Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6cf0dd9b-939b-3d2b-ae62-5c8332e1ccc7.roa
File:                     6cf0dd9b-939b-3d2b-ae62-5c8332e1ccc7.roa (raw, json)
Hash identifier:          0APngqX7rjLpRAeK7Yw47Eah7qG5PDBIXMCbBaWtJcU=
Subject key identifier:   A3:2E:05:13:E0:31:39:FE:3B:94:3E:B4:1A:E6:69:20:03:3F:73:76
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D6C0FA88D07E6324A70CEF900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6cf0dd9b-939b-3d2b-ae62-5c8332e1ccc7.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     51395
IP address blocks:        2001:470:4a8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:a8:8d:07:e6:32:4a:70:ce:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=5500f3cd-094c-4ebb-927b-39fac90b5982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:40:81:8a:fd:d8:e4:f2:64:8d:2a:30:a5:
                    72:7b:08:d7:05:0c:3d:44:83:0b:b2:13:20:8d:3a:
                    ff:c6:02:79:0d:d8:74:ab:74:e0:d9:6c:67:88:32:
                    7e:f3:52:b1:3b:49:b8:e3:c7:d0:2b:01:40:82:81:
                    63:c7:e0:9a:0b:5d:43:52:f2:de:1e:b1:1c:54:a1:
                    e4:a7:0b:51:9e:dd:00:43:df:37:fc:d7:3a:5b:bc:
                    49:b4:e0:a0:5e:ca:ba:f6:6c:9c:dd:ff:ef:c3:ff:
                    73:e1:c7:63:c5:ee:7c:45:c2:42:82:46:9d:3d:d9:
                    18:62:8d:d5:b9:ba:6a:eb:04:3a:2c:32:2d:93:b5:
                    da:6f:6c:dc:35:53:8f:29:cc:53:e5:5b:0c:5d:8c:
                    aa:4e:05:dd:1a:e2:60:b4:2d:14:f6:8f:f7:36:f4:
                    c9:39:34:61:25:9c:1f:ad:77:9c:12:ce:d0:45:a9:
                    90:4c:a0:f3:a9:e0:71:cc:c3:19:b2:4b:e9:aa:f3:
                    fd:cf:5e:04:97:a8:32:ba:cd:c6:f1:8b:f2:af:e4:
                    44:ac:94:e5:4c:7d:a9:b7:ab:0d:22:72:b4:ab:ab:
                    d2:93:66:ac:85:6d:83:f6:9e:7f:c7:0a:0a:d2:72:
                    78:56:79:e6:12:66:01:2a:8a:60:7b:bc:f8:d2:d6:
                    53:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2E:05:13:E0:31:39:FE:3B:94:3E:B4:1A:E6:69:20:03:3F:73:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6cf0dd9b-939b-3d2b-ae62-5c8332e1ccc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4a8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:24:4b:89:c7:d2:3d:43:49:11:b8:29:cf:c1:5e:cc:5e:8e:
         1d:0e:4d:0c:7e:91:83:54:dd:85:4f:18:9b:35:5f:82:f6:a9:
         2b:90:5e:cc:85:d0:82:84:77:e9:29:53:88:ba:34:aa:57:a9:
         57:05:12:d4:9d:a6:36:42:c5:d4:b3:1e:50:0e:38:a5:8b:84:
         bf:8b:9f:ca:31:e4:70:f3:5f:2d:3c:0f:75:5f:0d:e5:da:ed:
         9d:52:87:bc:26:c3:bf:e8:0f:bd:86:41:95:3e:07:d9:d7:1a:
         9f:0e:b3:75:65:a3:c7:12:31:49:76:cd:00:98:a5:aa:c4:c9:
         a3:a5:c8:37:f3:50:3c:cb:c9:b6:f2:f2:1e:11:a6:94:16:aa:
         54:4c:df:e7:04:6c:bf:89:54:a4:12:63:f5:33:79:2b:88:df:
         3a:0e:b3:cb:31:e9:28:43:87:cc:61:a3:77:f8:dd:00:1d:8b:
         09:4a:4a:d2:27:3c:64:f2:18:95:cf:3d:2c:f2:4c:72:f7:b2:
         02:0b:87:41:59:78:6b:46:9d:82:8e:a2:c1:83:3a:62:da:cf:
         7f:8a:0e:c1:44:62:a2:ec:d0:39:cc:3d:9d:69:49:6e:df:23:
         bd:97:ae:1d:bb:5e:12:f8:26:dc:86:c8:ba:b2:45:03:de:2a:
         e4:26:09:51
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1sD6iNB+YySnDO+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk
NTUwMGYzY2QtMDk0Yy00ZWJiLTkyN2ItMzlmYWM5MGI1OTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5lAgYr92OTyZI0qMKVyewjXBQw9RIMLshMg
jTr/xgJ5Ddh0q3Tg2WxniDJ+81KxO0m448fQKwFAgoFjx+CaC11DUvLeHrEcVKHk
pwtRnt0AQ983/Nc6W7xJtOCgXsq69myc3f/vw/9z4cdjxe58RcJCgkadPdkYYo3V
ubpq6wQ6LDItk7Xab2zcNVOPKcxT5VsMXYyqTgXdGuJgtC0U9o/3NvTJOTRhJZwf
rXecEs7QRamQTKDzqeBxzMMZskvpqvP9z14El6gyus3G8Yvyr+RErJTlTH2pt6sN
InK0q6vSk2ashW2D9p5/xwoK0nJ4VnnmEmYBKopge7z40tZTrQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKMuBRPgMTn+O5Q+tBrmaSADP3N2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNmNmMGRkOWItOTM5Yi0z
ZDJiLWFlNjItNWM4MzMyZTFjY2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcASo
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD8kS4nH0j1DSRG4Kc/BXsxejh0OTQx+kYNU3YVPGJs1X4L2qSuQ
XsyF0IKEd+kpU4i6NKpXqVcFEtSdpjZCxdSzHlAOOKWLhL+Ln8ox5HDzXy08D3Vf
DeXa7Z1Sh7wmw7/oD72GQZU+B9nXGp8Os3Vlo8cSMUl2zQCYparEyaOlyDfzUDzL
ybby8h4RppQWqlRM3+cEbL+JVKQSY/UzeSuI3zoOs8sx6ShDh8xho3f43QAdiwlK
StInPGTyGJXPPSzyTHL3sgILh0FZeGtGnYKOosGDOmLaz3+KDsFEYqLs0DnMPZ1p
SW7fI72Xrh27XhL4JtyGyLqyRQPeKuQmCVE=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:19:30 2026 by rpki-client