Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fb8deb94-a9e9-3c5c-bb9e-56b5b429e429.roa
File:                     fb8deb94-a9e9-3c5c-bb9e-56b5b429e429.roa (raw, json)
Hash identifier:          4CA6Rgfwq/OA6PchTWqBzNtCqWSA4pfU4jd+V9Bxlq8=
Subject key identifier:   BC:64:10:EA:C2:5A:8B:56:92:16:4A:CF:EB:BC:27:7B:BE:BB:F7:C0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EBDDC57A6708D6720C5820300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fb8deb94-a9e9-3c5c-bb9e-56b5b429e429.roa
Signing time:             Thu 06 Aug 2026 01:00:12 +0000
ROA not before:           Thu 06 Aug 2026 01:00:12 +0000
ROA not after:            Wed 04 Nov 2026 02:00:12 +0000
asID:                     38439
IP address blocks:        2001:470:40a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:dc:57:a6:70:8d:67:20:c5:82:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  6 01:00:12 2026 GMT
            Not After : Nov  4 02:00:12 2026 GMT
        Subject: CN=ff07789f-ca5b-4610-ac91-e1cf4271fcdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ea:3f:d1:31:ed:12:fd:9d:11:8f:e2:77:bf:
                    02:03:25:31:29:d1:ff:07:9d:ec:be:67:92:cf:d0:
                    8a:b7:d1:55:43:01:ad:30:bb:14:b7:25:d0:05:a4:
                    62:ec:4a:8b:7e:ab:f6:df:3d:98:cc:ec:64:0e:c1:
                    19:2b:82:27:a9:48:30:ea:46:54:1f:ef:85:0a:55:
                    ac:91:81:d9:15:1f:61:1a:ba:81:33:cf:8f:d5:81:
                    55:ff:b2:43:23:9f:c0:2b:b4:cb:3d:33:10:52:82:
                    f1:cf:34:03:89:95:58:b6:0c:73:ec:e1:d2:7c:f5:
                    89:5b:b1:f9:c6:1e:cf:e5:f5:67:2f:63:bd:9e:a2:
                    7e:c5:f3:b0:86:e6:5b:f5:92:e4:6d:cd:81:53:ed:
                    8b:c1:68:83:bd:d3:95:4f:f2:fe:f7:db:e4:11:e7:
                    91:0a:3c:43:bb:8c:63:c8:8b:74:4d:2f:8b:1d:70:
                    96:35:1b:d2:bc:8a:b3:32:54:45:06:3e:e8:41:b8:
                    ad:d3:51:30:5b:74:3a:8d:7c:04:1e:c2:49:a1:1d:
                    d8:4d:5b:61:22:6c:2c:76:53:2b:90:3e:b6:1c:8a:
                    3a:c8:b2:1a:4c:f3:82:6f:b0:b1:37:62:34:74:9d:
                    cb:6d:a6:72:f4:fe:13:e6:8d:51:b9:34:64:62:01:
                    3b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:64:10:EA:C2:5A:8B:56:92:16:4A:CF:EB:BC:27:7B:BE:BB:F7:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fb8deb94-a9e9-3c5c-bb9e-56b5b429e429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:40a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:15:23:5d:a5:2e:1b:2c:5c:20:76:38:fc:10:4e:ba:a1:31:
         c6:4b:5a:6e:31:e8:33:2c:9b:48:b1:95:c1:c5:ca:7a:7c:1e:
         97:e7:2e:49:fe:3d:cf:c6:3f:fb:aa:9e:4d:fd:51:db:a4:94:
         60:c0:28:aa:c8:90:6e:bc:58:aa:1e:5c:f1:87:13:b7:cc:3b:
         c8:66:20:1d:f9:c9:3d:6d:dc:c1:7d:da:72:93:7c:9c:23:8b:
         01:ad:61:ee:e6:e7:90:5c:93:96:02:c5:8f:b8:f0:9a:e8:2f:
         9d:71:44:e2:5a:41:1b:66:5c:92:f2:91:5b:04:29:c4:e6:a1:
         c6:d6:8e:60:40:16:f0:0a:0e:ae:61:a8:4c:da:f4:dd:a9:65:
         e6:c9:c4:d6:0b:2c:6a:90:75:90:a7:94:7b:36:3d:41:90:14:
         34:cb:a6:a7:94:1f:b7:68:08:06:20:d2:86:33:5b:34:1f:ec:
         ee:c0:ec:e1:05:6a:f7:3e:6f:f0:5a:a5:84:b0:ac:15:c2:38:
         84:10:a4:ef:ef:32:fc:d0:57:96:d1:44:b9:cc:32:4d:26:81:
         a1:da:18:39:03:21:db:e5:c3:0e:c6:be:d6:9a:68:38:5a:47:
         0d:a7:27:d1:6d:ec:49:5a:a2:bb:31:57:05:f0:4b:1a:5d:05:
         59:79:12:0b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE693FemcI1nIMWCAwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDgwNjAxMDAxMloXDTI2MTEwNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZmYwNzc4OWYtY2E1Yi00NjEwLWFjOTEtZTFjZjQyNzFmY2RmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuo/0THtEv2dEY/id78CAyUxKdH/B53svmeS
z9CKt9FVQwGtMLsUtyXQBaRi7EqLfqv23z2YzOxkDsEZK4InqUgw6kZUH++FClWs
kYHZFR9hGrqBM8+P1YFV/7JDI5/AK7TLPTMQUoLxzzQDiZVYtgxz7OHSfPWJW7H5
xh7P5fVnL2O9nqJ+xfOwhuZb9ZLkbc2BU+2LwWiDvdOVT/L+99vkEeeRCjxDu4xj
yIt0TS+LHXCWNRvSvIqzMlRFBj7oQbit01EwW3Q6jXwEHsJJoR3YTVthImwsdlMr
kD62HIo6yLIaTPOCb7CxN2I0dJ3LbaZy9P4T5o1RuTRkYgE7jQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLxkEOrCWotWkhZKz+u8J3u+u/fAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmI4ZGViOTQtYTllOS0z
YzVjLWJiOWUtNTZiNWI0MjllNDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF4VI12lLhssXCB2OPwQTrqhMcZLWm4x6DMsm0ixlcHFynp8Hpfn
Lkn+Pc/GP/uqnk39UduklGDAKKrIkG68WKoeXPGHE7fMO8hmIB35yT1t3MF92nKT
fJwjiwGtYe7m55Bck5YCxY+48JroL51xROJaQRtmXJLykVsEKcTmocbWjmBAFvAK
Dq5hqEza9N2pZebJxNYLLGqQdZCnlHs2PUGQFDTLpqeUH7doCAYg0oYzWzQf7O7A
7OEFavc+b/BapYSwrBXCOIQQpO/vMvzQV5bRRLnMMk0mgaHaGDkDIdvlww7Gvtaa
aDhaRw2nJ9Ft7ElaorsxVwXwSxpdBVl5Egs=
-----END CERTIFICATE-----
Generated at Wed Aug 26 23:30:06 2026 by rpki-client