsK4/EFK1c0wqgwU3OmMAyC1tsAb53rqj+PaTZbgqRCc+
Mu0ypLoiLemIe7jRviERhzkdIy0KzWP7fdOxjufPysFvdIDketpyP87NX/XH7ZBp
NPVdaww5eYEx8YebXiqt1aSv9YuBCcwKBowZ0HL+9kpMyGa+E0Xbcph8z8FZ6Tnz
sjgJIrW4mQ1hNrLl4qv1yOYW27i6ls1q40WoVuqmmyVSMNspqMZHbkCGa4WmQg/w
Z8Bjt9vwdjFdI3zMTvLfZ+uBXoTE7EelcZFt05KdV2RHPp/ZiQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPRskh5faw4pJn07wB7uj8mslUtCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTQ1NjY5OTUtNjRjYS0z
OTg4LWJkNjUtM2RiM2UwNTNiZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJz
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG6w3vOi2rDb3VpO5EcxmuWnJ7shFpgZ7Rklfj+49ZJuXG2tfIWO
lg4rLwYnBHQS5B397F6JE5ZikmEkA2rjHkpFjI8mnTpwIcQLFCtr7B8mk9Fx7aTu
rpSCg4cfAqez04z0euIDdn1cyUT9+Seuo/azE/RfxGTlxAzhZTPDVwcNucj4/VPO
ycVfxptugfu4OJmjyC+8sIAhGIPVPzv45rHh4USgyaVHZI4CNirbcvDub8uIwvXe
dup/iMO0olanlsi8ge+PwBk0GQJ6kzATaSfQFoqjSvXg71BfzM4KIixfTPU4++Pr
+bAfTOmnfgFsiNtnj3ofRbZRYsKWt43Hs9o=
-----END CERTIFICATE-----
Generated at Sat Aug 29 14:06:15 2026 by rpki-client