Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0b1795c8-6ea4-3571-ad98-678ed6206899.roa
File:                     0b1795c8-6ea4-3571-ad98-678ed6206899.roa (raw, json)
Hash identifier:          4IHIu4GVxOIn9eRGm3Jo7rCQPPLOs8KYmPP9npVkwco=
Subject key identifier:   AD:08:7B:D6:4B:F5:FE:6D:AD:AE:13:09:5D:89:92:2E:58:01:51:D5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA9181F73AE71DA6ABED00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0b1795c8-6ea4-3571-ad98-678ed6206899.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     49183
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:91:81:f7:3a:e7:1d:a6:ab:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=fbb192ae-d31e-41ac-ad2b-c670da2c8fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d1:6f:1b:b0:70:0b:11:25:d4:bf:c5:3d:c1:
                    97:1f:82:e1:5d:50:ca:9c:f3:91:37:7f:ad:a4:d8:
                    61:68:67:98:b5:a6:7b:77:90:9d:9b:5f:05:be:64:
                    d2:98:00:32:c8:83:bc:5e:4f:5d:91:39:9e:58:79:
                    c9:0a:38:3c:b2:53:65:c8:c3:0e:fe:17:d7:0e:aa:
                    ef:9c:4d:2c:37:59:98:09:89:7e:2b:c0:e6:dd:0a:
                    2e:61:60:88:9f:ff:63:1a:64:21:be:37:86:9f:ca:
                    40:ce:cd:49:23:23:c0:ac:00:53:ba:87:b6:50:fc:
                    e7:87:95:eb:fe:e1:df:25:38:e5:6f:77:58:75:a7:
                    52:d7:2a:3a:21:75:70:33:b6:b6:ed:d1:85:4d:d2:
                    55:53:73:b4:16:d1:3b:82:55:73:12:b9:0f:61:e0:
                    15:80:22:9c:81:bf:32:77:f7:8f:dd:5d:43:6a:b3:
                    66:76:e9:0d:85:af:17:63:3b:4f:97:27:57:92:08:
                    f5:15:da:5a:ca:ae:6e:d3:03:e6:d5:e0:14:0c:a0:
                    51:27:6d:36:9b:5e:b0:f0:42:5a:14:92:34:c9:cd:
                    e9:0b:e3:5c:c6:17:80:9a:cc:cb:f4:b9:7b:c6:7e:
                    6e:a0:cd:6b:dc:82:08:4d:d2:fb:c1:12:0b:0e:3b:
                    03:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:08:7B:D6:4B:F5:FE:6D:AD:AE:13:09:5D:89:92:2E:58:01:51:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0b1795c8-6ea4-3571-ad98-678ed6206899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:d6:f9:f0:fa:ea:0f:1c:ba:64:bb:9d:e5:7a:9a:08:57:7c:
         2f:b4:6a:88:f1:ab:cc:75:76:e6:73:03:03:a3:47:f8:95:14:
         65:ad:62:18:fc:bb:3b:a3:ba:2f:fc:97:de:73:e5:f4:e3:da:
         f2:2e:8f:c2:8f:96:f2:da:31:eb:2d:1f:42:c3:fa:4c:52:ec:
         bb:b7:9e:71:52:6a:c3:c8:0d:64:fd:b2:00:f6:1c:16:95:b0:
         6a:10:c1:8e:36:42:be:f9:f9:23:13:cd:a0:65:ed:a3:6f:6b:
         a0:e0:55:e6:60:9e:c9:03:8e:66:d9:44:32:0c:6d:dc:56:f2:
         eb:27:dc:ac:4a:6d:a6:42:00:8f:a1:d4:b5:82:e5:d1:a3:c5:
         9c:a5:bd:9d:28:bc:72:cb:fa:20:02:78:aa:bb:cd:f0:8b:90:
         30:4b:b9:6f:8e:cf:51:69:03:90:0e:fe:23:20:e1:45:3d:0d:
         33:42:e9:19:25:8e:9c:e2:42:1e:e5:cf:b7:b6:34:4d:a0:81:
         ab:b2:4a:d6:b9:7f:cf:99:28:fd:c2:4b:88:77:b1:0c:a5:2f:
         f4:18:5d:84:06:23:1c:a4:42:4b:84:26:be:fd:68:10:85:dc:
         80:aa:d0:af:4d:f7:9f:f7:2f:04:db:78:67:06:a6:08:0f:b8:
         ba:7a:e6:23
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6pGB9zrnHaar7QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
ZmJiMTkyYWUtZDMxZS00MWFjLWFkMmItYzY3MGRhMmM4ZmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9FvG7BwCxEl1L/FPcGXH4LhXVDKnPORN3+t
pNhhaGeYtaZ7d5Cdm18FvmTSmAAyyIO8Xk9dkTmeWHnJCjg8slNlyMMO/hfXDqrv
nE0sN1mYCYl+K8Dm3QouYWCIn/9jGmQhvjeGn8pAzs1JIyPArABTuoe2UPznh5Xr
/uHfJTjlb3dYdadS1yo6IXVwM7a27dGFTdJVU3O0FtE7glVzErkPYeAVgCKcgb8y
d/eP3V1DarNmdukNha8XYztPlydXkgj1Fdpayq5u0wPm1eAUDKBRJ202m16w8EJa
FJI0yc3pC+NcxheAmszL9Ll7xn5uoM1r3IIITdL7wRILDjsDZwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK0Ie9ZL9f5tra4TCV2Jki5YAVHVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGIxNzk1YzgtNmVhNC0z
NTcxLWFkOTgtNjc4ZWQ2MjA2ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG3W+fD66g8cumS7neV6mghXfC+0aojxq8x1duZzAwOjR/iVFGWt
Yhj8uzujui/8l95z5fTj2vIuj8KPlvLaMestH0LD+kxS7Lu3nnFSasPIDWT9sgD2
HBaVsGoQwY42Qr75+SMTzaBl7aNva6DgVeZgnskDjmbZRDIMbdxW8usn3KxKbaZC
AI+h1LWC5dGjxZylvZ0ovHLL+iACeKq7zfCLkDBLuW+Oz1FpA5AO/iMg4UU9DTNC
6RkljpziQh7lz7e2NE2ggauySta5f8+ZKP3CS4h3sQylL/QYXYQGIxykQkuEJr79
aBCF3ICq0K9N95/3LwTbeGcGpggPuLp65iM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:04:33 2026 by rpki-client