Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7b19aa5-115f-3c00-a6f5-84529a8f79bf.roa
File:                     a7b19aa5-115f-3c00-a6f5-84529a8f79bf.roa (raw, json)
Hash identifier:          oCDeQ5Zyypq+FlmOrbykXWAxX++QPEjRu7TZAvim30k=
Subject key identifier:   96:A1:56:72:B1:3F:AD:5E:54:4C:DE:C9:9D:F2:C5:E5:4F:3E:2D:27
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B6E92024571CEE0E91856FB00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7b19aa5-115f-3c00-a6f5-84529a8f79bf.roa
Signing time:             Mon 06 Oct 2025 13:00:41 +0000
ROA not before:           Mon 06 Oct 2025 13:00:41 +0000
ROA not after:            Sun 04 Jan 2026 14:00:41 +0000
asID:                     26857
IP address blocks:        2001:470:490::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:92:02:45:71:ce:e0:e9:18:56:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct  6 13:00:41 2025 GMT
            Not After : Jan  4 14:00:41 2026 GMT
        Subject: CN=758867e4-6c5a-44c5-8ef6-19b4ffe1b8b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8e:a1:8b:fe:6b:ff:bd:ad:ee:94:10:ee:e9:
                    95:bc:05:d0:58:32:ba:46:53:55:07:c8:e0:92:09:
                    05:3b:bb:be:42:20:ff:a5:24:cf:ef:0b:ba:46:bf:
                    5e:2b:63:50:48:68:e2:61:d8:e3:47:89:fc:ee:7e:
                    e6:e4:66:26:88:9f:3c:48:b8:21:06:42:b0:1e:f4:
                    ce:5d:c4:25:d7:e6:8d:a0:82:6c:b5:7f:08:f2:9a:
                    df:45:14:c2:ba:29:bb:79:83:d8:86:ed:37:a7:b2:
                    33:86:10:6c:9f:d9:86:50:c0:a5:87:e2:d8:35:e8:
                    45:1d:82:18:1b:81:f6:4a:20:24:16:82:3c:da:1d:
                    48:5f:59:b4:73:fa:e0:41:14:77:03:9e:9d:9b:1f:
                    e6:21:19:3a:c5:c5:a2:b8:8d:80:5b:39:75:eb:a9:
                    f1:21:b3:f2:e2:3c:a0:ba:59:b5:14:08:3b:f4:3b:
                    ca:0e:e8:29:83:2c:a8:08:bc:38:6c:b9:ec:35:f1:
                    ff:d6:06:f1:f7:a3:b9:2d:77:1e:da:2d:c8:32:a3:
                    6b:8c:1c:29:be:0e:c6:5f:38:4b:e8:3d:e8:7e:e8:
                    61:ca:82:f9:6b:03:54:a2:3d:a0:c2:13:95:a3:8e:
                    b0:42:ee:a4:6d:98:43:d5:ad:37:1a:4e:2d:40:ef:
                    43:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A1:56:72:B1:3F:AD:5E:54:4C:DE:C9:9D:F2:C5:E5:4F:3E:2D:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7b19aa5-115f-3c00-a6f5-84529a8f79bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:490::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:5a:38:4c:b3:8f:c3:f9:fa:b4:d3:10:8d:1f:31:dc:86:32:
         3a:41:36:17:67:7c:6a:b3:61:fd:65:99:06:ae:e2:70:d7:43:
         dd:51:17:81:22:d7:3e:b9:43:c2:d9:84:57:d7:99:c1:38:86:
         a9:d1:02:84:ff:60:d4:ce:fc:91:1b:00:be:8b:e3:23:e9:6b:
         28:a9:d2:74:6c:25:36:3a:a0:f1:4e:a2:29:c1:82:cb:5f:46:
         0a:ea:b6:f9:88:92:a3:46:98:73:90:04:c1:94:36:b0:56:e4:
         b7:80:36:5f:d6:f6:49:6f:5a:b8:2b:a1:bb:a0:b0:82:91:71:
         2c:31:bf:f1:ed:07:e1:4f:04:19:ba:71:b2:3d:6c:c0:70:45:
         0f:df:97:57:09:35:11:36:63:a9:31:54:45:a3:6b:24:06:e5:
         f1:48:a8:67:63:22:f3:83:d4:a2:d6:59:c7:b8:0a:80:1a:1e:
         69:76:20:7b:16:0f:44:33:af:c0:c0:7e:cd:f5:a2:08:0e:89:
         9e:68:d6:23:7c:8f:a3:15:ce:27:38:93:d7:1d:33:ec:e2:0f:
         bf:c1:fa:28:59:16:14:2b:29:93:5a:92:d3:c7:a6:0a:35:14:
         d1:d4:90:01:5e:ca:5d:4f:a0:f1:5e:44:46:bb:9e:91:ba:d3:
         82:cd:69:7c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtukgJFcc7g6RhW+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk
NzU4ODY3ZTQtNmM1YS00NGM1LThlZjYtMTliNGZmZTFiOGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm46hi/5r/72t7pQQ7umVvAXQWDK6RlNVB8jg
kgkFO7u+QiD/pSTP7wu6Rr9eK2NQSGjiYdjjR4n87n7m5GYmiJ88SLghBkKwHvTO
XcQl1+aNoIJstX8I8prfRRTCuim7eYPYhu03p7IzhhBsn9mGUMClh+LYNehFHYIY
G4H2SiAkFoI82h1IX1m0c/rgQRR3A56dmx/mIRk6xcWiuI2AWzl166nxIbPy4jyg
ulm1FAg79DvKDugpgyyoCLw4bLnsNfH/1gbx96O5LXce2i3IMqNrjBwpvg7GXzhL
6D3ofuhhyoL5awNUoj2gwhOVo46wQu6kbZhD1a03Gk4tQO9DtwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJahVnKxP61eVEzeyZ3yxeVPPi0nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTdiMTlhYTUtMTE1Zi0z
YzAwLWE2ZjUtODQ1MjlhOGY3OWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcASQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABBaOEyzj8P5+rTTEI0fMdyGMjpBNhdnfGqzYf1lmQau4nDXQ91R
F4Ei1z65Q8LZhFfXmcE4hqnRAoT/YNTO/JEbAL6L4yPpayip0nRsJTY6oPFOoinB
gstfRgrqtvmIkqNGmHOQBMGUNrBW5LeANl/W9klvWrgrobugsIKRcSwxv/HtB+FP
BBm6cbI9bMBwRQ/fl1cJNRE2Y6kxVEWjayQG5fFIqGdjIvOD1KLWWce4CoAaHml2
IHsWD0Qzr8DAfs31oggOiZ5o1iN8j6MVzic4k9cdM+ziD7/B+ihZFhQrKZNaktPH
pgo1FNHUkAFeyl1PoPFeREa7npG604LNaXw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:53:20 2025 by rpki-client