Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ed3412cc-58e5-3594-afd1-a3120228f4a4.roa
File:                     ed3412cc-58e5-3594-afd1-a3120228f4a4.roa (raw, json)
Hash identifier:          +RDCfrFfByJhSLpFx5SRkcMEXr/Eab6dAYpo0RZnDKQ=
Subject key identifier:   C1:0E:C0:C4:CC:A4:9E:14:1A:22:3B:EE:F3:32:1C:88:0B:2D:80:1F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DFCA0D449F319854B7E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ed3412cc-58e5-3594-afd1-a3120228f4a4.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     210119
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:fc:a0:d4:49:f3:19:85:4b:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=0b4d1eba-6a65-4e4c-afbc-a126070509a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1b:58:a2:1e:86:e2:00:81:df:e7:77:45:de:
                    85:f4:6b:1e:89:cb:43:3c:0a:fc:bc:36:16:20:a6:
                    ca:f2:a9:10:e7:70:2a:94:71:42:3e:b0:1e:73:d9:
                    ab:5f:f8:87:b4:16:44:4d:8c:f5:fb:46:e0:4a:ef:
                    6d:95:1b:e6:8d:47:9b:af:d7:52:9a:a4:19:f3:1a:
                    ac:d9:dd:5d:4e:6d:1f:5c:f6:1a:05:6e:4e:78:38:
                    70:83:5c:54:df:21:28:e1:ed:d8:38:62:69:f8:83:
                    70:db:f9:3f:42:3c:44:12:de:de:74:10:c4:4f:b2:
                    34:d3:15:fd:c0:33:20:16:5c:a1:ba:69:27:9b:c2:
                    8e:cc:b7:ad:0e:6c:19:fe:04:7b:56:89:4b:90:50:
                    fd:60:4d:09:03:e3:5e:07:36:06:b5:34:3b:b9:8d:
                    44:b1:06:81:93:b9:5a:20:28:e3:1b:be:f9:41:2d:
                    fc:89:dd:c8:a5:6c:2e:41:04:79:ec:c3:6e:0a:c3:
                    4d:8a:53:d1:9d:6d:eb:23:8e:98:c0:f6:ff:8e:93:
                    c9:15:ee:12:76:ed:ad:47:80:8d:af:ac:71:6c:75:
                    8f:80:03:c3:1e:23:31:1d:4f:c4:dc:3e:57:fc:99:
                    02:84:3c:ac:5f:04:f4:a0:2f:43:50:a2:aa:7c:2b:
                    e5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0E:C0:C4:CC:A4:9E:14:1A:22:3B:EE:F3:32:1C:88:0B:2D:80:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ed3412cc-58e5-3594-afd1-a3120228f4a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:35:07:64:b7:c6:5d:f8:f6:e3:62:c1:1d:dc:18:94:0a:63:
         ce:2b:07:f5:9d:1d:4c:e9:f9:e0:c6:4d:9e:6c:b5:ca:b1:f0:
         63:02:6f:35:3e:13:dd:26:46:de:2e:ce:76:06:e7:e6:9f:e4:
         30:c2:05:93:b8:9a:57:e1:6d:e4:cf:32:92:62:e5:ee:14:ee:
         02:f0:8f:52:7a:08:e1:e9:e2:ca:c8:89:fd:c2:4f:c9:05:be:
         6e:80:5b:2e:9a:61:bb:35:3a:96:57:20:cd:0a:f7:4d:63:2b:
         49:01:1f:88:be:39:d4:1a:ee:be:c1:c2:ec:39:78:96:5b:f9:
         8e:3d:a2:20:37:ec:9d:a9:87:85:78:b1:ed:bd:fa:ce:5d:3a:
         16:14:fd:50:ea:62:e5:6f:3d:93:06:fc:e1:26:bf:d2:5a:9a:
         81:cd:ea:ab:b7:8f:e1:1f:8c:01:de:c8:75:b3:05:5d:0e:db:
         50:d1:60:3d:7f:81:61:e6:27:3e:49:5e:69:f1:99:7e:ae:6e:
         52:4b:4c:8c:e2:cc:11:33:a8:4e:56:63:ea:8c:37:63:63:7b:
         b4:e2:60:24:ec:bd:af:d0:9f:d0:7c:38:7a:1e:94:25:f8:d7:
         30:24:f7:ea:0b:90:37:49:f2:a7:95:fd:9a:4c:ac:9a:81:b0:
         d5:83:73:63
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+ffyg1EnzGYVLfoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk
MGI0ZDFlYmEtNmE2NS00ZTRjLWFmYmMtYTEyNjA3MDUwOWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRtYoh6G4gCB3+d3Rd6F9GseictDPAr8vDYW
IKbK8qkQ53AqlHFCPrAec9mrX/iHtBZETYz1+0bgSu9tlRvmjUebr9dSmqQZ8xqs
2d1dTm0fXPYaBW5OeDhwg1xU3yEo4e3YOGJp+INw2/k/QjxEEt7edBDET7I00xX9
wDMgFlyhumknm8KOzLetDmwZ/gR7VolLkFD9YE0JA+NeBzYGtTQ7uY1EsQaBk7la
ICjjG775QS38id3IpWwuQQR57MNuCsNNilPRnW3rI46YwPb/jpPJFe4Sdu2tR4CN
r6xxbHWPgAPDHiMxHU/E3D5X/JkChDysXwT0oC9DUKKqfCvl0wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMEOwMTMpJ4UGiI77vMyHIgLLYAfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWQzNDEyY2MtNThlNS0z
NTk0LWFmZDEtYTMxMjAyMjhmNGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAs1B2S3xl349uNiwR3cGJQKY84rB/WdHUzp+eDGTZ5stcqx8GMC
bzU+E90mRt4uznYG5+af5DDCBZO4mlfhbeTPMpJi5e4U7gLwj1J6COHp4srIif3C
T8kFvm6AWy6aYbs1OpZXIM0K901jK0kBH4i+OdQa7r7Bwuw5eJZb+Y49oiA37J2p
h4V4se29+s5dOhYU/VDqYuVvPZMG/OEmv9JamoHN6qu3j+EfjAHeyHWzBV0O21DR
YD1/gWHmJz5JXmnxmX6ublJLTIzizBEzqE5WY+qMN2Nje7TiYCTsva/Qn9B8OHoe
lCX41zAk9+oLkDdJ8qeV/ZpMrJqBsNWDc2M=
-----END CERTIFICATE-----
Generated at Sun Oct 25 23:12:08 2026 by rpki-client