Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/007e79b2-f6c0-3094-92d8-cbc13ffab4ca.roa
File:                     007e79b2-f6c0-3094-92d8-cbc13ffab4ca.roa (raw, json)
Hash identifier:          1bpjjAxDAJiGkk55aOyIq8tMMT/3qARyw82FobRjwj0=
Subject key identifier:   B7:C7:1C:57:7F:FF:87:FD:DD:78:79:6D:01:2B:8F:94:93:BF:90:D2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA81EF57C6B25EFC74293C
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/007e79b2-f6c0-3094-92d8-cbc13ffab4ca.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     36324
IP address blocks:        2001:470:bb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:81:ef:57:c6:b2:5e:fc:74:29:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=4a1a586e-6c63-4ac4-a556-f2e796c23255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dc:37:9e:c7:a2:db:46:53:65:69:ed:67:8a:
                    df:6c:25:f0:7b:81:b4:2b:db:51:9b:46:14:f1:e4:
                    20:6b:ab:f4:88:f7:1e:f6:6f:4e:ea:da:c8:1e:34:
                    41:b4:eb:49:18:cf:db:d3:9a:2d:32:34:d9:84:d2:
                    a6:fa:a5:ef:55:fd:a6:bc:13:2e:96:7e:f4:f9:cd:
                    b9:00:06:de:28:5b:bb:43:ee:27:c9:eb:ea:f8:bf:
                    1c:c1:13:61:8a:f5:2f:02:5e:28:9b:71:83:24:dc:
                    1f:8b:ef:9b:eb:d2:c2:e6:50:9c:ba:5a:81:fb:b9:
                    e6:5c:77:6d:6a:c8:07:9b:08:1c:e2:13:12:d1:a3:
                    fb:74:1e:9c:50:47:74:bd:bf:b5:74:28:ce:5e:84:
                    b7:c9:b2:b6:bb:2b:d4:28:d8:b6:86:e6:cf:cf:29:
                    a8:93:07:85:9b:85:70:fa:a6:fe:32:2d:a6:5d:71:
                    5c:5c:68:26:0f:ec:6d:e0:85:c5:e4:b3:0f:e6:e8:
                    4a:20:30:1a:7b:89:19:27:5e:40:e8:93:ae:37:4e:
                    10:e2:2a:58:9f:13:e2:a6:98:f3:d5:39:cf:f6:87:
                    1b:9a:08:d4:31:08:69:48:be:18:ed:3e:df:3a:86:
                    b6:e7:a4:69:98:65:78:6c:18:f1:b7:49:d3:fb:05:
                    a9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C7:1C:57:7F:FF:87:FD:DD:78:79:6D:01:2B:8F:94:93:BF:90:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/007e79b2-f6c0-3094-92d8-cbc13ffab4ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:bb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:b1:91:d0:af:90:ac:c0:c3:ed:62:07:d4:09:28:91:08:ef:
         fe:24:7b:fc:45:5d:30:e3:24:d6:46:7c:27:86:ca:74:7c:7b:
         b0:a9:b2:17:b2:76:c1:87:6e:3c:db:67:82:7c:ea:05:ac:9f:
         a6:81:36:50:f1:dd:26:c3:73:7b:f2:13:73:16:97:85:8d:0e:
         45:92:cc:b5:48:48:c2:a9:e0:2a:6b:19:3c:87:e0:0e:91:47:
         a5:16:ae:27:51:b7:04:3e:43:f1:a3:40:cf:77:39:ec:32:26:
         09:fd:45:ad:01:f8:95:12:49:0b:1d:88:1d:13:26:4a:d2:c3:
         2d:42:8c:0d:89:75:70:b9:68:6b:0f:86:64:cd:1b:da:b5:9b:
         97:99:32:c4:85:67:d3:85:3b:1f:3e:e4:51:08:e6:91:87:82:
         04:89:cc:a5:e3:43:22:12:6b:8f:48:9c:d8:e9:f5:c2:44:15:
         48:a0:6c:0d:58:9a:36:ef:a4:18:2b:f5:7c:dc:8d:16:89:e1:
         c8:a5:bf:42:d7:12:fb:07:66:5b:f2:4b:4b:1e:03:de:66:3c:
         39:cd:d5:09:7e:0e:f9:b7:82:34:c1:99:4f:c6:a2:a4:6d:9b:
         7b:4e:d9:5a:ea:e6:95:58:d3:48:67:d0:89:5b:59:8d:da:f9:
         2e:e4:63:61
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6oHvV8ayXvx0KTwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
NGExYTU4NmUtNmM2My00YWM0LWE1NTYtZjJlNzk2YzIzMjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNw3nsei20ZTZWntZ4rfbCXwe4G0K9tRm0YU
8eQga6v0iPce9m9O6trIHjRBtOtJGM/b05otMjTZhNKm+qXvVf2mvBMuln70+c25
AAbeKFu7Q+4nyevq+L8cwRNhivUvAl4om3GDJNwfi++b69LC5lCculqB+7nmXHdt
asgHmwgc4hMS0aP7dB6cUEd0vb+1dCjOXoS3ybK2uyvUKNi2hubPzymokweFm4Vw
+qb+Mi2mXXFcXGgmD+xt4IXF5LMP5uhKIDAae4kZJ15A6JOuN04Q4ipYnxPippjz
1TnP9ocbmgjUMQhpSL4Y7T7fOoa256RpmGV4bBjxt0nT+wWprwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLfHHFd//4f93Xh5bQErj5STv5DSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDA3ZTc5YjItZjZjMC0z
MDk0LTkyZDgtY2JjMTNmZmFiNGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAC7
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHexkdCvkKzAw+1iB9QJKJEI7/4ke/xFXTDjJNZGfCeGynR8e7Cp
sheydsGHbjzbZ4J86gWsn6aBNlDx3SbDc3vyE3MWl4WNDkWSzLVISMKp4CprGTyH
4A6RR6UWridRtwQ+Q/GjQM93OewyJgn9Ra0B+JUSSQsdiB0TJkrSwy1CjA2JdXC5
aGsPhmTNG9q1m5eZMsSFZ9OFOx8+5FEI5pGHggSJzKXjQyISa49InNjp9cJEFUig
bA1YmjbvpBgr9XzcjRaJ4cilv0LXEvsHZlvyS0seA95mPDnN1Ql+Dvm3gjTBmU/G
oqRtm3tO2Vrq5pVY00hn0IlbWY3a+S7kY2E=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:00:50 2026 by rpki-client