Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6e6b7f94-3895-3e5e-b1c8-62b0dd9e660e.roa
File:                     6e6b7f94-3895-3e5e-b1c8-62b0dd9e660e.roa (raw, json)
Hash identifier:          5PdyUnugNhk4GvKsWH9Qq1YDiITdqA9WWWpGmoURO6w=
Subject key identifier:   32:A2:2E:D0:8C:BD:C9:F6:CC:D0:91:F4:C7:2B:7E:55:53:ED:EE:7E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F4989036A0EA9220667CDB87C
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6e6b7f94-3895-3e5e-b1c8-62b0dd9e660e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     6379
IP address blocks:        2001:470:489::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:03:6a:0e:a9:22:06:67:cd:b8:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ed211cc8-4fdb-4d84-88c7-feef223e8677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:f1:98:9d:1f:cd:77:a7:48:56:4f:1b:bc:
                    eb:04:94:6c:77:d8:55:d6:f3:5d:ee:ff:ab:9e:ba:
                    8e:8c:d9:50:ee:b3:86:51:51:b8:01:71:77:be:90:
                    87:40:a7:cb:40:5a:51:30:15:d6:a7:1f:77:8f:18:
                    c8:99:a8:3b:87:e8:6a:24:06:d4:cf:e3:54:b5:09:
                    6e:c2:b9:40:be:0b:95:b8:5e:ee:c5:af:b7:a7:e2:
                    8b:72:cc:03:8f:25:e0:3e:ad:4b:2f:07:ad:8a:8f:
                    ae:f2:d4:7b:79:82:85:2e:d4:85:09:9a:af:7a:22:
                    f8:18:57:13:cb:42:11:ee:3e:97:92:b1:81:9d:bb:
                    33:b8:22:83:25:ba:0c:e0:d8:d2:e1:cc:d0:25:13:
                    74:3e:c5:bb:b2:5f:bd:ea:fb:7e:e4:c8:ae:ae:71:
                    38:51:45:ab:3c:bf:83:98:5b:de:f9:7c:c0:17:5d:
                    c3:1c:98:c2:8d:53:2e:f0:16:ff:43:f2:6e:08:c7:
                    19:78:2f:b8:f4:61:22:55:19:a2:01:ba:3d:0e:20:
                    ae:ec:f8:89:83:72:54:7a:eb:d9:91:83:07:72:30:
                    d2:56:20:15:6b:68:6c:95:69:07:19:21:ba:aa:fa:
                    26:8f:49:2a:43:23:5a:ac:d2:2d:12:95:dd:32:79:
                    17:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A2:2E:D0:8C:BD:C9:F6:CC:D0:91:F4:C7:2B:7E:55:53:ED:EE:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6e6b7f94-3895-3e5e-b1c8-62b0dd9e660e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:489::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:75:51:40:76:e8:2c:b4:7f:ce:d5:78:df:50:93:6d:f2:4c:
         1c:9e:18:6d:36:7f:68:ed:54:12:79:9e:fe:ad:7c:51:6d:6c:
         3d:42:53:f9:07:24:23:9e:23:71:a1:dc:7a:29:cd:75:5a:56:
         d6:c9:73:a6:f4:fb:be:e5:13:e6:ba:95:53:ee:2e:df:d8:3b:
         28:93:af:08:79:bd:3b:51:05:11:22:98:f9:c9:e7:c8:35:45:
         52:e8:ae:40:1d:f1:6d:65:1b:87:88:2d:66:5c:f0:8b:0d:21:
         3d:15:8e:c9:66:4b:aa:93:38:06:06:2a:a1:a6:f6:be:13:a2:
         98:da:b0:63:09:0c:e3:87:ec:a2:4b:e3:75:70:2f:9c:9f:2c:
         2d:c9:9b:66:a1:f9:7f:7e:e5:27:6a:89:1a:5c:89:59:e9:cd:
         24:61:8e:ad:a0:f1:3e:12:6e:78:de:be:6c:3d:db:93:d9:17:
         bf:82:f6:55:d1:96:e2:93:62:8a:1b:ab:6d:0f:d3:96:2d:73:
         07:ec:4c:4a:db:b5:5b:8c:77:4b:26:d7:31:51:c4:6e:96:02:
         7f:19:1b:67:2e:99:64:21:e0:fb:58:de:fa:01:28:8e:8c:a0:
         e3:17:21:1a:43:30:9b:79:f0:e2:27:f9:ae:a4:54:17:f9:2c:
         1b:32:1d:80
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiQNqDqkiBmfNuHwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZWQyMTFjYzgtNGZkYi00ZDg0LTg4YzctZmVlZjIyM2U4Njc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8PxmJ0fzXenSFZPG7zrBJRsd9hV1vNd7v+r
nrqOjNlQ7rOGUVG4AXF3vpCHQKfLQFpRMBXWpx93jxjImag7h+hqJAbUz+NUtQlu
wrlAvguVuF7uxa+3p+KLcswDjyXgPq1LLwetio+u8tR7eYKFLtSFCZqveiL4GFcT
y0IR7j6XkrGBnbszuCKDJboM4NjS4czQJRN0PsW7sl+96vt+5MiurnE4UUWrPL+D
mFve+XzAF13DHJjCjVMu8Bb/Q/JuCMcZeC+49GEiVRmiAbo9DiCu7PiJg3JUeuvZ
kYMHcjDSViAVa2hslWkHGSG6qvomj0kqQyNarNItEpXdMnkXLwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDKiLtCMvcn2zNCR9McrflVT7e5+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNmU2YjdmOTQtMzg5NS0z
ZTVlLWIxYzgtNjJiMGRkOWU2NjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcASJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEh1UUB26Cy0f87VeN9Qk23yTByeGG02f2jtVBJ5nv6tfFFtbD1C
U/kHJCOeI3Gh3HopzXVaVtbJc6b0+77lE+a6lVPuLt/YOyiTrwh5vTtRBREimPnJ
58g1RVLorkAd8W1lG4eILWZc8IsNIT0VjslmS6qTOAYGKqGm9r4TopjasGMJDOOH
7KJL43VwL5yfLC3Jm2ah+X9+5SdqiRpciVnpzSRhjq2g8T4Sbnjevmw925PZF7+C
9lXRluKTYoobq20P05YtcwfsTErbtVuMd0sm1zFRxG6WAn8ZG2cumWQh4PtY3voB
KI6MoOMXIRpDMJt58OIn+a6kVBf5LBsyHYA=
-----END CERTIFICATE-----
Generated at Fri Sep 25 21:40:22 2026 by rpki-client