Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/865561de-56c5-355a-8754-f7915f0fdf00.roa
File:                     865561de-56c5-355a-8754-f7915f0fdf00.roa (raw, json)
Hash identifier:          sxZcoc2Li/TKk/r1mS6YX+JVZvCYOVwpvPBbLo+7aCY=
Subject key identifier:   56:A8:74:DD:3B:09:38:01:80:8D:89:01:03:46:2A:BF:AE:E6:5B:9E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F4989844F40EE37CF802E0280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/865561de-56c5-355a-8754-f7915f0fdf00.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     4136
IP address blocks:        2001:470:4f6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:84:4f:40:ee:37:cf:80:2e:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2d23d778-8c48-437c-a1cd-bd61bcaead7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c1:42:c7:49:b5:3d:2f:24:51:24:d0:e5:03:
                    e2:25:e9:ff:65:02:9b:e2:67:f2:ee:05:cd:8d:17:
                    0f:74:16:ce:d0:34:1e:ad:f7:a1:7c:95:85:21:92:
                    b9:ae:6d:79:40:6d:ab:80:5d:0e:c6:30:83:5a:d3:
                    c5:30:56:e6:1a:e6:24:f0:62:ba:79:8f:d9:a5:00:
                    2c:0f:3f:5d:ee:c3:2d:39:29:92:f7:70:53:f0:bf:
                    34:3d:19:be:f7:94:8f:17:b7:7f:32:f1:2e:37:7f:
                    d1:45:5d:2d:ee:d1:c6:fa:7c:84:38:9f:63:16:7f:
                    68:70:7e:d5:55:24:30:89:b9:d9:9d:22:6e:fc:ff:
                    c6:6a:d6:c7:b2:01:68:5c:13:9b:1f:a8:41:4f:3e:
                    fe:93:33:11:ce:8f:f7:0b:12:95:52:79:e1:f5:ca:
                    30:73:e6:4f:0f:a9:a1:4e:4c:64:96:30:c0:34:e1:
                    84:25:b1:e0:f4:17:d4:41:e6:90:52:fe:fd:62:67:
                    f8:09:d2:e3:1e:2e:bd:e7:2c:07:a4:9a:08:71:b8:
                    f2:3a:97:f3:70:6d:26:ef:fe:7a:01:18:ae:4e:61:
                    a5:e1:1e:1e:44:a4:90:c3:6f:a9:3e:1f:4a:fa:04:
                    87:e7:15:6f:5c:59:85:39:70:ea:d6:d0:f5:0a:00:
                    62:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A8:74:DD:3B:09:38:01:80:8D:89:01:03:46:2A:BF:AE:E6:5B:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/865561de-56c5-355a-8754-f7915f0fdf00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4f6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:65:43:26:7c:cd:db:76:bb:f2:89:e1:2d:03:21:83:e3:87:
         67:dd:5a:ed:72:46:e1:d1:fd:73:a6:fc:34:55:7e:28:a9:11:
         4a:f5:02:7f:80:2b:70:14:eb:d6:18:8d:31:07:48:5e:72:2f:
         07:7c:f1:07:cf:5f:aa:ee:48:4e:b8:f4:e9:e5:dd:16:7b:df:
         c8:81:8a:4d:18:1e:bf:ad:dc:10:b8:d0:c6:8a:5d:a7:c4:0c:
         a2:36:79:c7:c2:da:69:b5:a2:a2:d0:95:c5:6a:9c:59:8e:ee:
         1e:4d:39:8e:81:20:37:19:31:cc:bc:d2:a5:61:ae:34:e6:9a:
         35:53:fe:c2:43:fc:fb:ee:3a:b8:07:27:2e:3b:09:fd:9c:41:
         52:26:27:39:84:57:67:39:37:71:b2:61:8c:c8:92:58:2f:74:
         b8:d4:0e:62:95:80:4e:d3:6b:d9:6e:b3:94:a3:94:64:f3:73:
         2d:48:41:13:7f:6c:23:1a:9f:fe:18:c7:11:22:c7:1c:5c:66:
         04:d5:6b:ee:c7:32:2a:79:82:94:34:ab:64:46:9b:74:5d:f8:
         bc:21:ae:f0:99:5e:8a:dd:77:0a:df:a9:8b:65:13:76:2f:91:
         36:7d:53:e5:cd:d0:18:5f:0e:61:17:47:56:f4:48:b7:46:04:
         58:e4:46:dc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiYRPQO43z4AuAoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MmQyM2Q3NzgtOGM0OC00MzdjLWExY2QtYmQ2MWJjYWVhZDdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcFCx0m1PS8kUSTQ5QPiJen/ZQKb4mfy7gXN
jRcPdBbO0DQerfehfJWFIZK5rm15QG2rgF0OxjCDWtPFMFbmGuYk8GK6eY/ZpQAs
Dz9d7sMtOSmS93BT8L80PRm+95SPF7d/MvEuN3/RRV0t7tHG+nyEOJ9jFn9ocH7V
VSQwibnZnSJu/P/GatbHsgFoXBObH6hBTz7+kzMRzo/3CxKVUnnh9cowc+ZPD6mh
TkxkljDANOGEJbHg9BfUQeaQUv79Ymf4CdLjHi695ywHpJoIcbjyOpfzcG0m7/56
ARiuTmGl4R4eRKSQw2+pPh9K+gSH5xVvXFmFOXDq1tD1CgBi2QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFaodN07CTgBgI2JAQNGKr+u5lueMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODY1NTYxZGUtNTZjNS0z
NTVhLTg3NTQtZjc5MTVmMGZkZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAT2
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABdlQyZ8zdt2u/KJ4S0DIYPjh2fdWu1yRuHR/XOm/DRVfiipEUr1
An+AK3AU69YYjTEHSF5yLwd88QfPX6ruSE649Onl3RZ738iBik0YHr+t3BC40MaK
XafEDKI2ecfC2mm1oqLQlcVqnFmO7h5NOY6BIDcZMcy80qVhrjTmmjVT/sJD/Pvu
OrgHJy47Cf2cQVImJzmEV2c5N3GyYYzIklgvdLjUDmKVgE7Ta9lus5SjlGTzcy1I
QRN/bCMan/4YxxEixxxcZgTVa+7HMip5gpQ0q2RGm3Rd+LwhrvCZXorddwrfqYtl
E3YvkTZ9U+XN0BhfDmEXR1b0SLdGBFjkRtw=
-----END CERTIFICATE-----
Generated at Tue Oct 6 21:33:20 2026 by rpki-client