Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee8cfd4f-1f31-3ed3-b6b4-5b161d251555.roa
File:                     ee8cfd4f-1f31-3ed3-b6b4-5b161d251555.roa (raw, json)
Hash identifier:          kBHO1vgIOBN0ZmmK03ijZ4IHNjPYn4d4Q7GInY6T73U=
Subject key identifier:   71:59:E1:6B:77:44:5C:10:8B:15:7D:B5:7C:CA:BA:69:C6:08:E3:9B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC92287F3BB83C6AC73865A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee8cfd4f-1f31-3ed3-b6b4-5b161d251555.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     48422
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:28:7f:3b:b8:3c:6a:c7:38:65:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=7fd1e0e0-082f-4f1d-b133-f73d5d11ef66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:e7:cd:8e:02:a5:6a:27:a3:fd:4e:ee:c8:
                    5f:02:00:bb:c5:89:fa:eb:52:a1:cd:34:88:b5:19:
                    f4:76:bc:60:da:50:1b:07:72:da:02:e9:bf:ea:b5:
                    24:0d:ed:22:b5:f0:90:f9:7c:3f:b6:a9:8a:07:54:
                    dc:63:0d:43:09:8b:af:59:55:4f:c1:b1:cc:5e:4e:
                    83:f0:d0:18:db:13:58:f5:42:16:5f:1e:f4:30:21:
                    e7:be:f3:c0:b4:27:3e:1f:11:c2:f6:e1:c2:55:17:
                    33:02:ed:a8:74:5e:48:40:d5:cf:57:48:78:15:19:
                    1d:b1:2e:45:64:fc:38:2a:c7:a4:6a:91:e1:7d:fd:
                    b2:26:79:3d:a0:e1:ce:2c:5b:55:ea:03:54:34:50:
                    0d:04:28:ec:1a:a7:ec:44:54:9a:c1:32:f4:63:48:
                    47:ad:b7:ce:6e:32:7e:5b:af:70:6a:d1:d1:9e:6c:
                    59:e1:89:7f:4b:c1:13:6a:79:8c:65:88:06:55:0b:
                    d6:22:98:6d:b4:06:ea:37:e1:70:59:33:a6:7e:51:
                    38:4b:e5:c2:e6:99:49:d2:60:28:ac:6d:0c:cf:3b:
                    fe:95:51:6a:57:56:81:7c:d5:15:76:0e:ce:04:a4:
                    c8:bd:07:ee:fa:87:48:4c:c5:ea:80:23:db:26:ed:
                    1f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:59:E1:6B:77:44:5C:10:8B:15:7D:B5:7C:CA:BA:69:C6:08:E3:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee8cfd4f-1f31-3ed3-b6b4-5b161d251555.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:e5:93:a1:45:e6:82:ec:73:c1:89:9e:4f:b7:c6:47:18:47:
         94:3d:31:3b:5e:24:ef:3c:6b:17:73:59:a5:01:bd:de:9e:be:
         e6:dd:f7:8e:d3:3e:8f:50:33:65:86:5c:a9:01:49:99:8b:e5:
         8f:b6:12:f9:ad:ac:d5:39:af:dd:2b:45:60:2e:05:45:9d:46:
         e8:7c:43:9c:46:72:d3:f7:5a:e1:42:f8:7f:a7:28:89:13:f6:
         dd:a3:4f:5e:52:1e:3a:98:ae:16:b5:05:db:3e:80:17:a3:37:
         95:c9:bd:7d:e1:c8:02:e2:3a:51:fe:f8:28:16:44:54:32:a3:
         bd:02:d1:a9:4d:0b:41:10:aa:28:b4:f6:fa:e9:13:79:4f:48:
         ce:86:1d:93:65:32:d9:87:e3:b4:9d:a5:5f:04:2e:52:f1:2c:
         e3:39:69:59:64:07:22:be:a5:36:51:89:dc:b5:17:da:9e:1b:
         c5:37:ef:1d:57:65:fa:81:e6:04:6f:81:2e:0d:76:94:a5:38:
         52:65:cb:1c:e2:dc:3e:11:9e:c0:8f:09:48:65:a4:9f:bf:ef:
         d7:73:89:23:4f:8a:35:8e:91:29:b3:f8:0c:69:36:72:e7:3d:
         c0:6e:a2:95:e9:f1:03:e2:23:e5:dc:1a:79:d8:40:ff:fd:f1:
         01:1c:92:e6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ckih/O7g8asc4ZaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
N2ZkMWUwZTAtMDgyZi00ZjFkLWIxMzMtZjczZDVkMTFlZjY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo/nzY4CpWono/1O7shfAgC7xYn661KhzTSI
tRn0drxg2lAbB3LaAum/6rUkDe0itfCQ+Xw/tqmKB1TcYw1DCYuvWVVPwbHMXk6D
8NAY2xNY9UIWXx70MCHnvvPAtCc+HxHC9uHCVRczAu2odF5IQNXPV0h4FRkdsS5F
ZPw4KsekapHhff2yJnk9oOHOLFtV6gNUNFANBCjsGqfsRFSawTL0Y0hHrbfObjJ+
W69watHRnmxZ4Yl/S8ETanmMZYgGVQvWIphttAbqN+FwWTOmflE4S+XC5plJ0mAo
rG0Mzzv+lVFqV1aBfNUVdg7OBKTIvQfu+odITMXqgCPbJu0f1QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHFZ4Wt3RFwQixV9tXzKumnGCOObMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWU4Y2ZkNGYtMWYzMS0z
ZWQzLWI2YjQtNWIxNjFkMjUxNTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABXlk6FF5oLsc8GJnk+3xkcYR5Q9MTteJO88axdzWaUBvd6evubd
947TPo9QM2WGXKkBSZmL5Y+2EvmtrNU5r90rRWAuBUWdRuh8Q5xGctP3WuFC+H+n
KIkT9t2jT15SHjqYrha1Bds+gBejN5XJvX3hyALiOlH++CgWRFQyo70C0alNC0EQ
qii09vrpE3lPSM6GHZNlMtmH47SdpV8ELlLxLOM5aVlkByK+pTZRidy1F9qeG8U3
7x1XZfqB5gRvgS4NdpSlOFJlyxzi3D4RnsCPCUhlpJ+/79dziSNPijWOkSmz+Axp
NnLnPcBuopXp8QPiI+XcGnnYQP/98QEckuY=
-----END CERTIFICATE-----
Generated at Sat Sep 26 13:29:04 2026 by rpki-client