Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/034f7432-b27a-3ff4-a74e-a8537f8751fd.roa
File:                     034f7432-b27a-3ff4-a74e-a8537f8751fd.roa (raw, json)
Hash identifier:          4Rrgp+aNed5zCTo54x/na2+1G3JsjeX3+PHmfan9nhQ=
Subject key identifier:   70:E2:C5:D3:F9:1D:E1:66:42:F5:30:42:AD:6F:A8:64:30:6C:B6:45
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F497308EEAE732C2395B2F400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/034f7432-b27a-3ff4-a74e-a8537f8751fd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13781
IP address blocks:        2001:470:57f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:08:ee:ae:73:2c:23:95:b2:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=56963e75-02f1-45af-aa6c-a0f476187813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:25:72:4b:c0:17:be:69:9f:40:33:43:4d:ef:
                    29:4f:3e:66:2b:fe:ac:70:0d:32:8a:71:28:aa:22:
                    b6:80:f1:08:6a:66:7d:fd:5f:6f:40:3c:11:30:bd:
                    24:d0:a5:be:a4:e9:6d:22:ae:c2:d4:58:1b:01:3e:
                    9b:fc:79:a9:e7:74:d6:de:73:c3:ed:ef:2a:65:91:
                    4b:72:b1:60:9a:0f:13:2c:f3:b6:ce:17:77:f0:9d:
                    be:2f:2e:18:53:66:9e:7a:45:55:f5:54:fd:a4:ad:
                    58:3c:3c:99:b0:a1:20:58:ca:ad:fe:6f:d8:cb:bc:
                    14:79:7c:7e:85:6b:41:44:ca:de:ec:84:5d:55:5d:
                    5b:2f:e3:3c:4c:17:d1:28:00:a5:25:32:49:9f:94:
                    ed:a9:ca:ca:44:f0:07:cb:86:ae:0c:89:7a:5e:2d:
                    79:5f:6d:b7:a7:62:74:a3:eb:e2:81:0c:53:3a:3f:
                    03:28:7c:18:7e:b3:a4:15:21:4f:62:36:57:59:e9:
                    b2:85:8a:62:62:1e:81:a5:88:94:3b:3c:c7:60:82:
                    2b:71:39:51:13:ab:01:2f:6e:1d:97:3c:e6:83:14:
                    ff:80:54:af:d4:3c:c0:6b:e8:6f:00:a4:e6:e3:bc:
                    58:19:51:28:f3:48:d9:f4:dd:a9:00:bd:79:c1:ef:
                    87:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E2:C5:D3:F9:1D:E1:66:42:F5:30:42:AD:6F:A8:64:30:6C:B6:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/034f7432-b27a-3ff4-a74e-a8537f8751fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:57f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:fb:f0:5a:b7:03:8b:90:c3:37:1e:10:66:5e:bf:d5:b2:c9:
         88:09:91:f1:20:6f:d6:cd:66:d4:e2:b7:c5:5c:7a:0c:7b:11:
         0d:e2:f5:01:c1:b0:74:57:0f:6a:85:f1:2d:b8:d3:c1:79:2c:
         95:2d:19:74:db:61:7c:b2:29:ba:6d:65:72:2d:c2:29:9a:ad:
         81:c1:f3:0d:25:45:dd:17:e9:5e:02:f5:d4:e8:f3:40:98:3b:
         31:39:c7:4c:a1:49:99:14:23:72:97:5a:c3:b2:52:99:c3:a9:
         bf:d0:5f:b8:8c:81:b6:a8:b7:fa:e9:41:e7:20:69:c4:c9:3e:
         ca:12:f0:58:88:68:35:f4:b4:bd:42:85:c9:a9:6f:80:5e:09:
         1d:f7:69:2d:b9:c7:ed:6a:e3:9d:7f:46:35:fa:cf:c7:32:db:
         48:e7:11:58:9b:28:07:6b:45:b9:85:52:10:e3:30:24:3b:cd:
         44:62:1b:7d:7b:e0:a3:33:a6:bd:c2:80:90:6e:ec:51:fa:2d:
         52:bb:36:dd:f8:f3:0b:9f:95:ff:3a:48:5d:ec:6a:6c:78:39:
         06:83:75:4f:25:2b:5a:f1:cf:82:79:04:6f:95:44:51:5c:67:
         ba:3e:44:58:6a:59:ac:18:ed:65:3d:98:54:07:75:e1:95:fb:
         4b:99:48:78
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JcwjurnMsI5Wy9AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTY5NjNlNzUtMDJmMS00NWFmLWFhNmMtYTBmNDc2MTg3ODEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyVyS8AXvmmfQDNDTe8pTz5mK/6scA0yinEo
qiK2gPEIamZ9/V9vQDwRML0k0KW+pOltIq7C1FgbAT6b/Hmp53TW3nPD7e8qZZFL
crFgmg8TLPO2zhd38J2+Ly4YU2aeekVV9VT9pK1YPDyZsKEgWMqt/m/Yy7wUeXx+
hWtBRMre7IRdVV1bL+M8TBfRKAClJTJJn5TtqcrKRPAHy4auDIl6Xi15X223p2J0
o+vigQxTOj8DKHwYfrOkFSFPYjZXWemyhYpiYh6BpYiUOzzHYIIrcTlRE6sBL24d
lzzmgxT/gFSv1DzAa+hvAKTm47xYGVEo80jZ9N2pAL15we+H3QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHDixdP5HeFmQvUwQq1vqGQwbLZFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDM0Zjc0MzItYjI3YS0z
ZmY0LWE3NGUtYTg1MzdmODc1MWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAV/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJL78Fq3A4uQwzceEGZev9WyyYgJkfEgb9bNZtTit8Vcegx7EQ3i
9QHBsHRXD2qF8S2408F5LJUtGXTbYXyyKbptZXItwimarYHB8w0lRd0X6V4C9dTo
80CYOzE5x0yhSZkUI3KXWsOyUpnDqb/QX7iMgbaot/rpQecgacTJPsoS8FiIaDX0
tL1Chcmpb4BeCR33aS25x+1q451/RjX6z8cy20jnEVibKAdrRbmFUhDjMCQ7zURi
G3174KMzpr3CgJBu7FH6LVK7Nt348wuflf86SF3samx4OQaDdU8lK1rxz4J5BG+V
RFFcZ7o+RFhqWawY7WU9mFQHdeGV+0uZSHg=
-----END CERTIFICATE-----
Generated at Sat Sep 26 11:39:16 2026 by rpki-client