Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/50b1952d-64f3-37d6-ad9b-033c71bf3304.roa
File:                     50b1952d-64f3-37d6-ad9b-033c71bf3304.roa (raw, json)
Hash identifier:          Pk74k2EzccPLrQsHZI5bzbfJn9HSE8xI1mc8qaa9aEo=
Subject key identifier:   10:CF:50:72:65:85:DA:E7:90:7E:55:1B:3E:FA:0F:90:EC:52:85:96
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D7E353680A2DF74A255F932C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/50b1952d-64f3-37d6-ad9b-033c71bf3304.roa
Signing time:             Mon 13 Apr 2026 13:00:30 +0000
ROA not before:           Mon 13 Apr 2026 13:00:30 +0000
ROA not after:            Sun 12 Jul 2026 13:00:30 +0000
asID:                     4846
IP address blocks:        2001:470:540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:35:36:80:a2:df:74:a2:55:f9:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 13 13:00:30 2026 GMT
            Not After : Jul 12 13:00:30 2026 GMT
        Subject: CN=87e27691-8c60-4796-a3ea-7ac040d13ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7e:29:2f:6f:31:ab:6c:34:9c:cd:a6:15:6b:
                    21:7f:fb:b5:5f:88:c6:6f:d2:8a:0d:69:f9:4c:dd:
                    97:8b:35:44:14:b4:96:4f:f1:7e:c6:ed:0b:80:a1:
                    c4:9a:26:66:9e:22:e1:c2:5b:28:2f:38:11:0b:c7:
                    da:7c:af:c5:5f:c5:1a:e1:10:6a:bb:6d:d0:5f:71:
                    50:77:32:b0:69:db:78:46:77:93:54:75:0f:f4:78:
                    a9:04:55:46:91:ca:31:b5:e1:49:5c:ad:fb:b2:af:
                    0a:e7:65:e1:5d:ad:f5:c0:c0:bd:e7:0d:4c:c2:97:
                    de:06:6d:4b:88:2e:64:7c:90:44:8d:af:76:89:3b:
                    68:cd:ca:09:e6:0a:ba:4d:ef:3a:ce:12:cd:02:f4:
                    75:79:84:b2:37:5d:51:ee:94:bf:42:9f:ac:b2:6f:
                    61:16:31:e2:ab:08:fe:e3:f2:e2:6f:21:e8:a8:1d:
                    21:a3:18:28:53:d3:2d:23:ac:16:e4:36:77:78:98:
                    01:af:f1:96:f9:6a:e5:0d:cb:5c:81:68:0a:fe:72:
                    81:ed:52:3a:d7:ef:e1:d3:70:9a:af:59:e7:b3:9c:
                    5a:52:bb:fe:4d:7e:cb:2e:fe:5c:e5:71:1c:d1:a8:
                    c0:17:81:5b:cc:30:42:25:03:43:db:8f:91:6d:d2:
                    da:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CF:50:72:65:85:DA:E7:90:7E:55:1B:3E:FA:0F:90:EC:52:85:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/50b1952d-64f3-37d6-ad9b-033c71bf3304.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:540::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:60:ce:d7:f0:30:76:0e:d4:57:d1:7a:40:b9:e6:5a:96:f2:
         fa:5c:a5:9f:91:50:49:a5:2b:31:b9:b9:92:57:3e:cc:0e:fc:
         3d:5d:79:1f:d5:bd:52:08:fc:87:0d:07:b3:3c:5e:cf:aa:3f:
         11:c8:0e:10:51:1b:68:ec:8c:49:6c:2e:55:0c:2c:99:f2:e0:
         a4:d1:2e:31:44:ef:64:0d:1e:d9:95:7b:ff:bd:29:ae:ac:f5:
         70:b0:ff:d7:e6:b9:cc:14:d2:48:44:51:0c:ac:eb:e1:83:41:
         ce:9e:1c:2c:98:3e:3d:97:30:0d:e3:b1:d0:5d:54:fb:d4:0f:
         24:24:09:4e:2d:43:3d:dd:1f:01:26:1f:d3:b3:93:d5:a6:ac:
         50:d2:6b:97:a5:01:ed:29:d9:fb:d4:e3:8c:90:78:51:76:76:
         86:bc:0b:cf:51:be:81:f2:d2:ed:de:9f:07:46:ab:47:3e:c2:
         01:0a:17:f3:e1:fb:b8:fe:da:e0:78:7f:31:87:f6:94:f4:4f:
         a2:a1:94:41:19:ba:13:c5:e6:ff:b7:1a:23:db:90:ac:68:74:
         72:70:35:74:8f:25:03:9a:73:38:ef:14:ad:b8:84:d1:08:23:
         75:45:86:ff:40:de:4a:6a:0d:fa:ed:af:cf:f0:a2:ed:4b:5a:
         e7:0a:af:dc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1+NTaAot90olX5MsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDQxMzEzMDAzMFoXDTI2MDcxMjEzMDAzMFowLzEtMCsGA1UEAxMk
ODdlMjc2OTEtOGM2MC00Nzk2LWEzZWEtN2FjMDQwZDEzZWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH4pL28xq2w0nM2mFWshf/u1X4jGb9KKDWn5
TN2XizVEFLSWT/F+xu0LgKHEmiZmniLhwlsoLzgRC8fafK/FX8Ua4RBqu23QX3FQ
dzKwadt4RneTVHUP9HipBFVGkcoxteFJXK37sq8K52XhXa31wMC95w1MwpfeBm1L
iC5kfJBEja92iTtozcoJ5gq6Te86zhLNAvR1eYSyN11R7pS/Qp+ssm9hFjHiqwj+
4/LibyHoqB0hoxgoU9MtI6wW5DZ3eJgBr/GW+WrlDctcgWgK/nKB7VI61+/h03Ca
r1nns5xaUrv+TX7LLv5c5XEc0ajAF4FbzDBCJQND24+RbdLa1QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBDPUHJlhdrnkH5VGz76D5DsUoWWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTBiMTk1MmQtNjRmMy0z
N2Q2LWFkOWItMDMzYzcxYmYzMzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAVA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAChgztfwMHYO1FfRekC55lqW8vpcpZ+RUEmlKzG5uZJXPswO/D1d
eR/VvVII/IcNB7M8Xs+qPxHIDhBRG2jsjElsLlUMLJny4KTRLjFE72QNHtmVe/+9
Ka6s9XCw/9fmucwU0khEUQys6+GDQc6eHCyYPj2XMA3jsdBdVPvUDyQkCU4tQz3d
HwEmH9Ozk9WmrFDSa5elAe0p2fvU44yQeFF2doa8C89RvoHy0u3enwdGq0c+wgEK
F/Ph+7j+2uB4fzGH9pT0T6KhlEEZuhPF5v+3GiPbkKxodHJwNXSPJQOaczjvFK24
hNEII3VFhv9A3kpqDfrtr8/wou1LWucKr9w=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:39:23 2026 by rpki-client