Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee2f6253-b116-36a8-9d89-83a5483292ca.roa
File:                     ee2f6253-b116-36a8-9d89-83a5483292ca.roa (raw, json)
Hash identifier:          DuaXidMe2mtDBV1eEbOkzwXJ1OnlVhGF57BdbLhipTM=
Subject key identifier:   D3:03:8D:86:42:AF:51:1D:D9:83:E1:F7:77:FF:27:B3:F8:FB:A5:C1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DFA6FBE0C423040BFD300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee2f6253-b116-36a8-9d89-83a5483292ca.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     22682
IP address blocks:        2001:470:1ed::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:fa:6f:be:0c:42:30:40:bf:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=f4b9db20-7e53-4d3d-a647-8e73833d64bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e8:7c:e9:f3:96:62:92:45:bf:f3:dd:2c:f9:
                    14:3c:cf:50:a4:b9:d4:11:f6:85:dd:c2:3f:d1:8a:
                    7c:c3:26:93:a0:26:8b:4f:85:51:6c:7b:66:15:3c:
                    5e:c8:3b:6f:7c:ba:0b:38:8c:a4:89:c2:47:55:1a:
                    28:29:ed:55:ae:ed:c8:70:31:15:d8:70:7d:1a:26:
                    33:c7:e3:45:0b:85:0f:61:5a:4c:80:fc:32:99:c2:
                    04:88:b6:15:c9:04:17:a0:66:42:7c:6c:29:23:2a:
                    cf:f1:a1:2f:45:5e:8a:d9:c9:f0:c6:d8:ee:b7:13:
                    63:72:06:40:c7:ae:70:d5:73:d0:24:19:88:99:3b:
                    8c:79:76:ed:03:7c:74:0f:30:8c:2d:06:de:88:5d:
                    99:fc:95:12:02:fe:69:63:48:43:26:37:f8:33:89:
                    ad:9f:42:76:cd:83:95:0c:21:71:7f:f2:22:9a:58:
                    e0:a9:ac:1e:10:5e:56:45:cc:dd:e6:f7:93:04:39:
                    cd:fc:3a:be:7a:08:18:bc:bc:36:66:cb:2e:cf:2e:
                    13:14:ee:0e:84:db:81:55:3b:6c:f4:85:97:f3:f7:
                    9d:5f:95:4d:ee:5b:c6:8a:c8:db:0a:3c:cb:90:1d:
                    75:ea:45:65:1d:1e:99:8a:32:36:c1:61:a0:86:16:
                    59:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:03:8D:86:42:AF:51:1D:D9:83:E1:F7:77:FF:27:B3:F8:FB:A5:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee2f6253-b116-36a8-9d89-83a5483292ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1ed::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:af:b7:f6:87:4c:ee:e6:12:46:07:65:4f:66:b2:22:db:f2:
         e8:b3:4c:c4:26:7d:8b:c3:98:fa:b1:fd:96:87:37:df:31:03:
         00:31:61:8a:84:cd:af:d5:73:6f:58:78:03:e8:b5:2f:51:51:
         0f:6e:70:bc:c9:f2:59:b2:c9:39:11:f5:37:65:65:5c:a4:d6:
         9b:ab:26:7a:38:47:09:9d:03:da:30:53:3c:13:f7:a8:7f:82:
         7a:81:ea:1f:2a:f1:24:07:5b:d6:82:4d:cb:68:ce:de:21:9b:
         31:e0:bc:72:82:10:3a:c7:51:8c:ed:3d:42:f1:57:c7:f7:96:
         65:30:ed:dd:5b:5c:46:4b:60:cc:0f:e9:3a:5c:7b:75:28:47:
         ba:1d:bd:a2:2f:26:8f:e7:ff:b7:84:71:26:ed:97:8c:96:16:
         fd:e7:2b:c3:a9:a8:d2:77:ca:71:43:c4:fc:17:6d:67:fa:46:
         fe:df:e1:d4:5c:8c:3b:92:ac:39:9e:74:58:22:25:21:43:2b:
         48:71:ed:3f:6c:2e:38:56:f1:2b:c9:d4:9a:c7:05:6e:e4:ea:
         7e:39:11:1a:e7:f8:3f:9e:8a:c2:7a:e9:a5:77:98:82:d2:bd:
         17:39:1c:c8:1a:9a:60:aa:17:70:3f:67:cc:a3:90:bf:1b:b7:
         29:94:a3:a7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9+ffpvvgxCMEC/0wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk
ZjRiOWRiMjAtN2U1My00ZDNkLWE2NDctOGU3MzgzM2Q2NGJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOh86fOWYpJFv/PdLPkUPM9QpLnUEfaF3cI/
0Yp8wyaToCaLT4VRbHtmFTxeyDtvfLoLOIykicJHVRooKe1Vru3IcDEV2HB9GiYz
x+NFC4UPYVpMgPwymcIEiLYVyQQXoGZCfGwpIyrP8aEvRV6K2cnwxtjutxNjcgZA
x65w1XPQJBmImTuMeXbtA3x0DzCMLQbeiF2Z/JUSAv5pY0hDJjf4M4mtn0J2zYOV
DCFxf/IimljgqaweEF5WRczd5veTBDnN/Dq+eggYvLw2Zssuzy4TFO4OhNuBVTts
9IWX8/edX5VN7lvGisjbCjzLkB116kVlHR6ZijI2wWGghhZZeQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNMDjYZCr1Ed2YPh93f/J7P4+6XBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWUyZjYyNTMtYjExNi0z
NmE4LTlkODktODNhNTQ4MzI5MmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHt
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC+vt/aHTO7mEkYHZU9msiLb8uizTMQmfYvDmPqx/ZaHN98xAwAx
YYqEza/Vc29YeAPotS9RUQ9ucLzJ8lmyyTkR9TdlZVyk1purJno4RwmdA9owUzwT
96h/gnqB6h8q8SQHW9aCTctozt4hmzHgvHKCEDrHUYztPULxV8f3lmUw7d1bXEZL
YMwP6Tpce3UoR7odvaIvJo/n/7eEcSbtl4yWFv3nK8OpqNJ3ynFDxPwXbWf6Rv7f
4dRcjDuSrDmedFgiJSFDK0hx7T9sLjhW8SvJ1JrHBW7k6n45ERrn+D+eisJ66aV3
mILSvRc5HMgammCqF3A/Z8yjkL8btymUo6c=
-----END CERTIFICATE-----
Generated at Mon Nov 2 21:57:58 2026 by rpki-client