Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a870679-debe-348f-a33d-6e54916a83ca.roa
File:                     4a870679-debe-348f-a33d-6e54916a83ca.roa (raw, json)
Hash identifier:          9w5HD6PGgLqWi4GGjxiaBJqw+KUCzNLva3e795sIJ+Y=
Subject key identifier:   DE:16:6F:E6:26:25:7F:DC:A0:7E:2C:DE:7A:B8:D9:3D:40:2F:12:3E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584CE1FCDFDBF039EBB3BBF11180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a870679-debe-348f-a33d-6e54916a83ca.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     400587
IP address blocks:        2001:470:3ef::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:df:db:f0:39:eb:b3:bb:f1:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=d522243f-11f0-4299-95cd-96bbd21261e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0d:b5:13:4a:1a:cb:57:67:8d:05:fa:9b:1b:
                    a8:cd:8e:e1:6c:82:ed:31:f8:7d:13:71:8b:6a:63:
                    69:7a:2a:82:8c:3a:b4:50:18:74:0c:9d:74:3d:96:
                    2d:c9:22:86:a5:53:f5:7b:92:57:ec:80:0a:80:82:
                    82:d3:a9:d8:f3:6b:eb:d7:a1:a8:fc:54:88:e3:76:
                    8f:3a:35:cf:54:60:91:07:b9:35:cf:58:26:d7:8d:
                    2f:a3:fa:a9:63:78:10:08:63:6c:a8:ea:ad:5b:7a:
                    c0:54:9b:f5:cb:bf:6b:55:00:db:7a:bd:0d:5c:9b:
                    e0:62:f7:80:9b:cd:65:79:99:88:83:d8:8d:85:14:
                    bc:96:5c:8c:4e:db:99:a6:93:11:1c:ce:10:e8:e0:
                    37:9b:cd:3d:cb:1e:f0:24:09:e3:d2:c8:9b:13:63:
                    42:e3:12:1e:7a:d3:22:12:bb:a4:e1:09:6b:a8:5a:
                    65:55:54:23:e0:4e:7e:54:9e:42:41:59:65:92:8a:
                    51:4f:da:67:83:63:38:3c:00:34:50:79:39:f4:3d:
                    8c:c9:35:99:a1:10:06:56:d2:cc:6c:a8:fb:ab:ea:
                    0a:b7:43:2f:d8:b2:4c:df:33:0f:65:d9:61:0a:de:
                    77:2e:2d:b7:10:ed:2e:90:aa:27:b9:fe:8e:e3:07:
                    5d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:16:6F:E6:26:25:7F:DC:A0:7E:2C:DE:7A:B8:D9:3D:40:2F:12:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a870679-debe-348f-a33d-6e54916a83ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3ef::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:d4:97:81:70:65:fe:6a:c4:0e:f4:b9:f0:8b:ff:38:56:0f:
         2e:9f:c1:84:97:42:ff:d1:e5:b8:f7:0b:b5:02:42:07:d0:41:
         93:69:c0:31:03:69:33:4e:0c:ba:bd:db:ca:fd:8f:1c:7b:e8:
         7a:9f:15:a9:df:a2:d5:ba:5f:b6:bb:22:4b:73:19:b1:82:c8:
         a3:20:b4:38:d4:88:ca:62:2b:6e:f3:15:b8:7f:c4:97:02:f2:
         4d:48:81:04:04:04:26:50:1b:4a:c4:b8:ce:3c:5e:9d:e2:4f:
         3a:2f:b5:af:36:aa:ee:89:eb:2c:b8:1a:ad:f2:ac:55:4b:31:
         89:7c:c6:24:a7:e7:dc:f6:b8:18:e3:49:df:07:85:3d:b7:ef:
         5a:2f:6a:c7:ec:95:d7:13:7e:71:28:28:cd:cc:a5:58:a2:b1:
         b1:68:57:17:16:ec:13:96:f3:28:70:97:bc:b8:5e:ed:f3:05:
         90:23:6d:03:34:67:46:58:7c:26:bb:ac:d4:4c:d0:ea:eb:04:
         86:7c:06:21:89:5f:43:f8:92:c7:32:c5:de:f0:88:e5:a9:be:
         aa:86:d5:2b:ee:77:ea:12:69:8a:d0:2b:c9:6a:c6:ee:a4:88:
         11:6a:a2:1e:d2:0a:54:89:9d:90:43:9d:90:a8:d0:31:01:5a:
         b5:b5:42:bd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzh/N/b8Dnrs7vxEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDIxNjE0MDA0MFoXDTI2MDUxNzEzMDA0MFowLzEtMCsGA1UEAxMk
ZDUyMjI0M2YtMTFmMC00Mjk5LTk1Y2QtOTZiYmQyMTI2MWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ21E0oay1dnjQX6mxuozY7hbILtMfh9E3GL
amNpeiqCjDq0UBh0DJ10PZYtySKGpVP1e5JX7IAKgIKC06nY82vr16Go/FSI43aP
OjXPVGCRB7k1z1gm140vo/qpY3gQCGNsqOqtW3rAVJv1y79rVQDber0NXJvgYveA
m81leZmIg9iNhRS8llyMTtuZppMRHM4Q6OA3m809yx7wJAnj0sibE2NC4xIeetMi
Eruk4QlrqFplVVQj4E5+VJ5CQVllkopRT9png2M4PAA0UHk59D2MyTWZoRAGVtLM
bKj7q+oKt0Mv2LJM3zMPZdlhCt53Li23EO0ukKonuf6O4wddOQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN4Wb+YmJX/coH4s3nq42T1ALxI+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGE4NzA2NzktZGViZS0z
NDhmLWEzM2QtNmU1NDkxNmE4M2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPv
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGDUl4FwZf5qxA70ufCL/zhWDy6fwYSXQv/R5bj3C7UCQgfQQZNp
wDEDaTNODLq928r9jxx76HqfFanfotW6X7a7IktzGbGCyKMgtDjUiMpiK27zFbh/
xJcC8k1IgQQEBCZQG0rEuM48Xp3iTzovta82qu6J6yy4Gq3yrFVLMYl8xiSn59z2
uBjjSd8HhT2371ovasfsldcTfnEoKM3MpViisbFoVxcW7BOW8yhwl7y4Xu3zBZAj
bQM0Z0ZYfCa7rNRM0OrrBIZ8BiGJX0P4kscyxd7wiOWpvqqG1Svud+oSaYrQK8lq
xu6kiBFqoh7SClSJnZBDnZCo0DEBWrW1Qr0=
-----END CERTIFICATE-----
Generated at Sun Mar 1 19:00:03 2026 by rpki-client