Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/edd0c5c9-0861-3dab-a66b-dbc88c37e390.roa
File:                     edd0c5c9-0861-3dab-a66b-dbc88c37e390.roa (raw, json)
Hash identifier:          iN7jIRHZPETmcwMj9Y52Av2e62Dg8RZ7HsPXzlIh4+0=
Subject key identifier:   62:79:B7:09:63:17:FC:D4:8B:E4:E3:00:3D:83:FC:15:F3:15:E1:1E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EAFE6EFDAFFABA4F4A0026200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/edd0c5c9-0861-3dab-a66b-dbc88c37e390.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     41435
IP address blocks:        2001:470:542::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e6:ef:da:ff:ab:a4:f4:a0:02:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=a5eb5d39-03a5-47bc-be0f-ead48796d045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b1:ce:9a:00:c6:ab:28:63:5d:6b:2d:25:98:
                    e2:a8:4b:cc:31:35:22:01:25:4d:17:f2:a6:d3:2d:
                    d0:1b:12:69:70:d1:ae:b4:fe:a6:b5:b3:a9:88:80:
                    2a:c5:82:24:2c:22:05:6d:d8:45:b7:5e:e1:ce:10:
                    2c:3e:96:7c:75:8f:c1:59:ec:a5:70:27:36:15:ef:
                    b4:98:0d:31:7d:2e:d8:0a:1e:ab:35:2b:8f:5c:dc:
                    7d:15:b0:b3:e4:b4:07:72:73:7e:b2:1f:40:15:7e:
                    50:f4:02:71:40:ff:5f:35:ae:7d:36:90:39:b5:64:
                    e3:98:6e:7d:fe:34:97:d3:54:1c:06:dc:20:26:86:
                    9b:cf:7b:48:c8:98:d1:8b:a2:14:dc:9c:71:03:b7:
                    06:30:e6:9b:d6:99:08:1e:12:0f:44:a7:f6:4e:90:
                    b7:7a:75:c6:79:34:b9:17:f2:ac:11:4b:68:9b:f1:
                    5c:c8:59:28:52:4b:d4:0d:4a:fc:9b:55:04:20:20:
                    5e:c9:ee:58:96:b3:4c:a3:fa:b3:b2:2a:c5:bd:bf:
                    81:b3:1e:e8:da:38:a4:9c:05:e7:55:3d:b9:b3:60:
                    07:7a:b1:7c:06:45:d7:f6:f8:80:f7:e1:e5:22:10:
                    b0:0d:0b:bb:8c:eb:97:cf:ad:87:51:50:ff:30:54:
                    45:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:79:B7:09:63:17:FC:D4:8B:E4:E3:00:3D:83:FC:15:F3:15:E1:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/edd0c5c9-0861-3dab-a66b-dbc88c37e390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:542::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:c2:0d:00:69:27:da:8c:ee:cb:84:79:6b:66:7d:99:e8:21:
         8a:f9:7c:90:cd:bc:79:7f:af:c5:cd:5f:3d:5c:cf:cb:14:b1:
         ec:00:3e:5c:83:cd:cb:3a:6d:84:5a:e4:4b:95:b6:06:a7:a7:
         26:d8:be:7f:10:4e:ee:94:df:bd:64:66:b0:bf:0d:1e:cb:98:
         b7:d8:7c:ef:06:59:6a:5d:dd:ed:ac:38:38:fc:c3:64:c4:a7:
         46:ba:82:83:57:d9:77:27:f9:55:28:8b:ee:99:17:ea:1f:f9:
         8b:a7:87:0d:82:2a:99:24:03:9f:94:e9:0d:93:c8:6d:86:01:
         f7:06:69:bf:e1:06:53:c1:b3:1f:77:17:6d:5a:77:9a:b0:a8:
         15:95:86:9f:69:26:17:fc:61:bb:1d:af:06:d4:6f:92:98:9e:
         61:b4:cf:38:11:21:af:9a:2d:85:2f:ae:80:f5:dc:0d:44:ef:
         c4:8c:60:c0:14:af:2b:d2:bb:25:6e:a0:4e:81:fa:b8:35:c4:
         1d:6e:ad:9c:d7:8f:8f:3f:a2:9e:bf:bf:fd:bd:76:ac:39:00:
         b9:5f:61:48:e9:a1:cd:aa:b2:70:48:bb:56:65:0a:3e:89:b9:
         20:46:ec:dd:ff:3a:8b:45:59:a4:b0:a7:1e:22:83:a6:98:41:
         c0:51:fe:dc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6v5u/a/6uk9KACYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk
YTVlYjVkMzktMDNhNS00N2JjLWJlMGYtZWFkNDg3OTZkMDQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bHOmgDGqyhjXWstJZjiqEvMMTUiASVNF/Km
0y3QGxJpcNGutP6mtbOpiIAqxYIkLCIFbdhFt17hzhAsPpZ8dY/BWeylcCc2Fe+0
mA0xfS7YCh6rNSuPXNx9FbCz5LQHcnN+sh9AFX5Q9AJxQP9fNa59NpA5tWTjmG59
/jSX01QcBtwgJoabz3tIyJjRi6IU3JxxA7cGMOab1pkIHhIPRKf2TpC3enXGeTS5
F/KsEUtom/FcyFkoUkvUDUr8m1UEICBeye5YlrNMo/qzsirFvb+Bsx7o2jiknAXn
VT25s2AHerF8BkXX9viA9+HlIhCwDQu7jOuXz62HUVD/MFRFeQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGJ5twljF/zUi+TjAD2D/BXzFeEeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWRkMGM1YzktMDg2MS0z
ZGFiLWE2NmItZGJjODhjMzdlMzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAVC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALvCDQBpJ9qM7suEeWtmfZnoIYr5fJDNvHl/r8XNXz1cz8sUsewA
PlyDzcs6bYRa5EuVtganpybYvn8QTu6U371kZrC/DR7LmLfYfO8GWWpd3e2sODj8
w2TEp0a6goNX2Xcn+VUoi+6ZF+of+Yunhw2CKpkkA5+U6Q2TyG2GAfcGab/hBlPB
sx93F21ad5qwqBWVhp9pJhf8YbsdrwbUb5KYnmG0zzgRIa+aLYUvroD13A1E78SM
YMAUryvSuyVuoE6B+rg1xB1urZzXj48/op6/v/29dqw5ALlfYUjpoc2qsnBIu1Zl
Cj6JuSBG7N3/OotFWaSwpx4ig6aYQcBR/tw=
-----END CERTIFICATE-----
Generated at Sat Sep 12 07:52:14 2026 by rpki-client