Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de78bce4-9a02-3c8f-a1d7-f51c91a26e50.roa
File:                     de78bce4-9a02-3c8f-a1d7-f51c91a26e50.roa (raw, json)
Hash identifier:          dBYwSpOcgXNIsd5Yp22B1vv2N6SXa3LemFCgtITdgws=
Subject key identifier:   AC:FA:3C:ED:96:A7:65:8A:4E:91:58:9B:7E:3D:A3:0F:70:BE:8D:EE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EA79752C6634AC3FCE8E4E700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de78bce4-9a02-3c8f-a1d7-f51c91a26e50.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     211283
IP address blocks:        2001:470:57c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:52:c6:63:4a:c3:fc:e8:e4:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=55460a1f-5f5b-4054-a2eb-dd7ae1bf33cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ec:82:4e:11:88:8f:d4:1c:81:fb:d2:a9:19:
                    9e:cb:90:5f:d5:20:bb:2b:92:c7:36:1e:0f:b8:94:
                    7c:92:52:74:40:b5:32:ec:c3:40:bd:d2:d9:91:5c:
                    99:a7:1a:8e:a4:e9:11:df:01:57:b7:c8:d7:1e:11:
                    97:c5:61:0b:18:cb:0e:a2:f5:4a:28:55:fd:7a:de:
                    23:b9:ca:e7:81:51:0d:2a:35:9e:4f:24:5e:5e:a3:
                    f9:20:02:d3:c3:19:89:a0:83:bc:46:60:37:53:61:
                    67:b8:86:2d:e3:c9:e8:24:85:fe:5b:de:ec:f1:28:
                    a8:bd:55:f2:c0:15:fd:53:e1:19:06:71:2f:24:f7:
                    85:1d:18:09:55:bb:9f:7d:d9:31:62:dc:d1:c8:76:
                    87:23:6b:a3:15:ca:29:9e:20:72:02:8a:cf:e4:06:
                    4a:c6:f8:c1:2f:f4:19:69:49:3e:52:35:e5:2b:66:
                    d5:11:e4:4c:f3:71:a2:e0:f9:d7:1b:2d:cb:1c:35:
                    72:12:ed:e8:db:69:b8:bb:ed:29:8f:77:9e:28:03:
                    b4:2c:e6:ed:12:5f:92:34:01:5f:2c:6a:8b:03:8e:
                    40:92:2b:8b:6f:4f:fb:9f:5f:a0:79:2b:3f:21:4b:
                    3a:ba:76:b2:0c:21:75:c1:11:c3:54:9b:3c:5e:af:
                    2d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FA:3C:ED:96:A7:65:8A:4E:91:58:9B:7E:3D:A3:0F:70:BE:8D:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de78bce4-9a02-3c8f-a1d7-f51c91a26e50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:57c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:2c:19:50:62:73:68:6b:b0:73:98:83:af:03:e4:de:18:6a:
         c2:a8:55:cc:e5:27:56:2e:11:e1:96:0c:ae:90:b5:84:20:95:
         94:14:d8:13:20:d4:67:0e:41:61:61:07:4c:86:56:1c:e5:73:
         3e:53:70:fe:4e:05:3f:33:5a:8f:0e:5e:a6:c6:33:6a:b3:fd:
         13:7a:f5:a7:48:eb:6b:24:af:93:04:aa:36:56:98:ef:e2:c2:
         83:b5:b3:8c:ea:9e:55:ed:09:af:52:d4:76:b4:41:a1:dc:25:
         e2:c3:21:78:97:78:8e:b7:2f:87:8f:2e:af:9f:84:f5:50:92:
         89:43:63:82:32:27:9d:b7:82:f1:ff:72:37:d8:77:39:31:45:
         47:fe:4e:50:93:b8:d0:ef:bf:0b:03:36:cb:7e:94:4b:77:07:
         54:16:ef:7e:04:58:7d:08:db:ef:5d:00:83:db:72:a2:55:56:
         50:ec:3b:93:2c:d1:8c:9a:21:49:d0:57:e5:63:b4:3c:c9:a6:
         49:9a:ae:9f:3f:e6:78:ba:57:52:a5:3d:80:c0:41:f1:a8:5f:
         4c:cd:19:17:9c:34:9b:3f:27:ac:20:35:28:04:9c:7b:47:30:
         8f:28:df:8c:e6:f7:81:18:93:20:1e:82:5f:6c:f2:d7:77:53:
         e8:a9:c0:09
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nl1LGY0rD/Ojk5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NTU0NjBhMWYtNWY1Yi00MDU0LWEyZWItZGQ3YWUxYmYzM2NiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOyCThGIj9QcgfvSqRmey5Bf1SC7K5LHNh4P
uJR8klJ0QLUy7MNAvdLZkVyZpxqOpOkR3wFXt8jXHhGXxWELGMsOovVKKFX9et4j
ucrngVENKjWeTyReXqP5IALTwxmJoIO8RmA3U2FnuIYt48noJIX+W97s8SiovVXy
wBX9U+EZBnEvJPeFHRgJVbuffdkxYtzRyHaHI2ujFcopniByAorP5AZKxvjBL/QZ
aUk+UjXlK2bVEeRM83Gi4PnXGy3LHDVyEu3o22m4u+0pj3eeKAO0LObtEl+SNAFf
LGqLA45AkiuLb0/7n1+geSs/IUs6unayDCF1wRHDVJs8Xq8t4wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKz6PO2Wp2WKTpFYm349ow9wvo3uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGU3OGJjZTQtOWEwMi0z
YzhmLWExZDctZjUxYzkxYTI2ZTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAV8
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADgsGVBic2hrsHOYg68D5N4YasKoVczlJ1YuEeGWDK6QtYQglZQU
2BMg1GcOQWFhB0yGVhzlcz5TcP5OBT8zWo8OXqbGM2qz/RN69adI62skr5MEqjZW
mO/iwoO1s4zqnlXtCa9S1Ha0QaHcJeLDIXiXeI63L4ePLq+fhPVQkolDY4IyJ523
gvH/cjfYdzkxRUf+TlCTuNDvvwsDNst+lEt3B1QW734EWH0I2+9dAIPbcqJVVlDs
O5Ms0YyaIUnQV+VjtDzJpkmarp8/5ni6V1KlPYDAQfGoX0zNGRecNJs/J6wgNSgE
nHtHMI8o34zm94EYkyAegl9s8td3U+ipwAk=
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:31:33 2026 by rpki-client