Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5e0ec56f-a428-3cc8-b999-59cb1667dd33.roa
File:                     5e0ec56f-a428-3cc8-b999-59cb1667dd33.roa (raw, json)
Hash identifier:          lkEh9QhtnbKo4rExdXgmOjJSLs0cZDQ2i6bH8DIKQtw=
Subject key identifier:   E2:C0:18:66:A3:AF:88:86:DD:0A:D9:0B:F0:FA:BF:8F:C0:6D:19:CE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E736A3A3C19548FFDF9B48860
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5e0ec56f-a428-3cc8-b999-59cb1667dd33.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     577
IP address blocks:        2001:470:50c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:3a:3c:19:54:8f:fd:f9:b4:88:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=eb1bfd9f-7916-4265-9010-98077493b7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:02:ab:01:14:43:ce:d8:fe:40:38:a4:02:e7:
                    84:c8:7d:30:37:58:78:ae:a9:e8:15:06:de:e9:1c:
                    0f:88:30:80:60:36:20:3c:cb:cb:5a:74:fe:84:58:
                    a4:50:b9:31:88:61:f5:69:6f:c6:8c:09:41:11:99:
                    76:9a:ec:9e:70:be:af:36:62:43:b9:16:c4:19:8b:
                    9a:32:4a:04:20:84:9f:58:99:f2:86:94:2b:5e:0d:
                    f9:72:5a:31:61:27:e5:76:40:f8:15:e6:8e:bd:1a:
                    e9:99:f5:e2:2b:3a:03:22:9c:97:76:29:72:ac:9a:
                    35:c3:f9:0f:e6:f4:5d:02:19:03:5c:19:db:f5:82:
                    65:5d:55:9f:6a:cb:61:46:0d:37:87:c6:92:c2:ae:
                    44:9b:63:aa:bd:9e:7e:0d:9a:83:7c:9f:3a:a9:9b:
                    75:a7:7a:f0:f0:94:87:6f:dd:ba:2b:5a:c2:3f:fd:
                    5e:c9:e6:cb:7d:c7:d1:56:8f:05:1e:70:c1:33:b8:
                    9b:96:6e:19:61:93:9a:08:23:2a:21:fe:da:37:8e:
                    2c:94:0a:ec:66:6e:f4:a9:87:af:20:a8:54:5c:ce:
                    54:b8:f6:f9:ab:48:fb:08:78:c0:4f:5c:ba:a7:04:
                    77:97:3b:e2:fc:53:77:b0:55:10:4e:34:4e:7a:0f:
                    cc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C0:18:66:A3:AF:88:86:DD:0A:D9:0B:F0:FA:BF:8F:C0:6D:19:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5e0ec56f-a428-3cc8-b999-59cb1667dd33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:50c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:b8:07:02:9d:3e:11:3e:0d:cc:45:bf:4d:c7:af:e1:0a:e1:
         1e:59:56:f4:e9:0f:6d:27:e4:a9:af:5a:f2:6e:23:a6:0c:65:
         95:ae:9d:e7:2c:e8:5a:c1:13:31:a0:99:23:b3:11:2f:7f:2e:
         76:6f:03:14:2a:35:3f:30:7f:52:cc:e6:ee:f7:7a:a6:34:33:
         17:3b:43:f6:83:f8:e3:90:38:88:da:1f:a1:33:20:30:e6:26:
         d0:f2:ba:15:47:97:8d:38:be:28:4e:70:cc:f3:2d:77:18:54:
         19:38:01:b2:85:59:3d:cb:34:8b:0a:ec:79:d4:b6:b1:af:c1:
         6e:c0:8d:3e:02:e5:b9:db:fc:b1:98:a2:b5:9b:31:db:8c:7d:
         39:78:6e:ce:da:2e:f0:b7:fe:eb:45:ba:03:d7:49:d0:fa:6d:
         d1:09:96:94:4a:10:bc:fe:8c:10:a6:7b:6c:8a:03:c0:d3:72:
         63:58:6b:69:03:dd:35:9b:b9:f7:93:af:86:5e:b2:cb:8e:c3:
         67:a5:ba:f1:b3:f6:c8:b5:9c:f6:61:6e:09:ae:ee:e8:c3:ae:
         e1:ff:1b:17:34:b7:8b:1f:37:72:fc:f9:79:04:2d:17:dd:e2:
         3e:dd:32:d3:8c:fc:5c:5d:40:56:b8:8d:ff:9d:aa:ae:36:99:
         fe:73:fc:d3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5zajo8GVSP/fm0iGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk
ZWIxYmZkOWYtNzkxNi00MjY1LTkwMTAtOTgwNzc0OTNiN2FiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAKrARRDztj+QDikAueEyH0wN1h4rqnoFQbe
6RwPiDCAYDYgPMvLWnT+hFikULkxiGH1aW/GjAlBEZl2muyecL6vNmJDuRbEGYua
MkoEIISfWJnyhpQrXg35cloxYSfldkD4FeaOvRrpmfXiKzoDIpyXdilyrJo1w/kP
5vRdAhkDXBnb9YJlXVWfasthRg03h8aSwq5Em2OqvZ5+DZqDfJ86qZt1p3rw8JSH
b926K1rCP/1eyebLfcfRVo8FHnDBM7iblm4ZYZOaCCMqIf7aN44slArsZm70qYev
IKhUXM5UuPb5q0j7CHjAT1y6pwR3lzvi/FN3sFUQTjROeg/MgQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOLAGGajr4iG3QrZC/D6v4/AbRnOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWUwZWM1NmYtYTQyOC0z
Y2M4LWI5OTktNTljYjE2NjdkZDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAUM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJm4BwKdPhE+DcxFv03Hr+EK4R5ZVvTpD20n5KmvWvJuI6YMZZWu
necs6FrBEzGgmSOzES9/LnZvAxQqNT8wf1LM5u73eqY0Mxc7Q/aD+OOQOIjaH6Ez
IDDmJtDyuhVHl404vihOcMzzLXcYVBk4AbKFWT3LNIsK7HnUtrGvwW7AjT4C5bnb
/LGYorWbMduMfTl4bs7aLvC3/utFugPXSdD6bdEJlpRKELz+jBCme2yKA8DTcmNY
a2kD3TWbufeTr4ZessuOw2eluvGz9si1nPZhbgmu7ujDruH/Gxc0t4sfN3L8+XkE
LRfd4j7dMtOM/FxdQFa4jf+dqq42mf5z/NM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:48:20 2026 by rpki-client