Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/b2248719-73d6-3a59-a50f-c57913ea0f77.roa
File:                     b2248719-73d6-3a59-a50f-c57913ea0f77.roa (raw, json)
Hash identifier:          IB44zcDYsuSDKEEEszJHKo655nqnfT9ey6UIqhxHemI=
Subject key identifier:   D5:88:4C:95:86:2A:8A:08:EF:4A:B9:3A:D5:DD:EF:D1:6E:C2:B2:60
Certificate issuer:       /CN=5f4c623c-0d0c-4995-9560-0507df4828e8
Certificate serial:       010D0C9F4328584E7FFA388881A786F2CB934A00
Authority key identifier: 0A:07:21:55:55:AD:C3:06:34:0F:EB:1F:20:ED:B2:BF:34:13:67:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/b2248719-73d6-3a59-a50f-c57913ea0f77.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     54900
IP address blocks:        2620:91:c000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/5f4c623c-0d0c-4995-9560-0507df4828e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/5f4c623c-0d0c-4995-9560-0507df4828e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:38:88:81:a7:86:f2:cb:93:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f4c623c-0d0c-4995-9560-0507df4828e8
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=f91be040-3541-431c-81d9-bf408dab1e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ee:33:cc:28:d6:98:00:15:fa:2c:fd:e8:7b:
                    0f:8f:46:23:61:f8:c0:5e:16:35:4c:1f:d9:90:7b:
                    90:f7:e6:b5:71:f8:46:77:1e:a4:08:bd:a9:4c:0c:
                    4f:ec:2d:48:da:60:77:ee:bb:43:97:62:9b:58:ae:
                    4a:51:9a:c8:43:1b:d6:4c:63:b6:51:8b:5a:9c:21:
                    1f:bc:92:61:f2:8e:38:a4:3b:13:1d:28:2f:4a:83:
                    e1:d9:27:08:74:4a:54:e0:ec:dc:2e:7d:06:ae:14:
                    11:97:cf:3a:aa:ab:b2:e8:dc:33:bc:3c:ae:1d:4a:
                    4d:48:28:18:6a:60:b0:4c:14:e4:fb:dc:57:6c:ea:
                    a9:77:a3:ed:d3:13:9b:87:02:0d:b2:40:ac:23:c4:
                    d4:9d:ce:46:e7:0e:e5:a3:aa:fa:f7:00:38:3b:18:
                    f1:a8:f9:c2:d3:12:96:0a:0d:88:1f:8f:e8:d3:8b:
                    3d:fd:d6:b9:ff:d4:e7:b7:81:23:f5:65:a6:1f:e4:
                    a2:7e:b4:a1:d4:f8:7c:58:86:63:54:0a:c1:6e:af:
                    ce:6f:17:1b:86:9b:ba:ac:e7:17:0d:91:62:6a:16:
                    4a:5b:f6:31:cd:31:0a:65:45:b3:16:c1:4c:6b:a9:
                    8b:2d:02:4f:46:59:1a:a5:dd:ee:a1:1b:5e:30:ec:
                    ae:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:88:4C:95:86:2A:8A:08:EF:4A:B9:3A:D5:DD:EF:D1:6E:C2:B2:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/b2248719-73d6-3a59-a50f-c57913ea0f77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/5f4c623c-0d0c-4995-9560-0507df4828e8.crl

            X509v3 Authority Key Identifier:
                keyid:0A:07:21:55:55:AD:C3:06:34:0F:EB:1F:20:ED:B2:BF:34:13:67:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:91:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:9f:bd:48:0e:89:a7:24:81:9c:ee:14:8e:f7:fa:a5:fa:16:
         47:3d:30:55:75:76:f4:76:bd:98:27:b8:1c:30:62:63:19:e8:
         cc:7b:e6:87:c5:f6:26:46:cc:4a:ba:07:9b:2c:dd:c2:27:5a:
         8b:43:cd:ca:1e:e5:31:87:d1:fc:67:37:33:b5:31:2d:fc:b5:
         2b:4b:18:0d:45:73:6b:35:02:e9:c1:dc:a4:29:07:60:c2:bb:
         5e:de:65:bd:6c:7e:6a:45:08:21:68:43:ab:f0:57:69:6e:76:
         a3:c6:57:9f:c8:aa:a0:df:48:22:14:26:0e:0a:56:30:82:76:
         4f:39:aa:c4:a4:1b:cf:f8:2e:15:eb:be:30:73:41:a9:55:eb:
         49:ae:de:dd:f9:70:01:2e:bf:06:9a:2f:99:03:c1:bc:90:bb:
         a7:e8:f1:f5:0f:4f:e9:f9:8c:fd:3f:de:fb:41:56:20:0c:b9:
         f5:84:a8:11:60:67:68:01:68:03:aa:f3:a0:a6:30:e9:48:48:
         65:4e:49:2e:fb:c5:3b:81:c6:5b:8e:1c:30:09:5f:5a:e7:2e:
         80:2f:65:3c:6f:89:ff:ee:34:e0:0f:75:dc:fa:f8:6a:7f:6a:
         0f:3c:78:b4:04:ef:ce:0f:a6:37:cf:30:b2:a7:52:f0:7a:e6:
         96:ac:80:5f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5/+jiIgaeG8suTSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWY0YzYyM2MtMGQwYy00OTk1LTk1NjAtMDUwN2RmNDgy
OGU4MB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk
ZjkxYmUwNDAtMzU0MS00MzFjLTgxZDktYmY0MDhkYWIxZTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu4zzCjWmAAV+iz96HsPj0YjYfjAXhY1TB/Z
kHuQ9+a1cfhGdx6kCL2pTAxP7C1I2mB37rtDl2KbWK5KUZrIQxvWTGO2UYtanCEf
vJJh8o44pDsTHSgvSoPh2ScIdEpU4OzcLn0GrhQRl886qquy6NwzvDyuHUpNSCgY
amCwTBTk+9xXbOqpd6Pt0xObhwINskCsI8TUnc5G5w7lo6r69wA4OxjxqPnC0xKW
Cg2IH4/o04s9/da5/9Tnt4Ej9WWmH+SifrSh1Ph8WIZjVArBbq/Obxcbhpu6rOcX
DZFiahZKW/YxzTEKZUWzFsFMa6mLLQJPRlkapd3uoRteMOyuhwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNWITJWGKooI70q5OtXd79FuwrJgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81ZjRj
NjIzYy0wZDBjLTQ5OTUtOTU2MC0wNTA3ZGY0ODI4ZTgvYjIyNDg3MTktNzNkNi0z
YTU5LWE1MGYtYzU3OTEzZWEwZjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWY0YzYyM2MtMGQwYy00OTk1LTk1
NjAtMDUwN2RmNDgyOGU4LzVmNGM2MjNjLTBkMGMtNDk5NS05NTYwLTA1MDdkZjQ4
MjhlOC5jcmwwHwYDVR0jBBgwFoAUCgchVVWtwwY0D+sfIO2yvzQTZ3YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81ZjRjNjIzYy0wZDBjLTQ5OTUtOTU2MC0wNTA3
ZGY0ODI4ZTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAkcAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABifvUgOiackgZzuFI73+qX6Fkc9MFV1dvR2vZgnuBwwYmMZ6Mx7
5ofF9iZGzEq6B5ss3cInWotDzcoe5TGH0fxnNzO1MS38tStLGA1Fc2s1AunB3KQp
B2DCu17eZb1sfmpFCCFoQ6vwV2ludqPGV5/IqqDfSCIUJg4KVjCCdk85qsSkG8/4
LhXrvjBzQalV60mu3t35cAEuvwaaL5kDwbyQu6fo8fUPT+n5jP0/3vtBViAMufWE
qBFgZ2gBaAOq86CmMOlISGVOSS77xTuBxluOHDAJX1rnLoAvZTxvif/uNOAPddz6
+Gp/ag88eLQE784PpjfPMLKnUvB65pasgF8=
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:10:49 2026 by rpki-client