Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/10c9309e-390d-33d2-85df-29703c8f48fc.roa
File:                     10c9309e-390d-33d2-85df-29703c8f48fc.roa (raw, json)
Hash identifier:          quCYBY/oNaES68Q9ftA3L5oKK6bCSiDpgrMO0PfjbUw=
Subject key identifier:   3D:05:8E:BD:F3:CE:74:64:B7:9B:2A:8A:1F:A3:EB:AD:68:D2:5A:A1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA9D48950B4CD433865860
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/10c9309e-390d-33d2-85df-29703c8f48fc.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     14979
IP address blocks:        65.49.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:9d:48:95:0b:4c:d4:33:86:58:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=0cb666ee-9137-4e7d-b685-6bcf9b5636c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a8:49:bd:4e:20:df:65:db:c2:50:80:c5:4f:
                    b5:06:2c:2c:5b:9a:e5:9f:fc:a8:ef:6b:d3:50:68:
                    bc:a6:fb:52:0b:bb:1e:37:a3:b8:c5:5a:23:03:31:
                    d3:f3:cd:98:78:f7:b9:8e:f0:8e:6d:1d:87:0d:6e:
                    2f:ca:2b:c3:89:97:ce:0f:d5:ca:88:c7:9a:d9:e5:
                    18:d0:2c:bc:94:ee:4a:70:39:a3:30:16:f0:59:69:
                    00:13:2a:51:9a:ba:e1:b3:7b:f5:a8:2a:ca:69:5a:
                    6e:7d:28:cb:1b:b3:5e:59:8a:a2:62:cc:f3:46:cd:
                    1f:4c:96:53:67:b1:7a:27:6f:d8:ae:0f:08:18:1d:
                    fe:c2:49:7d:28:b4:76:34:1c:a6:21:30:03:83:aa:
                    bf:4c:84:e5:b2:1d:22:eb:21:79:4a:9d:0d:fa:e1:
                    38:10:17:6c:61:4c:b8:e3:ff:f5:55:79:22:f5:87:
                    d2:a3:6d:f8:b5:94:d5:13:73:cf:88:d9:a3:04:52:
                    a4:80:53:34:eb:88:21:23:c3:50:65:0c:1d:21:f3:
                    63:20:92:5c:2d:22:3d:f3:54:50:9e:ba:31:37:b7:
                    63:24:34:b2:9f:24:b7:cd:fa:e1:ee:2e:3d:fc:0f:
                    cf:ef:5a:81:c4:83:fa:5e:77:06:41:43:52:cb:92:
                    44:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:05:8E:BD:F3:CE:74:64:B7:9B:2A:8A:1F:A3:EB:AD:68:D2:5A:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/10c9309e-390d-33d2-85df-29703c8f48fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:17:64:10:4e:6f:f1:48:b9:b6:3e:99:b7:f7:d1:14:fb:9b:
         1c:df:d2:32:cb:5d:64:85:a8:8c:dc:ed:e4:6e:f9:86:71:1c:
         e1:b7:aa:f4:6b:44:70:25:ce:97:37:77:9a:a0:de:79:d9:7a:
         71:ea:c0:84:5b:cb:5a:89:38:aa:4c:0a:93:40:9f:b0:d7:66:
         62:e7:10:c7:38:02:2b:44:db:3a:04:ae:67:52:6f:79:1e:d8:
         38:d5:dd:16:e8:6b:5f:cb:c1:3d:14:d0:c4:3b:38:5b:8a:fe:
         70:ac:69:67:22:12:d1:a5:86:0d:19:e6:b5:ff:56:91:4c:b8:
         bf:21:98:f9:6b:ff:c1:a5:77:7e:06:80:c7:2b:35:86:7b:83:
         5f:5d:27:f1:3f:fc:00:da:2e:b2:15:5c:e3:58:fa:25:96:5a:
         36:da:23:9c:78:18:93:b1:49:c3:b3:3e:97:4e:d6:ee:0d:66:
         d4:d9:b2:de:3f:61:2e:a3:ed:bf:0c:0c:2b:36:13:8b:a8:ee:
         72:11:b9:a7:07:64:d4:0b:9a:e3:e9:3d:93:84:97:16:89:15:
         5e:6b:45:a6:19:d2:fd:55:76:7a:68:4e:98:b4:2f:72:0a:c9:
         2f:81:b1:86:80:ff:8c:7c:00:6b:c8:76:38:ee:69:d9:22:dd:
         89:94:fb:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6p1IlQtM1DOGWGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
MGNiNjY2ZWUtOTEzNy00ZTdkLWI2ODUtNmJjZjliNTYzNmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6hJvU4g32XbwlCAxU+1BiwsW5rln/yo72vT
UGi8pvtSC7seN6O4xVojAzHT882YePe5jvCObR2HDW4vyivDiZfOD9XKiMea2eUY
0Cy8lO5KcDmjMBbwWWkAEypRmrrhs3v1qCrKaVpufSjLG7NeWYqiYszzRs0fTJZT
Z7F6J2/Yrg8IGB3+wkl9KLR2NBymITADg6q/TITlsh0i6yF5Sp0N+uE4EBdsYUy4
4//1VXki9YfSo234tZTVE3PPiNmjBFKkgFM064ghI8NQZQwdIfNjIJJcLSI981RQ
nroxN7djJDSynyS3zfrh7i49/A/P71qBxIP6XncGQUNSy5JEcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD0Fjr3zznRkt5sqih+j661o0lqhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTBjOTMwOWUtMzkwZC0z
M2QyLTg1ZGYtMjk3MDNjOGY0OGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTEZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMQXZBBOb/FIubY+mbf30RT7mxzf0jLLXWSFqIzc7eRu+YZxHOG3qvRr
RHAlzpc3d5qg3nnZenHqwIRby1qJOKpMCpNAn7DXZmLnEMc4AitE2zoErmdSb3ke
2DjV3Rboa1/LwT0U0MQ7OFuK/nCsaWciEtGlhg0Z5rX/VpFMuL8hmPlr/8Gld34G
gMcrNYZ7g19dJ/E//ADaLrIVXONY+iWWWjbaI5x4GJOxScOzPpdO1u4NZtTZst4/
YS6j7b8MDCs2E4uo7nIRuacHZNQLmuPpPZOElxaJFV5rRaYZ0v1VdnpoTpi0L3IK
yS+BsYaA/4x8AGvIdjjuadki3YmU++A=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:49:15 2026 by rpki-client