Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0159c80c-dabd-3228-89ec-f94d6239be50.roa
File:                     0159c80c-dabd-3228-89ec-f94d6239be50.roa (raw, json)
Hash identifier:          sYN5Iwyd6KRuAvySd5OocroESo+vX0mIdASS+1roNbA=
Subject key identifier:   09:18:79:CC:BD:BE:84:4F:D4:66:B0:C9:AE:E0:6E:4C:29:9B:F7:EB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC9218637C66C1B611624F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0159c80c-dabd-3228-89ec-f94d6239be50.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     39444
IP address blocks:        2001:470:14f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:18:63:7c:66:c1:b6:11:62:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=7b64f661-39ef-4b41-9b71-1790971b5ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7e:c8:e8:e8:a0:37:a3:9b:e5:9f:09:27:bd:
                    54:f5:63:d2:3d:3a:a3:37:7c:68:18:fc:ec:ca:cc:
                    c7:18:af:d0:d6:b3:58:42:71:12:d8:da:ab:ef:6d:
                    ac:e8:71:ce:aa:c6:f2:1f:3d:d4:fd:b8:46:5e:9b:
                    73:cf:6f:41:53:46:59:66:e8:59:e7:3e:73:46:93:
                    ff:10:f1:43:ad:f2:1f:73:d4:c0:2f:67:7b:4c:7a:
                    c8:e1:8a:db:17:6f:38:ca:1a:e5:70:3f:48:be:d3:
                    cd:29:eb:28:21:cc:41:e0:46:93:0b:79:dd:f7:d1:
                    42:e8:4e:db:21:1a:84:0e:c4:38:c4:67:71:03:d9:
                    29:ac:bc:4e:6d:7f:09:12:61:79:a0:c9:79:0f:94:
                    f8:61:58:0c:53:bf:b2:b0:9a:ec:97:52:14:ef:dc:
                    35:9b:2b:2b:e1:22:a7:f2:d2:62:2e:c8:10:3f:e8:
                    e5:61:b9:f4:f2:8d:30:1a:f9:63:0c:7c:99:d5:b3:
                    2e:3f:87:1e:34:bc:74:ce:7e:53:24:f1:0a:3e:7e:
                    32:3c:cf:4b:08:17:07:9b:5c:ea:6e:b8:10:cc:7d:
                    91:93:fd:df:b4:7d:27:44:21:e7:9d:0a:75:5a:2b:
                    c0:42:4b:50:bc:ad:9c:1e:64:6a:85:af:d6:dc:73:
                    54:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:18:79:CC:BD:BE:84:4F:D4:66:B0:C9:AE:E0:6E:4C:29:9B:F7:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0159c80c-dabd-3228-89ec-f94d6239be50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:14f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:00:08:ed:57:c6:34:84:77:12:45:0e:2b:21:e7:33:c8:26:
         0c:d3:83:ea:41:5d:11:25:59:79:fe:30:8f:da:08:47:59:51:
         10:3d:e8:7e:68:a6:ec:45:af:fb:cf:db:87:84:06:74:5e:9c:
         e0:00:6c:44:3f:f8:c7:a0:4b:21:fe:3c:10:00:14:85:66:3a:
         85:a0:7a:67:56:23:81:dd:bc:48:c0:4f:47:b6:e5:f6:a7:7d:
         e0:1c:61:fd:97:98:52:be:07:03:9b:60:66:21:ea:2d:e0:2d:
         85:f8:69:d0:f7:7b:d5:57:04:41:ee:25:c2:ac:4e:47:72:10:
         45:fb:9b:23:9f:f1:0f:fc:41:83:e2:44:49:e9:cc:d7:ae:86:
         7e:ae:1e:1b:af:cb:af:4e:40:b5:2b:13:09:37:5d:9a:93:39:
         99:2a:e8:b2:0e:6e:b8:bb:ee:c3:bb:5d:1e:13:27:fa:46:93:
         72:d6:05:5c:19:23:31:fd:ff:b2:c3:ae:8f:3c:bb:fa:77:9c:
         22:45:ac:d4:13:5c:84:68:4c:6a:42:8c:f9:ba:04:35:24:b0:
         2e:9c:0f:db:1c:0c:34:2b:8d:8f:3a:b1:fe:e7:29:96:e2:92:
         63:d3:f2:54:a3:e6:10:a4:84:0c:dc:04:2a:5f:81:00:c9:e7:
         fb:79:54:eb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ckhhjfGbBthFiTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
N2I2NGY2NjEtMzllZi00YjQxLTliNzEtMTc5MDk3MWI1YWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH7I6OigN6Ob5Z8JJ71U9WPSPTqjN3xoGPzs
yszHGK/Q1rNYQnES2Nqr722s6HHOqsbyHz3U/bhGXptzz29BU0ZZZuhZ5z5zRpP/
EPFDrfIfc9TAL2d7THrI4YrbF284yhrlcD9IvtPNKesoIcxB4EaTC3nd99FC6E7b
IRqEDsQ4xGdxA9kprLxObX8JEmF5oMl5D5T4YVgMU7+ysJrsl1IU79w1mysr4SKn
8tJiLsgQP+jlYbn08o0wGvljDHyZ1bMuP4ceNLx0zn5TJPEKPn4yPM9LCBcHm1zq
brgQzH2Rk/3ftH0nRCHnnQp1WivAQktQvK2cHmRqha/W3HNUMQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAkYecy9voRP1Gawya7gbkwpm/frMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDE1OWM4MGMtZGFiZC0z
MjI4LTg5ZWMtZjk0ZDYyMzliZTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFP
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKEACO1XxjSEdxJFDish5zPIJgzTg+pBXRElWXn+MI/aCEdZURA9
6H5opuxFr/vP24eEBnRenOAAbEQ/+MegSyH+PBAAFIVmOoWgemdWI4HdvEjAT0e2
5fanfeAcYf2XmFK+BwObYGYh6i3gLYX4adD3e9VXBEHuJcKsTkdyEEX7myOf8Q/8
QYPiREnpzNeuhn6uHhuvy69OQLUrEwk3XZqTOZkq6LIObri77sO7XR4TJ/pGk3LW
BVwZIzH9/7LDro88u/p3nCJFrNQTXIRoTGpCjPm6BDUksC6cD9scDDQrjY86sf7n
KZbikmPT8lSj5hCkhAzcBCpfgQDJ5/t5VOs=
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:48:53 2026 by rpki-client