Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f286f925-a68f-3c9c-9793-93af00dcbf7b.roa
File:                     f286f925-a68f-3c9c-9793-93af00dcbf7b.roa (raw, json)
Hash identifier:          g1iSoBXDdF3uLWsyVqXTT+cNPv27z2qEsTP12lO0E8E=
Subject key identifier:   74:AB:30:38:52:49:A2:5E:8A:F8:52:DE:2A:4F:36:11:2C:68:2B:C4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EAFE6EFE9136995A16C8F1C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f286f925-a68f-3c9c-9793-93af00dcbf7b.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     205384
IP address blocks:        2001:470:542::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e6:ef:e9:13:69:95:a1:6c:8f:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=65ddf367-1eca-4049-8aa5-6a1b1f3b7e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:97:35:7f:79:8e:23:c7:bc:8b:b2:e2:8a:d7:
                    3e:60:8d:f0:1f:37:fa:c3:dd:51:1d:f0:ab:0d:c3:
                    7e:ff:f7:78:67:3b:d4:67:80:68:65:e4:22:e0:c1:
                    e3:03:2a:44:a4:44:40:94:ab:7b:f0:2b:76:a2:29:
                    c8:fc:c9:6e:06:f6:cd:65:53:45:49:05:38:9d:4b:
                    0d:e4:da:1b:96:0e:d7:ed:8b:96:d8:37:6d:0c:72:
                    1b:ae:4f:02:88:46:13:e9:ff:b1:37:25:5b:ea:f1:
                    4e:18:df:dd:6a:0a:72:cc:33:cb:fb:ca:06:87:cb:
                    20:34:8a:66:37:e7:94:5b:d5:ed:30:af:22:0d:75:
                    0a:96:ca:9e:66:de:22:69:9b:83:3f:0c:f7:1a:a0:
                    97:2e:f3:cc:1f:4f:87:b6:f1:df:9c:61:bf:61:37:
                    f0:9d:ba:83:b3:72:de:8a:65:b2:f3:53:91:60:11:
                    6f:f3:10:4a:6b:e7:6d:9d:33:31:99:f2:85:24:16:
                    4a:b5:86:33:ac:15:0c:95:2d:59:aa:18:68:2e:87:
                    cf:34:86:67:14:11:3e:30:ee:8a:d4:8a:ed:9b:a6:
                    91:96:4d:6c:4e:ca:73:bd:24:1c:3c:83:df:1d:5d:
                    65:d0:9c:59:eb:28:fb:17:71:03:7e:7f:86:6b:ba:
                    2e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AB:30:38:52:49:A2:5E:8A:F8:52:DE:2A:4F:36:11:2C:68:2B:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f286f925-a68f-3c9c-9793-93af00dcbf7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:542::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:95:75:5e:b7:0f:24:29:f5:a1:5c:0d:00:ce:70:c3:fd:35:
         22:f0:ec:20:7a:34:31:c4:99:5c:48:5d:f3:aa:b9:b2:e8:59:
         c5:9a:89:e2:1d:80:14:07:08:e3:d5:d4:36:b7:b9:ea:85:2e:
         e5:3f:60:00:a8:b0:89:3f:bb:3d:7c:d7:db:ae:39:34:aa:33:
         b6:19:55:0d:fa:d2:58:26:42:48:b2:38:d3:c1:08:70:69:aa:
         76:d6:ea:e5:39:90:42:a5:68:1d:12:5a:24:a8:63:fc:34:55:
         35:64:1a:48:18:9d:3b:97:37:0c:86:df:c9:3c:77:2d:ba:90:
         6c:40:99:bf:fe:28:b0:3f:cf:1d:fb:48:7d:9e:1b:b0:d0:98:
         b9:7f:5c:6f:55:d2:75:fb:8a:ed:ff:7c:1c:42:0e:cd:21:b3:
         bb:57:8c:7c:a2:78:b8:0c:91:fe:be:6c:3b:fb:00:75:c8:87:
         94:bf:bd:20:97:6a:34:b6:30:5b:69:a0:a0:94:74:5c:54:c6:
         be:85:f2:17:b0:05:70:e2:72:c0:08:f5:01:aa:d9:b5:52:32:
         03:c1:31:30:4a:5a:6f:c5:c7:08:63:bc:c0:de:53:a4:07:55:
         ce:1d:d9:6a:51:e1:50:48:5e:91:6a:40:87:95:91:1e:e9:e3:
         b1:05:d4:87
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6v5u/pE2mVoWyPHAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk
NjVkZGYzNjctMWVjYS00MDQ5LThhYTUtNmExYjFmM2I3ZTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJc1f3mOI8e8i7Liitc+YI3wHzf6w91RHfCr
DcN+//d4ZzvUZ4BoZeQi4MHjAypEpERAlKt78Ct2oinI/MluBvbNZVNFSQU4nUsN
5Noblg7X7YuW2DdtDHIbrk8CiEYT6f+xNyVb6vFOGN/dagpyzDPL+8oGh8sgNIpm
N+eUW9XtMK8iDXUKlsqeZt4iaZuDPwz3GqCXLvPMH0+HtvHfnGG/YTfwnbqDs3Le
imWy81ORYBFv8xBKa+dtnTMxmfKFJBZKtYYzrBUMlS1ZqhhoLofPNIZnFBE+MO6K
1Irtm6aRlk1sTspzvSQcPIPfHV1l0JxZ6yj7F3EDfn+Ga7ouowIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHSrMDhSSaJeivhS3ipPNhEsaCvEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjI4NmY5MjUtYTY4Zi0z
YzljLTk3OTMtOTNhZjAwZGNiZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAVC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHeVdV63DyQp9aFcDQDOcMP9NSLw7CB6NDHEmVxIXfOqubLoWcWa
ieIdgBQHCOPV1Da3ueqFLuU/YACosIk/uz1819uuOTSqM7YZVQ360lgmQkiyONPB
CHBpqnbW6uU5kEKlaB0SWiSoY/w0VTVkGkgYnTuXNwyG38k8dy26kGxAmb/+KLA/
zx37SH2eG7DQmLl/XG9V0nX7iu3/fBxCDs0hs7tXjHyieLgMkf6+bDv7AHXIh5S/
vSCXajS2MFtpoKCUdFxUxr6F8hewBXDicsAI9QGq2bVSMgPBMTBKWm/FxwhjvMDe
U6QHVc4d2WpR4VBIXpFqQIeVkR7p47EF1Ic=
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:48:11 2026 by rpki-client