Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5df83117-9d29-3766-92d3-3e97b567cab8.roa
File:                     5df83117-9d29-3766-92d3-3e97b567cab8.roa (raw, json)
Hash identifier:          RRtWjdQG1S2Jfdv6chuXAL9qD2ZbR0Wa11Fmu6L1lJ8=
Subject key identifier:   14:E5:93:F8:56:AD:52:5B:6A:D0:5F:66:7B:B5:AA:F3:4D:9D:5C:A2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F4986E030518578F5D15FC340
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5df83117-9d29-3766-92d3-3e97b567cab8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     27291
IP address blocks:        2001:470:182::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:e0:30:51:85:78:f5:d1:5f:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4233e69d-3bb1-4647-a893-3c85b4873423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ee:fb:db:15:82:6d:60:c2:f8:7e:8d:54:d2:
                    7c:07:26:c2:e5:c3:d9:63:1c:ac:68:09:f2:98:61:
                    21:8b:3a:21:fa:07:52:8e:40:d5:bf:99:16:79:10:
                    ed:11:e1:4a:38:6f:0b:01:af:42:a2:ce:22:5c:b9:
                    cf:49:aa:de:57:94:22:29:69:86:c5:8c:a8:84:3f:
                    e6:80:25:59:11:16:66:a3:f7:65:1a:c6:57:4c:93:
                    1f:a7:f0:5e:d1:44:e2:3f:76:d6:53:0a:fb:9a:76:
                    e7:4d:3b:54:2b:1e:e2:bb:73:b2:70:f0:97:41:5c:
                    8a:4f:bd:7a:a6:d6:e4:fa:ec:7b:67:3c:ef:26:a9:
                    47:52:33:ba:5e:b4:19:2d:47:1a:79:dd:86:e1:04:
                    ec:2c:8e:09:c1:ee:36:65:fc:70:fd:b7:b9:a5:24:
                    a6:e7:d7:ac:7c:c4:4e:74:4d:cf:4e:3c:a8:f2:7a:
                    de:ff:fe:d7:d9:da:53:2c:0f:35:4f:6a:b4:48:55:
                    2b:d6:de:db:37:61:e0:c7:67:dc:d3:a4:f2:9e:14:
                    c5:8d:9e:32:f6:b2:1b:b9:f6:b9:cb:5d:9e:c3:1c:
                    8b:32:39:6c:ab:3c:65:6b:2c:a9:92:b5:e3:d5:2c:
                    02:7c:c0:09:43:30:6e:ff:96:33:64:1b:5e:4b:ab:
                    b0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E5:93:F8:56:AD:52:5B:6A:D0:5F:66:7B:B5:AA:F3:4D:9D:5C:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5df83117-9d29-3766-92d3-3e97b567cab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:182::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:f0:11:6a:30:90:96:b4:46:33:1a:ef:ed:66:bd:bb:6c:47:
         01:57:96:7a:da:07:50:45:be:11:52:94:20:d1:d5:47:46:20:
         40:88:5c:58:50:20:00:c1:23:32:16:f8:92:72:12:94:b5:c4:
         9a:eb:51:4d:53:6b:b8:d9:1d:8e:e6:67:ea:c2:69:a6:c6:42:
         81:69:5d:a0:ea:5e:ae:49:7b:d9:96:5f:3b:61:52:be:71:68:
         bf:3a:ce:59:64:10:47:56:a8:2a:f1:60:83:48:8c:d9:47:34:
         25:39:fb:f0:b2:b6:b0:b5:d7:2e:f6:b7:37:0c:22:9f:22:f8:
         d7:a0:91:21:3b:b2:77:47:78:b2:c9:41:ba:0c:d8:93:af:87:
         60:0a:c4:3a:07:39:89:20:42:ec:ad:90:f2:2f:94:9e:68:94:
         49:05:5d:79:bc:1b:2e:29:6d:21:c8:6c:ce:e4:14:06:4f:05:
         f0:03:00:ed:58:f6:df:0b:1c:27:74:cc:e4:5d:43:29:fc:46:
         fe:76:15:3b:59:e8:30:60:10:c2:40:1c:d7:32:f9:86:31:53:
         e5:60:22:06:63:6b:b8:08:aa:6a:3c:86:28:05:c0:29:67:46:
         4d:3a:53:45:d8:9a:8b:b7:67:43:b5:9c:47:81:7a:07:31:aa:
         73:22:0f:74
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhuAwUYV49dFfw0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NDIzM2U2OWQtM2JiMS00NjQ3LWE4OTMtM2M4NWI0ODczNDIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO772xWCbWDC+H6NVNJ8BybC5cPZYxysaAny
mGEhizoh+gdSjkDVv5kWeRDtEeFKOG8LAa9Cos4iXLnPSareV5QiKWmGxYyohD/m
gCVZERZmo/dlGsZXTJMfp/Be0UTiP3bWUwr7mnbnTTtUKx7iu3OycPCXQVyKT716
ptbk+ux7ZzzvJqlHUjO6XrQZLUcaed2G4QTsLI4Jwe42Zfxw/be5pSSm59esfMRO
dE3PTjyo8nre//7X2dpTLA81T2q0SFUr1t7bN2Hgx2fc06TynhTFjZ4y9rIbufa5
y12ewxyLMjlsqzxlayypkrXj1SwCfMAJQzBu/5YzZBteS6uwvwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBTlk/hWrVJbatBfZnu1qvNNnVyiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWRmODMxMTctOWQyOS0z
NzY2LTkyZDMtM2U5N2I1NjdjYWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEXwEWowkJa0RjMa7+1mvbtsRwFXlnraB1BFvhFSlCDR1UdGIECI
XFhQIADBIzIW+JJyEpS1xJrrUU1Ta7jZHY7mZ+rCaabGQoFpXaDqXq5Je9mWXzth
Ur5xaL86zllkEEdWqCrxYINIjNlHNCU5+/CytrC11y72tzcMIp8i+NegkSE7sndH
eLLJQboM2JOvh2AKxDoHOYkgQuytkPIvlJ5olEkFXXm8Gy4pbSHIbM7kFAZPBfAD
AO1Y9t8LHCd0zORdQyn8Rv52FTtZ6DBgEMJAHNcy+YYxU+VgIgZja7gIqmo8higF
wClnRk06U0XYmou3Z0O1nEeBegcxqnMiD3Q=
-----END CERTIFICATE-----
Generated at Sat Sep 26 22:20:00 2026 by rpki-client