Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85b67a87-b415-3bde-970d-48f558ff0e10.roa
File:                     85b67a87-b415-3bde-970d-48f558ff0e10.roa (raw, json)
Hash identifier:          czrG74tQv83JkleaTFqsOcZRdRSGKhxDqv77otnXIvk=
Subject key identifier:   D0:89:0B:95:EA:B1:C9:FC:B0:2B:F4:52:57:3D:13:26:EE:9F:65:F0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E272A4ADC1D70BE4457426E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85b67a87-b415-3bde-970d-48f558ff0e10.roa
Signing time:             Sat 13 Jun 2026 01:30:15 +0000
ROA not before:           Sat 13 Jun 2026 01:30:15 +0000
ROA not after:            Fri 11 Sep 2026 01:30:15 +0000
asID:                     46426
IP address blocks:        2001:470:5bc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:27:2a:4a:dc:1d:70:be:44:57:42:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 13 01:30:15 2026 GMT
            Not After : Sep 11 01:30:15 2026 GMT
        Subject: CN=2c5639a8-e539-4af6-9c24-68fffdf33d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:30:99:3a:ba:1a:c9:20:b5:49:ac:a7:e8:6c:
                    8e:d4:07:02:d9:a4:84:50:e2:ac:6b:5c:7f:fc:b0:
                    ec:e6:1a:5c:b9:3a:5a:be:35:1c:76:ee:ba:ae:0f:
                    46:a6:59:cc:74:d5:b1:b0:f2:00:27:0e:12:69:20:
                    4a:2b:58:74:3c:d7:b7:cc:49:33:0b:e5:19:ea:87:
                    07:ce:ea:e6:9e:29:61:eb:49:23:d3:41:25:69:aa:
                    ee:74:96:99:e9:11:af:0e:17:b4:90:6d:82:6f:c7:
                    fc:f7:e5:fc:c5:18:2b:0f:92:a0:9b:3c:c5:29:c5:
                    2b:7b:35:d8:c5:48:4a:3e:e1:f3:d8:4b:8a:f5:47:
                    9e:d1:49:a5:c4:42:54:f2:17:a9:12:a3:37:18:98:
                    1b:97:c7:10:0a:42:1b:b1:2b:5d:13:fd:b0:2c:66:
                    e3:bd:16:ee:37:18:55:40:b9:6c:09:54:89:4d:2f:
                    a0:cf:0a:84:b7:f8:2d:83:0a:8c:71:80:61:5a:20:
                    6c:2d:51:16:4a:6f:dd:e8:81:88:dc:8f:84:ec:26:
                    f5:55:45:cf:a3:35:88:4c:b5:21:4c:68:54:50:70:
                    2d:af:8f:5d:ba:bf:21:69:37:de:e4:5a:40:78:39:
                    78:d1:ab:06:0f:ca:b6:70:7b:36:cb:ad:b7:0e:aa:
                    47:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:89:0B:95:EA:B1:C9:FC:B0:2B:F4:52:57:3D:13:26:EE:9F:65:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85b67a87-b415-3bde-970d-48f558ff0e10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:5bc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:52:ee:ee:fd:92:c1:99:fc:19:27:c4:20:69:32:3f:d1:8b:
         6f:a7:42:08:09:99:3f:6e:8e:67:ee:7a:f2:d7:ed:53:2c:3c:
         0b:18:05:d0:04:72:2b:53:84:29:77:a4:f5:c5:70:db:90:33:
         e8:cd:47:1c:39:86:06:b6:af:72:93:6a:b9:5c:f6:ff:27:39:
         10:c5:4f:3a:ae:82:ec:6b:97:a9:80:7c:24:65:93:4d:67:44:
         99:fc:4f:bc:0a:35:8f:16:13:96:d7:34:99:9f:1d:96:eb:d8:
         5c:6a:de:d9:32:03:d1:0a:92:a3:1f:85:7c:2f:91:32:f8:5d:
         95:d6:0c:b1:77:38:8c:66:ae:2b:ea:46:ce:c9:18:5d:68:d8:
         c3:6f:bc:2f:e5:b3:dc:d3:06:be:49:52:ee:81:ef:65:48:01:
         f3:f7:55:96:22:14:2b:a5:35:5d:d3:d6:8d:85:17:b5:90:24:
         eb:c9:66:ce:94:58:50:21:db:f7:ae:e2:98:b9:9b:f6:36:c4:
         21:49:82:db:00:da:0b:b4:c3:ab:06:6b:eb:39:26:63:b5:86:
         d8:05:31:79:cc:20:96:a0:c8:2c:ec:4c:be:69:45:c1:ee:df:
         56:e8:9f:60:47:23:be:72:01:84:8b:c7:75:68:85:6f:32:f8:
         9e:b2:8c:92
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4nKkrcHXC+RFdCbgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDYxMzAxMzAxNVoXDTI2MDkxMTAxMzAxNVowLzEtMCsGA1UEAxMk
MmM1NjM5YTgtZTUzOS00YWY2LTljMjQtNjhmZmZkZjMzZDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzCZOroaySC1Sayn6GyO1AcC2aSEUOKsa1x/
/LDs5hpcuTpavjUcdu66rg9GplnMdNWxsPIAJw4SaSBKK1h0PNe3zEkzC+UZ6ocH
zurmnilh60kj00ElaarudJaZ6RGvDhe0kG2Cb8f89+X8xRgrD5KgmzzFKcUrezXY
xUhKPuHz2EuK9Uee0UmlxEJU8hepEqM3GJgbl8cQCkIbsStdE/2wLGbjvRbuNxhV
QLlsCVSJTS+gzwqEt/gtgwqMcYBhWiBsLVEWSm/d6IGI3I+E7Cb1VUXPozWITLUh
TGhUUHAtr49dur8haTfe5FpAeDl40asGD8q2cHs2y623DqpHdwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNCJC5Xqscn8sCv0Ulc9Eybun2XwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODViNjdhODctYjQxNS0z
YmRlLTk3MGQtNDhmNTU4ZmYwZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAW8
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKJS7u79ksGZ/BknxCBpMj/Ri2+nQggJmT9ujmfuevLX7VMsPAsY
BdAEcitThCl3pPXFcNuQM+jNRxw5hga2r3KTarlc9v8nORDFTzquguxrl6mAfCRl
k01nRJn8T7wKNY8WE5bXNJmfHZbr2Fxq3tkyA9EKkqMfhXwvkTL4XZXWDLF3OIxm
rivqRs7JGF1o2MNvvC/ls9zTBr5JUu6B72VIAfP3VZYiFCulNV3T1o2FF7WQJOvJ
Zs6UWFAh2/eu4pi5m/Y2xCFJgtsA2gu0w6sGa+s5JmO1htgFMXnMIJagyCzsTL5p
RcHu31bon2BHI75yAYSLx3VohW8y+J6yjJI=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:36 2026 by rpki-client