Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/20e552c6-267c-3410-9ec8-21f78ad3db12.roa
File:                     20e552c6-267c-3410-9ec8-21f78ad3db12.roa (raw, json)
Hash identifier:          uu+F2sFRafz7Xf+bwMnr8G23g0WUdoGtSsInqXl1hLU=
Subject key identifier:   BA:C1:CC:F3:8E:B6:BD:85:B6:ED:C9:19:5E:77:F5:50:82:51:DA:01
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D07AD1F50A1D7EB32A9E9D3B8
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/20e552c6-267c-3410-9ec8-21f78ad3db12.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     201130
IP address blocks:        2001:470:482::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ad:1f:50:a1:d7:eb:32:a9:e9:d3:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=f6bc1f8f-be76-4dd4-af1d-ff2af546cd6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bb:f5:65:a5:07:23:93:20:5d:ac:8c:fa:1a:
                    24:0e:55:cc:b6:0e:81:0f:9c:da:c4:07:1b:05:96:
                    2c:6e:1e:ab:76:13:c2:60:0a:5b:fe:d9:7f:9b:d2:
                    73:a4:a8:ea:71:a7:93:59:f5:14:52:2e:37:6f:d3:
                    2e:ef:71:8c:fa:33:fd:59:92:fc:3e:aa:cf:ed:0f:
                    58:64:5c:4b:16:32:8c:33:08:50:04:3c:54:5b:dd:
                    7d:99:75:d9:15:a7:92:48:7a:e5:b2:00:0d:0f:10:
                    3d:bc:82:f1:a6:e6:af:53:3e:ae:a5:62:c8:31:94:
                    b4:b6:6f:27:36:13:1d:66:d1:78:85:9a:22:3a:1a:
                    1c:55:3f:a2:00:6f:b3:a8:a2:33:c2:d7:42:06:47:
                    ad:01:ae:74:02:e9:30:3c:8a:b9:70:a4:5e:76:06:
                    a3:e1:b6:53:0d:9f:a3:af:4d:df:fb:52:9c:ca:5d:
                    95:21:42:16:6c:40:66:45:c0:2a:aa:81:8f:83:cc:
                    17:86:f0:bf:e2:93:1b:73:d5:fa:26:73:dc:4a:6c:
                    ba:e2:8a:e6:eb:7a:c1:68:40:9a:e3:11:52:d4:1f:
                    ca:dd:3e:82:5b:15:3a:95:0a:58:52:10:8f:bb:28:
                    1d:5d:c8:7d:fe:00:12:65:3e:b6:f6:01:21:00:20:
                    90:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C1:CC:F3:8E:B6:BD:85:B6:ED:C9:19:5E:77:F5:50:82:51:DA:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/20e552c6-267c-3410-9ec8-21f78ad3db12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:482::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:b6:f9:a9:9f:cd:1f:97:af:0f:6f:8c:2c:a6:a9:16:93:1b:
         8f:bc:32:23:da:f7:fb:f9:dc:b2:b3:1c:9b:c0:82:2a:e5:3e:
         72:5c:ba:a5:1b:0e:71:7c:81:3f:1f:63:76:38:0b:d0:73:91:
         a8:76:8e:62:d9:4b:3c:41:be:2e:75:62:d0:59:62:e7:1e:f4:
         35:48:5c:c9:19:63:56:d1:f7:ca:c3:c5:7f:c1:10:c4:9c:c1:
         68:16:49:93:a7:c4:16:07:8c:89:dc:81:c1:60:ec:46:82:57:
         7c:98:56:17:91:e9:3e:41:25:e7:e1:49:bb:de:c2:77:25:05:
         76:c2:37:c3:e8:9e:7b:74:68:7f:54:25:ce:91:48:cb:a5:b6:
         dc:08:d7:14:f6:aa:5b:ec:83:f8:30:81:9d:ee:b3:21:07:e0:
         69:04:c6:21:9d:a1:86:07:74:e7:d1:0b:e4:fa:fc:10:d9:9c:
         52:aa:17:5b:89:08:12:40:dc:6d:3c:cb:42:7b:f4:3e:c9:3d:
         da:8d:e5:4b:bd:7e:27:b2:95:c1:bb:09:0c:e7:0c:65:52:08:
         1e:ab:bf:ec:5a:5d:40:b3:0b:f2:ce:73:22:98:6f:98:a7:36:
         89:fc:c2:ab:33:7f:71:8b:0d:33:82:85:eb:92:c6:46:24:9b:
         04:0f:dd:99
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0HrR9QodfrMqnp07gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk
ZjZiYzFmOGYtYmU3Ni00ZGQ0LWFmMWQtZmYyYWY1NDZjZDZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbv1ZaUHI5MgXayM+hokDlXMtg6BD5zaxAcb
BZYsbh6rdhPCYApb/tl/m9JzpKjqcaeTWfUUUi43b9Mu73GM+jP9WZL8PqrP7Q9Y
ZFxLFjKMMwhQBDxUW919mXXZFaeSSHrlsgANDxA9vILxpuavUz6upWLIMZS0tm8n
NhMdZtF4hZoiOhocVT+iAG+zqKIzwtdCBketAa50AukwPIq5cKRedgaj4bZTDZ+j
r03f+1Kcyl2VIUIWbEBmRcAqqoGPg8wXhvC/4pMbc9X6JnPcSmy64orm63rBaECa
4xFS1B/K3T6CWxU6lQpYUhCPuygdXch9/gASZT629gEhACCQ1wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLrBzPOOtr2Ftu3JGV539VCCUdoBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjBlNTUyYzYtMjY3Yy0z
NDEwLTllYzgtMjFmNzhhZDNkYjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcASC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMS2+amfzR+Xrw9vjCymqRaTG4+8MiPa9/v53LKzHJvAgirlPnJc
uqUbDnF8gT8fY3Y4C9Bzkah2jmLZSzxBvi51YtBZYuce9DVIXMkZY1bR98rDxX/B
EMScwWgWSZOnxBYHjIncgcFg7EaCV3yYVheR6T5BJefhSbvewnclBXbCN8Ponnt0
aH9UJc6RSMulttwI1xT2qlvsg/gwgZ3usyEH4GkExiGdoYYHdOfRC+T6/BDZnFKq
F1uJCBJA3G08y0J79D7JPdqN5Uu9fieylcG7CQznDGVSCB6rv+xaXUCzC/LOcyKY
b5inNon8wqszf3GLDTOCheuSxkYkmwQP3Zk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:01:46 2026 by rpki-client