Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7b27a754-23fb-32d0-813d-dfdeb3d61d93.roa
File:                     7b27a754-23fb-32d0-813d-dfdeb3d61d93.roa (raw, json)
Hash identifier:          SfeebWfAYctWLEdoWSkquy6UC7U+SBp7+a75Vhq28i8=
Subject key identifier:   56:C4:00:65:89:67:C1:CC:21:1C:CB:91:13:48:3A:08:B0:70:B3:DA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EA788D719127CCC867A335D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7b27a754-23fb-32d0-813d-dfdeb3d61d93.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23028
IP address blocks:        2001:470:43f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:d7:19:12:7c:cc:86:7a:33:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f046eae3-fea5-4e1f-97f5-01f71b8998b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:93:e2:51:bb:96:2c:50:83:a8:a2:50:c0:e3:
                    21:a4:60:0c:31:1c:3a:d0:9c:c8:da:3a:5f:13:5c:
                    de:09:e9:bb:f2:35:f9:e8:9b:8a:cf:eb:ae:ba:a2:
                    19:fc:09:9a:23:19:fa:b3:e4:fa:34:a1:a8:21:6a:
                    5e:96:75:9d:9f:be:21:30:03:21:a6:49:80:f9:94:
                    5d:5b:21:93:62:94:66:cc:8f:c4:83:f9:5d:73:b2:
                    e6:5b:6d:21:2a:79:ce:48:5c:3b:7e:a4:4a:b2:f1:
                    fe:9a:60:8c:76:fb:55:e5:52:fa:a6:ef:01:b9:8f:
                    7d:bf:a5:12:53:39:8c:30:fb:64:5c:c7:db:bf:e9:
                    e7:52:cc:10:8b:4f:ca:6c:a6:97:2b:44:fd:e4:93:
                    61:40:58:b6:47:16:08:f3:cf:be:ba:5b:35:86:f6:
                    3c:75:03:b6:6d:a3:25:cc:e6:31:38:ff:34:5e:92:
                    0e:8a:f7:dc:cc:e2:e1:03:8c:3b:29:fd:23:d7:6d:
                    e3:c5:fe:d7:c7:14:54:b4:98:9c:3d:ca:d7:82:23:
                    92:42:83:df:09:e3:8b:e8:fe:b1:70:db:53:18:3e:
                    7b:51:d1:66:9f:c6:9b:0b:dd:ff:e6:de:df:c4:cd:
                    c0:66:fb:4a:78:d7:18:d0:96:62:79:1f:dd:5c:5b:
                    d0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C4:00:65:89:67:C1:CC:21:1C:CB:91:13:48:3A:08:B0:70:B3:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7b27a754-23fb-32d0-813d-dfdeb3d61d93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:43f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:1c:e6:81:35:ee:05:79:09:a5:76:9f:10:4c:54:93:30:ad:
         ca:76:9e:ac:c2:5f:fd:75:ac:00:a9:c8:62:9c:1e:bf:04:9d:
         9f:12:df:fa:46:58:9c:fc:45:5f:5a:4b:31:c5:93:51:7f:8e:
         63:16:c0:f2:50:ae:75:97:36:3a:79:76:59:e2:c4:34:61:27:
         00:1c:bc:90:91:7c:8f:ae:ec:8b:ca:d4:1e:b4:6d:37:68:6f:
         13:30:17:32:3e:7b:a6:1d:be:00:d5:c3:8c:db:81:76:04:f0:
         3f:50:fa:f8:62:ab:b2:3a:ec:0c:51:33:5b:91:cc:16:18:12:
         37:09:84:0c:47:79:19:9f:76:3a:5f:36:34:b1:63:e2:eb:f7:
         5f:45:9b:7c:30:ed:de:da:67:fd:d9:43:21:ed:b5:bd:8a:10:
         17:7e:73:af:c4:39:44:28:af:f3:cc:49:27:d0:ee:71:ce:93:
         d1:b2:51:44:cd:8d:9e:7b:db:23:53:ba:3b:e9:1c:3d:e7:d0:
         ed:36:1b:b5:38:f7:4e:e0:72:c1:81:cb:39:b7:2a:8b:bf:f1:
         bd:06:47:10:35:c2:45:93:98:87:c8:3e:52:cf:15:9f:cd:99:
         95:10:ff:c7:f7:46:8f:6d:93:36:b1:20:dc:b7:40:81:6e:95:
         95:bb:01:d8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6niNcZEnzMhnozXYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZjA0NmVhZTMtZmVhNS00ZTFmLTk3ZjUtMDFmNzFiODk5OGIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupPiUbuWLFCDqKJQwOMhpGAMMRw60JzI2jpf
E1zeCem78jX56JuKz+uuuqIZ/AmaIxn6s+T6NKGoIWpelnWdn74hMAMhpkmA+ZRd
WyGTYpRmzI/Eg/ldc7LmW20hKnnOSFw7fqRKsvH+mmCMdvtV5VL6pu8BuY99v6US
UzmMMPtkXMfbv+nnUswQi0/KbKaXK0T95JNhQFi2RxYI88++uls1hvY8dQO2baMl
zOYxOP80XpIOivfczOLhA4w7Kf0j123jxf7XxxRUtJicPcrXgiOSQoPfCeOL6P6x
cNtTGD57UdFmn8abC93/5t7fxM3AZvtKeNcY0JZieR/dXFvQ7QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFbEAGWJZ8HMIRzLkRNIOgiwcLPaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2IyN2E3NTQtMjNmYi0z
MmQwLTgxM2QtZGZkZWIzZDYxZDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQ/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAL4c5oE17gV5CaV2nxBMVJMwrcp2nqzCX/11rACpyGKcHr8EnZ8S
3/pGWJz8RV9aSzHFk1F/jmMWwPJQrnWXNjp5dlnixDRhJwAcvJCRfI+u7IvK1B60
bTdobxMwFzI+e6YdvgDVw4zbgXYE8D9Q+vhiq7I67AxRM1uRzBYYEjcJhAxHeRmf
djpfNjSxY+Lr919Fm3ww7d7aZ/3ZQyHttb2KEBd+c6/EOUQor/PMSSfQ7nHOk9Gy
UUTNjZ572yNTujvpHD3n0O02G7U4907gcsGByzm3Kou/8b0GRxA1wkWTmIfIPlLP
FZ/NmZUQ/8f3Ro9tkzaxINy3QIFulZW7Adg=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:11:52 2026 by rpki-client