Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/d770de6c-e795-3458-b3fa-76797a8fc14c.roa
File:                     d770de6c-e795-3458-b3fa-76797a8fc14c.roa (raw, json)
Hash identifier:          Cr1rWNDtaGVf0nIOmmUd6nLHcvYbEtEjbqXJVT4B+Ik=
Subject key identifier:   81:D3:07:DD:CD:4F:29:B5:FD:07:22:D3:3A:B2:9A:16:38:27:06:95
Certificate issuer:       /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
Certificate serial:       010D0C9F4328584DD625AE701E30D0D3F732A080
Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/d770de6c-e795-3458-b3fa-76797a8fc14c.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     229
IP address blocks:        2001:48a8:68f7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:ae:70:1e:30:d0:d3:f7:32:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=3f9df9a7-3b77-4343-a14e-703a1d72999f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8c:a4:2d:01:4e:9a:fb:ce:96:a4:23:94:28:
                    65:7b:f7:7c:fe:e5:06:f6:f2:fd:f0:a0:d8:8e:c3:
                    be:7e:ad:88:ef:7f:b3:a9:0a:74:79:31:9c:b7:01:
                    bf:c3:93:52:ea:c3:aa:00:7b:c3:8c:c3:0d:cc:d2:
                    71:78:2b:d3:22:05:80:42:3e:5d:3a:4f:a9:fd:57:
                    18:e0:66:92:60:a0:c8:77:b3:78:27:21:65:ce:a6:
                    6e:7b:4d:f8:8a:64:aa:27:7c:ac:00:df:80:4e:57:
                    96:fa:fe:55:12:de:f1:0b:5a:1f:73:b6:b9:46:cd:
                    c0:28:62:96:19:7c:ca:60:39:86:02:04:fc:01:3a:
                    fd:cc:ec:d2:0c:6c:86:9a:f6:23:d6:6c:a9:03:fe:
                    ac:26:43:3c:78:78:37:49:0d:ba:be:58:ec:2a:8b:
                    b7:37:e6:8b:61:12:3e:5b:70:4a:85:9a:f9:f2:4e:
                    26:33:7c:94:b3:17:4f:a6:47:44:f7:89:d1:53:cc:
                    e3:2d:d4:82:8a:2b:a2:bc:a6:85:26:2a:1d:a5:c5:
                    e9:96:30:30:28:79:51:2f:74:9f:e7:bc:95:f8:f9:
                    69:8b:16:3e:96:36:9b:56:37:fa:3a:9d:fb:4d:87:
                    54:c9:46:69:9c:ff:ee:fe:67:b5:17:a1:25:9e:4c:
                    44:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D3:07:DD:CD:4F:29:B5:FD:07:22:D3:3A:B2:9A:16:38:27:06:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/d770de6c-e795-3458-b3fa-76797a8fc14c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl

            X509v3 Authority Key Identifier:
                keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:48a8:68f7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:eb:02:d1:f7:51:86:66:26:92:5e:57:f4:04:39:73:02:cf:
         42:5f:d3:0e:81:88:b8:fb:48:58:59:c1:a1:e6:f1:40:bd:77:
         6e:73:a7:32:5a:f0:b2:bf:14:5d:96:db:4f:36:05:c0:d9:18:
         be:74:96:bd:3b:e6:c5:35:f2:99:bb:7d:a5:d1:29:19:86:f0:
         f3:6c:89:a6:76:31:5d:d6:fb:cb:be:f1:08:8a:5b:4f:bf:eb:
         90:6b:a0:f3:af:09:7e:fa:d7:47:45:57:48:40:26:8f:ea:aa:
         3c:5e:81:22:4a:15:84:5e:8c:43:15:6d:5b:a2:fd:d9:3f:81:
         b5:a4:d1:8c:00:3e:e4:c9:0b:5e:30:d8:ee:aa:2c:54:0d:ea:
         3a:92:60:56:17:83:1d:0e:35:14:36:2a:13:5a:d6:71:22:75:
         bb:cc:89:5c:bc:5a:84:37:81:ed:2d:0d:f9:f4:d4:09:69:06:
         cc:92:18:8a:02:c7:8c:74:e5:70:78:55:35:0c:bb:69:1b:dd:
         46:f0:11:ac:39:82:11:6f:5c:37:d1:3e:2c:aa:1f:da:58:09:
         46:f1:35:68:2b:ab:97:01:92:34:40:92:8c:05:e1:36:c4:5e:
         88:31:a1:9c:34:32:e7:c7:f0:af:9d:bb:01:7d:3b:71:6e:80:
         c1:b6:ca:79
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3WJa5wHjDQ0/cyoIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2I0OGJhYTgtNmM4My00NWViLWIwOWItNWZiZDFlNDJj
NTdkMB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk
M2Y5ZGY5YTctM2I3Ny00MzQzLWExNGUtNzAzYTFkNzI5OTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4ykLQFOmvvOlqQjlChle/d8/uUG9vL98KDY
jsO+fq2I73+zqQp0eTGctwG/w5NS6sOqAHvDjMMNzNJxeCvTIgWAQj5dOk+p/VcY
4GaSYKDId7N4JyFlzqZue034imSqJ3ysAN+ATleW+v5VEt7xC1ofc7a5Rs3AKGKW
GXzKYDmGAgT8ATr9zOzSDGyGmvYj1mypA/6sJkM8eHg3SQ26vljsKou3N+aLYRI+
W3BKhZr58k4mM3yUsxdPpkdE94nRU8zjLdSCiiuivKaFJiodpcXpljAwKHlRL3Sf
57yV+PlpixY+ljabVjf6Op37TYdUyUZpnP/u/me1F6ElnkxEDQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIHTB93NTym1/Qci0zqymhY4JwaVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4
YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJkMWU0MmM1N2QvZDc3MGRlNmMtZTc5NS0z
NDU4LWIzZmEtNzY3OTdhOGZjMTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2I0OGJhYTgtNmM4My00NWViLWIw
OWItNWZiZDFlNDJjNTdkL2NiNDhiYWE4LTZjODMtNDVlYi1iMDliLTVmYmQxZTQy
YzU3ZC5jcmwwHwYDVR0jBBgwFoAU6TbcWGb8aAK/ppnetN0TXkzRJ84wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJk
MWU0MmM1N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIqGj3
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGzrAtH3UYZmJpJeV/QEOXMCz0Jf0w6BiLj7SFhZwaHm8UC9d25z
pzJa8LK/FF2W2082BcDZGL50lr075sU18pm7faXRKRmG8PNsiaZ2MV3W+8u+8QiK
W0+/65BroPOvCX7610dFV0hAJo/qqjxegSJKFYRejEMVbVui/dk/gbWk0YwAPuTJ
C14w2O6qLFQN6jqSYFYXgx0ONRQ2KhNa1nEidbvMiVy8WoQ3ge0tDfn01AlpBsyS
GIoCx4x05XB4VTUMu2kb3UbwEaw5ghFvXDfRPiyqH9pYCUbxNWgrq5cBkjRAkowF
4TbEXogxoZw0MufH8K+duwF9O3FugMG2ynk=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:44:17 2026 by rpki-client