Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/248ff971-d95c-371c-9fb0-932735b3d5a7.roa
File:                     248ff971-d95c-371c-9fb0-932735b3d5a7.roa (raw, json)
Hash identifier:          Rpz9hUNjmPLH60YRqy6tJ2gI4evugHFGhtNAZ694hdE=
Subject key identifier:   BD:28:49:08:F1:D3:EF:2A:C9:2F:44:E6:25:69:F2:70:BB:FF:72:03
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA8BB04ED4A4AEF0F1BC80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/248ff971-d95c-371c-9fb0-932735b3d5a7.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     25668
IP address blocks:        2001:470:1bf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:8b:b0:4e:d4:a4:ae:f0:f1:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=d51e9440-3a94-4b91-91bb-5f0d96642f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a7:4f:a8:03:4f:8d:94:58:29:3a:1a:66:d7:
                    3a:cb:5d:a2:80:78:50:51:d9:17:b7:35:ab:f7:f7:
                    d8:e5:8f:b7:eb:0c:b5:42:3a:ee:6c:65:08:1d:09:
                    db:bf:e0:66:2c:0b:b6:55:f1:bc:48:b6:0f:ec:4e:
                    28:a5:b2:38:ff:3a:65:e8:e1:d1:d9:39:b7:97:fc:
                    f0:ef:71:e0:91:d5:fb:07:05:81:d4:85:6f:5b:ce:
                    4c:f4:a7:1b:d9:a4:44:1d:c1:08:2c:3e:22:51:6c:
                    82:67:bf:f1:a5:5d:34:9e:35:be:18:f1:70:4a:40:
                    38:23:b5:d7:5b:c1:5b:a1:32:af:50:06:72:5d:28:
                    2b:cd:78:e5:13:fc:fb:78:16:45:0f:68:05:67:91:
                    fd:d8:1d:14:90:9c:81:96:2e:10:e0:bb:47:9a:ee:
                    dc:06:36:b0:f5:9f:c9:9b:66:34:d7:34:61:77:f1:
                    1e:c0:62:0a:3d:3a:c3:67:d3:59:a4:44:76:8a:27:
                    4b:25:a2:d1:09:51:54:f4:d3:55:bc:6b:94:c3:aa:
                    79:64:7f:f9:79:4c:c7:18:a4:62:74:9e:ff:1d:88:
                    44:77:5c:93:dd:22:18:6c:66:bd:4a:c4:a6:a6:13:
                    80:41:2c:65:a8:53:58:5a:a9:9d:a7:c3:f8:2d:e1:
                    c6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:28:49:08:F1:D3:EF:2A:C9:2F:44:E6:25:69:F2:70:BB:FF:72:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/248ff971-d95c-371c-9fb0-932735b3d5a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1bf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:e0:17:cb:ae:e0:30:12:62:15:c1:a3:f6:c6:f7:3f:9c:b3:
         0e:55:1c:29:09:e8:4e:5c:a3:f4:ba:33:53:a6:25:f0:ff:75:
         05:1a:a2:96:b9:31:4b:07:ee:8f:19:22:61:6f:3d:b1:60:e5:
         89:2c:56:7c:e0:45:c1:18:8a:9a:00:28:c8:43:6b:e2:7c:99:
         e4:47:b8:6d:d0:67:11:0b:f0:25:ff:e9:f8:b5:35:79:48:f6:
         4a:d9:38:40:be:73:f4:33:60:1e:7e:e1:2e:46:7a:d0:24:91:
         df:9c:44:93:20:55:5a:e1:4b:b0:af:df:65:67:ad:e3:5e:c8:
         be:5a:7d:94:68:6b:1e:81:23:ed:d2:3c:de:4e:af:5f:26:91:
         e7:b4:40:5f:27:f7:5e:fa:85:aa:50:40:4e:09:5d:17:e0:0d:
         e6:ab:c8:83:36:c6:14:17:03:26:28:76:c5:6e:46:cb:27:b2:
         2c:41:b9:5a:b8:c1:16:88:e9:42:82:c1:27:7b:44:46:d8:63:
         f7:30:7a:75:a3:43:ae:6c:bc:aa:be:5f:12:71:27:88:da:9c:
         4c:12:ee:dd:eb:1c:cd:5f:cb:f6:13:1e:24:a6:78:3f:5b:dd:
         9e:ba:20:d8:6b:b7:90:45:90:7b:02:cb:32:a7:6b:61:3e:0c:
         1b:80:7b:cf
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6ouwTtSkrvDxvIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
ZDUxZTk0NDAtM2E5NC00YjkxLTkxYmItNWYwZDk2NjQyZjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqdPqANPjZRYKToaZtc6y12igHhQUdkXtzWr
9/fY5Y+36wy1QjrubGUIHQnbv+BmLAu2VfG8SLYP7E4opbI4/zpl6OHR2Tm3l/zw
73HgkdX7BwWB1IVvW85M9Kcb2aREHcEILD4iUWyCZ7/xpV00njW+GPFwSkA4I7XX
W8FboTKvUAZyXSgrzXjlE/z7eBZFD2gFZ5H92B0UkJyBli4Q4LtHmu7cBjaw9Z/J
m2Y01zRhd/EewGIKPTrDZ9NZpER2iidLJaLRCVFU9NNVvGuUw6p5ZH/5eUzHGKRi
dJ7/HYhEd1yT3SIYbGa9SsSmphOAQSxlqFNYWqmdp8P4LeHGCwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL0oSQjx0+8qyS9E5iVp8nC7/3IDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjQ4ZmY5NzEtZDk1Yy0z
NzFjLTlmYjAtOTMyNzM1YjNkNWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAG/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADPgF8uu4DASYhXBo/bG9z+csw5VHCkJ6E5co/S6M1OmJfD/dQUa
opa5MUsH7o8ZImFvPbFg5YksVnzgRcEYipoAKMhDa+J8meRHuG3QZxEL8CX/6fi1
NXlI9krZOEC+c/QzYB5+4S5GetAkkd+cRJMgVVrhS7Cv32VnreNeyL5afZRoax6B
I+3SPN5Or18mkee0QF8n9176hapQQE4JXRfgDearyIM2xhQXAyYodsVuRssnsixB
uVq4wRaI6UKCwSd7REbYY/cwenWjQ65svKq+XxJxJ4janEwS7t3rHM1fy/YTHiSm
eD9b3Z66INhrt5BFkHsCyzKna2E+DBuAe88=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:18:29 2026 by rpki-client