Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1363c6a1-cbd6-3d26-b9db-a8b2b6224c7a.roa
File:                     1363c6a1-cbd6-3d26-b9db-a8b2b6224c7a.roa (raw, json)
Hash identifier:          duKxWbCFmLzxzE8/4EUXr44nme+vzrzNducjlwCQtQQ=
Subject key identifier:   14:95:CD:22:6E:6B:10:7C:22:4B:3F:50:69:61:2A:69:97:51:4F:C6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D5CB4FCE320AE847610B38C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1363c6a1-cbd6-3d26-b9db-a8b2b6224c7a.roa
Signing time:             Wed 01 Apr 2026 13:00:30 +0000
ROA not before:           Wed 01 Apr 2026 13:00:30 +0000
ROA not after:            Tue 30 Jun 2026 13:00:30 +0000
asID:                     62206
IP address blocks:        2001:470:44c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5c:b4:fc:e3:20:ae:84:76:10:b3:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  1 13:00:30 2026 GMT
            Not After : Jun 30 13:00:30 2026 GMT
        Subject: CN=466c7473-6b58-4c53-aa5e-fec3f0e24787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:42:ba:50:80:60:b2:9e:b0:ac:88:6f:20:ac:
                    0a:e2:c0:ca:6e:1a:84:54:dd:8c:23:38:c3:29:28:
                    c8:2e:c8:95:86:be:18:32:e0:49:0a:16:55:1a:75:
                    17:7a:60:a7:8f:0c:fd:2c:67:7f:3e:43:f9:ea:33:
                    9a:a6:31:82:fd:66:1b:4e:63:8e:22:d2:e5:5d:b0:
                    8d:dc:e6:08:ea:f0:1a:53:25:2e:1f:d0:69:b6:81:
                    f6:9e:62:c3:32:fc:25:fb:d0:ce:eb:ba:a8:35:d6:
                    3f:55:84:cd:5c:dc:0b:b1:e8:ca:2f:d0:03:12:7d:
                    dd:4c:96:4d:bf:a3:a3:f5:a1:dd:f0:c9:cb:30:ee:
                    6d:96:ea:a0:12:86:c8:82:94:10:4e:c3:2e:34:34:
                    59:6a:96:55:f3:c7:7a:12:3a:32:9a:9e:2e:72:31:
                    bc:19:06:93:8f:54:4e:17:4f:76:84:4d:63:59:75:
                    da:1e:00:9f:c3:72:ab:57:e0:05:31:48:27:be:65:
                    2b:09:ec:46:9d:cd:84:3d:d4:6f:f9:f5:d1:f7:24:
                    0d:72:55:68:7d:75:81:5d:bc:5e:1a:11:c8:81:4f:
                    af:e2:c6:85:e5:ab:61:88:51:ab:c7:92:bf:03:ee:
                    81:9f:b9:93:7f:f0:22:43:b4:95:95:20:e0:8f:24:
                    05:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:95:CD:22:6E:6B:10:7C:22:4B:3F:50:69:61:2A:69:97:51:4F:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1363c6a1-cbd6-3d26-b9db-a8b2b6224c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:44c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:b3:d8:51:93:00:d1:88:90:0a:69:90:d0:c4:ae:79:1a:bd:
         91:8c:7c:11:95:6c:9c:37:30:52:ab:f0:80:ed:ca:12:38:75:
         fe:ee:46:40:f2:ac:94:6b:93:4f:e6:e5:94:5a:33:2d:ab:c2:
         fd:15:d1:a0:88:6a:9b:fd:91:aa:9d:99:53:96:06:a2:d2:77:
         5f:3b:d8:c4:b5:5c:57:34:dd:17:80:25:32:59:68:e1:89:6f:
         17:1c:8b:9d:0f:c1:31:e3:d6:c4:f0:81:58:db:28:e2:15:a0:
         eb:33:b3:b9:0b:44:60:08:1c:fd:7c:b1:0a:a1:68:4b:70:0d:
         22:d6:c3:f2:de:44:78:43:c0:9f:8a:17:97:f7:1b:31:62:cd:
         1e:f9:47:f5:28:7a:4f:a7:11:ec:b4:0f:00:26:ff:31:b0:ab:
         ce:c5:2a:0a:89:16:1e:ea:51:83:13:ba:f4:08:5a:5d:e9:3b:
         30:a6:65:05:03:8b:a3:1a:28:69:1f:81:c6:53:9e:46:02:83:
         f6:29:55:3a:5f:06:da:47:6e:80:0c:7e:8c:c5:47:46:2b:9c:
         1d:79:4b:8c:03:0d:53:59:ae:82:62:6b:15:e4:d9:82:ba:b1:
         8e:45:08:3b:dc:a6:a1:a4:f7:e7:9f:93:6c:4d:14:74:79:e7:
         59:52:30:9a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1ctPzjIK6EdhCzjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDQwMTEzMDAzMFoXDTI2MDYzMDEzMDAzMFowLzEtMCsGA1UEAxMk
NDY2Yzc0NzMtNmI1OC00YzUzLWFhNWUtZmVjM2YwZTI0Nzg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEK6UIBgsp6wrIhvIKwK4sDKbhqEVN2MIzjD
KSjILsiVhr4YMuBJChZVGnUXemCnjwz9LGd/PkP56jOapjGC/WYbTmOOItLlXbCN
3OYI6vAaUyUuH9BptoH2nmLDMvwl+9DO67qoNdY/VYTNXNwLsejKL9ADEn3dTJZN
v6Oj9aHd8MnLMO5tluqgEobIgpQQTsMuNDRZapZV88d6Ejoymp4ucjG8GQaTj1RO
F092hE1jWXXaHgCfw3KrV+AFMUgnvmUrCexGnc2EPdRv+fXR9yQNclVofXWBXbxe
GhHIgU+v4saF5athiFGrx5K/A+6Bn7mTf/AiQ7SVlSDgjyQF4QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBSVzSJuaxB8Iks/UGlhKmmXUU/GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTM2M2M2YTEtY2JkNi0z
ZDI2LWI5ZGItYThiMmI2MjI0YzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJOz2FGTANGIkAppkNDErnkavZGMfBGVbJw3MFKr8IDtyhI4df7u
RkDyrJRrk0/m5ZRaMy2rwv0V0aCIapv9kaqdmVOWBqLSd1872MS1XFc03ReAJTJZ
aOGJbxcci50PwTHj1sTwgVjbKOIVoOszs7kLRGAIHP18sQqhaEtwDSLWw/LeRHhD
wJ+KF5f3GzFizR75R/Uoek+nEey0DwAm/zGwq87FKgqJFh7qUYMTuvQIWl3pOzCm
ZQUDi6MaKGkfgcZTnkYCg/YpVTpfBtpHboAMfozFR0YrnB15S4wDDVNZroJiaxXk
2YK6sY5FCDvcpqGk9+efk2xNFHR551lSMJo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:16:36 2026 by rpki-client