Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/397d9e7b-2f32-324f-aa57-89d6ca9ab42c.roa
File:                     397d9e7b-2f32-324f-aa57-89d6ca9ab42c.roa (raw, json)
Hash identifier:          ts7tN6Bgf1Tg7gcXxCFbIiAmIt2fA1ZvzyRbUXoQKAc=
Subject key identifier:   5E:5E:CC:DE:69:D5:2F:2D:CB:31:FD:D0:75:34:D5:E1:66:A7:74:44
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D5E1A78B2CA9F73711BA7E840
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/397d9e7b-2f32-324f-aa57-89d6ca9ab42c.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     216361
IP address blocks:        2001:470:37f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:78:b2:ca:9f:73:71:1b:a7:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=5cf5c3a8-53ef-451b-a044-3a342ff10d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5e:d3:6e:ed:1c:e2:14:89:e6:77:47:09:e8:
                    d0:fe:09:d9:0e:60:46:6a:8d:16:a5:dd:a9:20:02:
                    ef:06:36:4e:c9:9a:e4:3d:fb:12:cc:30:81:e4:ee:
                    d6:a0:5a:61:83:0e:53:d3:d2:bc:17:0d:3a:6e:b0:
                    75:8b:c8:38:9e:9f:e1:77:f8:00:54:99:d0:80:13:
                    30:b1:0d:4e:ad:67:2f:43:e6:f0:cf:02:cb:4d:8a:
                    f5:a5:b4:86:c0:6c:37:d2:f7:b7:5c:49:03:ed:f8:
                    d4:6b:a1:59:9d:5f:f1:19:67:49:27:bb:05:40:a7:
                    ff:dc:09:80:88:3d:19:f9:0c:32:24:76:7a:94:7c:
                    60:c9:ed:5b:82:90:d7:1e:cb:60:84:fc:95:c2:7b:
                    51:06:d2:4c:7b:a0:12:01:a2:3d:5c:8b:82:72:48:
                    17:f8:a1:83:b7:28:4a:96:ed:ff:50:6c:b0:3a:0b:
                    ca:5b:5b:05:8c:b0:99:db:20:4f:4e:f0:1f:0c:93:
                    44:9c:a2:22:e4:12:eb:ed:0e:00:db:e1:92:07:d7:
                    0d:c6:6a:41:57:72:57:f4:57:7f:4a:2f:a3:b6:95:
                    da:eb:1c:72:ef:f5:43:66:6f:64:9f:63:9f:4f:bb:
                    01:b9:38:fa:93:8e:88:41:c2:e5:09:1c:2e:a6:b2:
                    ec:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5E:CC:DE:69:D5:2F:2D:CB:31:FD:D0:75:34:D5:E1:66:A7:74:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/397d9e7b-2f32-324f-aa57-89d6ca9ab42c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:37f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:0e:5a:b1:5d:a2:83:d6:85:ec:6b:0a:8e:41:c1:6d:7e:09:
         c5:c2:5a:8e:e4:cd:90:26:87:ba:fd:be:58:5c:4b:20:59:ea:
         56:c9:42:6c:c6:55:fe:f0:8d:54:a4:59:95:8f:b2:26:7d:eb:
         67:6c:09:1c:6f:6e:fd:35:9e:f4:aa:ce:cd:f6:5f:3d:54:af:
         cf:65:a5:c9:c5:2d:9a:49:aa:ca:29:8a:1a:67:4c:46:80:34:
         8d:da:41:2e:c6:72:53:ff:05:4f:95:f4:b5:da:77:2e:5d:af:
         36:8e:2f:38:be:43:12:c5:fe:96:b3:78:46:dd:48:67:82:e7:
         bd:6c:01:81:39:fd:01:3f:29:63:2f:ab:1e:db:e4:9b:6e:e8:
         70:d8:a1:d1:fb:9b:53:c3:1f:02:4f:24:50:ca:1b:48:91:45:
         76:97:c4:a4:df:92:34:0b:54:66:e0:8e:7e:d2:02:f4:6d:86:
         8c:27:56:ec:49:f2:ef:5b:d8:9e:56:46:49:74:d7:9d:2f:35:
         17:5c:36:53:d2:2f:fd:f5:d8:06:e4:ec:8b:2a:20:53:ef:b6:
         d6:9d:0b:d4:a3:0c:a8:22:62:b3:31:b6:3b:42:ac:4b:b9:e0:
         ac:cd:a6:fc:b2:ba:5b:ed:b7:8d:2b:6a:4e:f2:e5:87:75:d6:
         8a:04:ad:ca
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGniyyp9zcRun6EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
NWNmNWMzYTgtNTNlZi00NTFiLWEwNDQtM2EzNDJmZjEwZDE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql7Tbu0c4hSJ5ndHCejQ/gnZDmBGao0Wpd2p
IALvBjZOyZrkPfsSzDCB5O7WoFphgw5T09K8Fw06brB1i8g4np/hd/gAVJnQgBMw
sQ1OrWcvQ+bwzwLLTYr1pbSGwGw30ve3XEkD7fjUa6FZnV/xGWdJJ7sFQKf/3AmA
iD0Z+QwyJHZ6lHxgye1bgpDXHstghPyVwntRBtJMe6ASAaI9XIuCckgX+KGDtyhK
lu3/UGywOgvKW1sFjLCZ2yBPTvAfDJNEnKIi5BLr7Q4A2+GSB9cNxmpBV3JX9Fd/
Si+jtpXa6xxy7/VDZm9kn2OfT7sBuTj6k46IQcLlCRwuprLsxQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF5ezN5p1S8tyzH90HU01eFmp3REMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzk3ZDllN2ItMmYzMi0z
MjRmLWFhNTctODlkNmNhOWFiNDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAN/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAL8OWrFdooPWhexrCo5BwW1+CcXCWo7kzZAmh7r9vlhcSyBZ6lbJ
QmzGVf7wjVSkWZWPsiZ962dsCRxvbv01nvSqzs32Xz1Ur89lpcnFLZpJqsopihpn
TEaANI3aQS7GclP/BU+V9LXady5drzaOLzi+QxLF/pazeEbdSGeC571sAYE5/QE/
KWMvqx7b5Jtu6HDYodH7m1PDHwJPJFDKG0iRRXaXxKTfkjQLVGbgjn7SAvRthown
VuxJ8u9b2J5WRkl0150vNRdcNlPSL/312Abk7IsqIFPvttadC9SjDKgiYrMxtjtC
rEu54KzNpvyyulvtt40rak7y5Yd11ooErco=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:17:34 2026 by rpki-client