Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20418ba-2263-31a3-a778-0086187b3cd6.roa
File:                     d20418ba-2263-31a3-a778-0086187b3cd6.roa (raw, json)
Hash identifier:          Xp9keNehgDHJ2KgXvMGqpEh7lNe1C4ZQ+BMWyeQitI4=
Subject key identifier:   9E:31:6E:C6:90:57:5A:8A:0F:50:53:17:7F:05:8D:10:C9:F7:C3:CC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F51D2A6A5C2E2E3AC136617C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20418ba-2263-31a3-a778-0086187b3cd6.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     58309
IP address blocks:        2001:470:542::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:a6:a5:c2:e2:e3:ac:13:66:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=3c247774-542c-4f17-ac9a-3b12bbea245b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:85:bb:19:8e:b0:05:01:5e:0d:36:98:5a:84:
                    f2:47:57:8e:ea:21:7e:1f:63:8a:c1:94:15:2a:27:
                    0b:86:03:8a:2f:24:64:b0:e8:54:53:33:67:33:37:
                    23:bf:7f:57:de:6c:a2:53:3e:09:8f:eb:0c:2a:59:
                    74:19:1b:0a:34:fd:47:ec:6a:9a:35:c9:15:81:21:
                    a6:6a:cc:f6:34:e7:2d:fb:8e:14:82:72:a8:bd:dc:
                    82:e6:bd:04:43:81:fd:a3:71:5b:01:d0:7b:02:29:
                    d3:22:89:c5:5b:75:9a:4d:86:cb:68:0e:ac:37:ff:
                    fa:c6:1a:2a:57:54:9c:3f:d1:6c:ec:58:18:3b:dc:
                    03:03:85:b3:24:38:ba:e6:92:1a:58:1a:af:a8:61:
                    6a:8a:43:d7:b7:18:b9:64:2c:ff:ba:1a:37:47:15:
                    53:c9:38:f1:f6:73:86:30:f8:3f:67:39:6c:89:25:
                    d8:a9:29:e5:12:25:a6:b9:6b:08:e4:c8:47:be:a3:
                    04:a1:72:2d:27:fd:d8:55:99:4a:9c:2e:8c:9c:e2:
                    02:a6:04:24:a5:80:3f:f6:c0:cb:c6:13:2b:02:9b:
                    1d:e5:ae:e6:ca:4b:45:aa:db:66:be:4a:35:fc:01:
                    0c:c5:7c:86:78:ca:47:a7:d7:53:f4:bb:04:c3:b4:
                    29:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:31:6E:C6:90:57:5A:8A:0F:50:53:17:7F:05:8D:10:C9:F7:C3:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20418ba-2263-31a3-a778-0086187b3cd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:542::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:6b:98:8e:aa:f1:cf:d4:56:12:7c:03:49:5e:f2:f0:9a:e7:
         23:19:6d:98:24:b4:0c:9f:83:15:fe:04:ce:56:2b:28:d8:d8:
         48:96:19:d5:d6:6e:b7:28:94:af:c8:5f:b4:25:27:16:2f:25:
         d5:25:10:d1:a8:a0:95:cc:6c:0d:88:4f:f6:1a:b7:aa:76:01:
         be:63:6b:e4:fe:21:b0:26:55:9e:3c:da:ce:a9:11:f3:65:b1:
         97:a0:89:a9:68:8a:be:20:37:ef:7a:f1:d3:e2:4f:f4:72:55:
         74:19:b3:e8:2e:7f:7b:b3:c0:51:c4:ba:96:17:12:2a:00:e3:
         6b:07:3e:2c:8b:c7:e4:aa:3d:e1:90:27:be:16:ee:24:fb:a2:
         4c:93:cd:f1:80:6e:9d:9b:75:85:7d:8b:f4:fa:38:06:8e:65:
         41:3c:db:03:8a:76:10:07:f6:42:79:fc:ad:b1:fe:13:b5:c8:
         4c:e3:83:b0:fb:45:5e:c8:31:c4:92:d7:ad:69:de:6e:28:19:
         78:e1:62:0f:7b:08:56:b2:a4:85:4e:72:91:e8:77:68:6f:63:
         5b:b8:de:dc:d4:dd:51:17:66:20:29:67:6b:49:f7:15:ae:57:
         b5:f2:f4:eb:ce:33:c8:8b:8d:8f:d1:1d:41:d6:43:3e:af:c6:
         24:fd:72:2f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9R0qalwuLjrBNmF8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk
M2MyNDc3NzQtNTQyYy00ZjE3LWFjOWEtM2IxMmJiZWEyNDViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIW7GY6wBQFeDTaYWoTyR1eO6iF+H2OKwZQV
KicLhgOKLyRksOhUUzNnMzcjv39X3myiUz4Jj+sMKll0GRsKNP1H7GqaNckVgSGm
asz2NOct+44UgnKovdyC5r0EQ4H9o3FbAdB7AinTIonFW3WaTYbLaA6sN//6xhoq
V1ScP9Fs7FgYO9wDA4WzJDi65pIaWBqvqGFqikPXtxi5ZCz/uho3RxVTyTjx9nOG
MPg/ZzlsiSXYqSnlEiWmuWsI5MhHvqMEoXItJ/3YVZlKnC6MnOICpgQkpYA/9sDL
xhMrApsd5a7myktFqttmvko1/AEMxXyGeMpHp9dT9LsEw7QptQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ4xbsaQV1qKD1BTF38FjRDJ98PMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDIwNDE4YmEtMjI2My0z
MWEzLWE3NzgtMDA4NjE4N2IzY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAVC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGZrmI6q8c/UVhJ8A0le8vCa5yMZbZgktAyfgxX+BM5WKyjY2EiW
GdXWbrcolK/IX7QlJxYvJdUlENGooJXMbA2IT/Yat6p2Ab5ja+T+IbAmVZ482s6p
EfNlsZegialoir4gN+968dPiT/RyVXQZs+guf3uzwFHEupYXEioA42sHPiyLx+Sq
PeGQJ74W7iT7okyTzfGAbp2bdYV9i/T6OAaOZUE82wOKdhAH9kJ5/K2x/hO1yEzj
g7D7RV7IMcSS161p3m4oGXjhYg97CFaypIVOcpHod2hvY1u43tzU3VEXZiApZ2tJ
9xWuV7Xy9OvOM8iLjY/RHUHWQz6vxiT9ci8=
-----END CERTIFICATE-----
Generated at Sun Oct 11 11:29:46 2026 by rpki-client