Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92dbddcd-8c0e-3f11-8c62-7569bab34ed6.roa
File:                     92dbddcd-8c0e-3f11-8c62-7569bab34ed6.roa (raw, json)
Hash identifier:          mYaZwPM+V0/1rrnjoejZ9lZkBwD8bz309wBJLsUq810=
Subject key identifier:   FD:D8:9F:A0:FE:C4:9B:80:E9:EE:44:C4:98:AB:90:83:56:7B:3F:BC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F6F098DF079D4E1B6E450
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92dbddcd-8c0e-3f11-8c62-7569bab34ed6.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     16324
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:6f:09:8d:f0:79:d4:e1:b6:e4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=58a7e4cf-7ea0-42de-8276-8f572967ab51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3a:2d:ed:52:4c:65:d6:b9:a2:29:3e:7b:6a:
                    48:a6:74:68:80:a2:23:03:5f:3f:ef:ef:ec:41:b0:
                    a3:07:17:a6:eb:ce:3d:4a:3d:09:43:8a:b2:54:10:
                    b9:53:7a:a8:13:b8:63:03:85:c8:33:44:f5:66:26:
                    e9:d2:66:b9:b7:8a:10:a4:97:45:0e:90:42:fe:d5:
                    1e:86:d3:39:06:dd:e0:dc:97:38:cf:e0:29:2e:c7:
                    64:27:3f:8a:e6:e2:f1:71:97:da:1a:39:42:07:0b:
                    8f:95:24:f3:0a:11:61:7e:bc:f3:08:73:62:b1:cd:
                    ff:b9:a9:46:c1:f7:4a:ea:1a:0c:05:20:77:d0:06:
                    d0:20:3e:d8:33:0a:3f:d6:b3:74:09:77:a9:a0:5f:
                    b3:d2:5d:54:2c:18:64:16:be:df:31:f0:2a:c3:b2:
                    cd:50:34:6f:fd:d8:ba:e3:fc:33:6b:f7:23:11:05:
                    ea:83:ed:5f:c8:64:8c:b8:ce:97:a1:67:f9:55:0a:
                    b7:d0:f5:87:cc:69:72:59:f2:1f:88:cc:a9:69:59:
                    1c:20:14:ac:08:f4:c8:be:44:c7:02:25:e8:ac:67:
                    79:c9:01:31:33:d5:7e:2e:e0:18:3a:24:22:21:e0:
                    54:b0:09:09:4e:06:2f:6a:9c:0e:9e:d8:87:68:25:
                    14:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D8:9F:A0:FE:C4:9B:80:E9:EE:44:C4:98:AB:90:83:56:7B:3F:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/92dbddcd-8c0e-3f11-8c62-7569bab34ed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:0a:69:ef:bc:85:57:72:55:4f:e9:5b:6a:fa:30:01:0a:b5:
         a1:ba:af:77:79:c0:07:e1:5a:9a:06:67:b3:fc:83:f0:ff:5e:
         9b:65:20:45:2e:f4:53:a0:f4:d2:71:d3:cd:c3:be:c4:e6:40:
         5c:a3:e3:c2:6a:6d:7a:77:f1:51:09:64:83:9d:0d:40:0e:59:
         b6:87:33:48:a6:fa:a3:31:45:aa:3d:a7:81:ff:90:f8:91:0d:
         06:ba:fe:33:6d:6f:fa:1c:62:c1:e4:cd:24:ba:6b:80:eb:3c:
         51:68:00:72:c1:c8:56:62:4a:c9:50:01:c4:df:77:c6:15:b2:
         3a:17:1f:9b:d2:3a:5e:77:8b:32:b8:0e:ae:b8:58:bc:b7:15:
         3a:e6:eb:3a:83:a4:66:ac:ed:c6:dd:cf:26:19:56:17:ef:0b:
         2a:dc:40:53:8a:94:07:d7:3f:1e:34:30:80:70:79:58:5c:61:
         ad:31:fb:9d:ff:2c:70:57:e7:46:c3:e4:9b:b2:77:30:42:cb:
         b9:1f:74:49:ed:51:c1:5c:9f:fd:45:87:a8:c7:c8:45:3a:e3:
         3e:91:20:ee:74:96:59:67:be:7e:ae:1c:eb:c7:d3:78:18:07:
         b9:92:ea:f4:1a:1e:14:bc:91:e3:dd:8b:ec:93:f2:ca:9f:59:
         a0:ea:6f:06
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE46L28JjfB51OG25FAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk
NThhN2U0Y2YtN2VhMC00MmRlLTgyNzYtOGY1NzI5NjdhYjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzot7VJMZda5oik+e2pIpnRogKIjA18/7+/s
QbCjBxem6849Sj0JQ4qyVBC5U3qoE7hjA4XIM0T1Zibp0ma5t4oQpJdFDpBC/tUe
htM5Bt3g3Jc4z+ApLsdkJz+K5uLxcZfaGjlCBwuPlSTzChFhfrzzCHNisc3/ualG
wfdK6hoMBSB30AbQID7YMwo/1rN0CXepoF+z0l1ULBhkFr7fMfAqw7LNUDRv/di6
4/wza/cjEQXqg+1fyGSMuM6XoWf5VQq30PWHzGlyWfIfiMypaVkcIBSsCPTIvkTH
AiXorGd5yQExM9V+LuAYOiQiIeBUsAkJTgYvapwOntiHaCUUcwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP3Yn6D+xJuA6e5ExJirkINWez+8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTJkYmRkY2QtOGMwZS0z
ZjExLThjNjItNzU2OWJhYjM0ZWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALsKae+8hVdyVU/pW2r6MAEKtaG6r3d5wAfhWpoGZ7P8g/D/Xptl
IEUu9FOg9NJx083DvsTmQFyj48JqbXp38VEJZIOdDUAOWbaHM0im+qMxRao9p4H/
kPiRDQa6/jNtb/ocYsHkzSS6a4DrPFFoAHLByFZiSslQAcTfd8YVsjoXH5vSOl53
izK4Dq64WLy3FTrm6zqDpGas7cbdzyYZVhfvCyrcQFOKlAfXPx40MIBweVhcYa0x
+53/LHBX50bD5JuydzBCy7kfdEntUcFcn/1Fh6jHyEU64z6RIO50lllnvn6uHOvH
03gYB7mS6vQaHhS8kePdi+yT8sqfWaDqbwY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:02:31 2026 by rpki-client