Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/806b15f7-b6cb-3f35-ba57-9ebb86a2f49a.roa
File:                     806b15f7-b6cb-3f35-ba57-9ebb86a2f49a.roa (raw, json)
Hash identifier:          AbIhzxAijp/uBYUEkVTsjYZ7DyxzFGH5tD59sjx3bKE=
Subject key identifier:   27:EE:82:B9:6C:FC:08:78:E9:85:F9:BA:EE:85:11:F7:8D:74:14:4A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D83CABF6A6A92834E259E6780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/806b15f7-b6cb-3f35-ba57-9ebb86a2f49a.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     998
IP address blocks:        2001:470:335::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:bf:6a:6a:92:83:4e:25:9e:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=4c1b86d0-5f7d-426f-8282-f4df0e618560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:10:fc:83:14:f0:44:cc:fd:49:0a:b0:2e:9b:
                    97:7a:46:d4:31:fd:22:5e:89:50:3f:04:2f:95:16:
                    d1:a5:9e:f8:e1:77:ba:a3:48:37:ee:12:fc:1d:bd:
                    44:d8:ec:0d:d8:16:09:15:39:d4:38:13:04:c7:f7:
                    fd:78:da:35:01:ad:d5:aa:57:71:98:a1:82:a5:0e:
                    04:85:55:2c:8d:b2:d7:92:19:69:26:18:19:b1:46:
                    e7:54:00:d1:ad:81:23:b3:74:ad:67:cf:4a:39:3a:
                    57:ac:9a:68:cf:63:66:ad:e9:5b:09:26:25:98:49:
                    d3:15:01:fd:27:9d:f8:1b:68:e9:a4:56:ff:6f:ff:
                    92:3d:e6:f7:d8:d6:29:d0:66:35:00:f8:11:de:1f:
                    a8:08:25:d0:48:d8:3d:78:90:04:19:4d:20:3b:21:
                    2f:34:49:22:fb:28:0d:34:83:8a:fb:62:a9:cb:40:
                    10:4b:6a:61:e4:29:27:45:4f:a9:03:58:f0:84:7c:
                    c2:e0:0c:49:a8:82:dc:38:28:e4:d4:8b:5a:93:f6:
                    99:e4:85:46:d4:70:ba:3f:54:c6:76:71:a9:49:65:
                    15:11:7c:eb:bc:94:e8:05:95:17:49:c9:c9:59:77:
                    26:cf:5a:6e:ae:f5:da:48:ad:0a:2b:72:50:df:a2:
                    ae:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EE:82:B9:6C:FC:08:78:E9:85:F9:BA:EE:85:11:F7:8D:74:14:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/806b15f7-b6cb-3f35-ba57-9ebb86a2f49a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:335::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:c4:b0:a6:cd:d3:98:98:f4:85:2c:72:bd:91:da:09:46:5e:
         67:ac:b0:2a:51:0a:be:aa:3b:b8:1c:f4:90:b9:92:52:25:d7:
         34:de:c0:5f:15:86:08:d6:ef:ee:31:4c:ed:28:eb:b2:2b:ad:
         60:32:76:17:cd:0e:e9:17:40:47:ca:80:d4:a1:e7:1f:e3:17:
         ff:26:b5:8e:ea:f1:51:2f:3e:1a:f5:21:c6:de:43:a2:23:b3:
         11:c4:df:ee:46:80:51:5a:b7:36:d7:43:11:24:7c:87:7c:30:
         c2:cf:7f:77:4a:53:be:58:5b:51:4b:af:f6:e0:e7:6c:bd:d1:
         5c:57:5c:dd:ac:06:18:66:7c:dc:73:4f:67:6e:e0:1f:bb:a6:
         39:49:4a:b7:04:a7:76:8d:b0:73:aa:79:5a:0c:a1:8d:7c:66:
         9a:bc:b8:5b:f1:e4:61:96:49:01:15:b6:43:cf:e3:4f:62:1f:
         ad:f3:b7:f7:36:a2:f4:6c:f6:0b:e8:4c:a4:e8:2c:52:1c:8b:
         17:12:3c:bb:78:28:03:19:b7:66:27:5f:e9:f6:0b:98:b7:dd:
         9c:b7:4f:5f:d5:27:0c:24:24:ab:4a:4d:67:7b:9a:99:46:f7:
         ce:10:c1:21:f6:81:90:46:45:4d:1e:1d:50:ec:46:5c:06:d8:
         0f:ef:3f:51
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2Dyr9qapKDTiWeZ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
NGMxYjg2ZDAtNWY3ZC00MjZmLTgyODItZjRkZjBlNjE4NTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+BD8gxTwRMz9SQqwLpuXekbUMf0iXolQPwQv
lRbRpZ744Xe6o0g37hL8Hb1E2OwN2BYJFTnUOBMEx/f9eNo1Aa3VqldxmKGCpQ4E
hVUsjbLXkhlpJhgZsUbnVADRrYEjs3StZ89KOTpXrJpoz2NmrelbCSYlmEnTFQH9
J534G2jppFb/b/+SPeb32NYp0GY1APgR3h+oCCXQSNg9eJAEGU0gOyEvNEki+ygN
NIOK+2Kpy0AQS2ph5CknRU+pA1jwhHzC4AxJqILcOCjk1Itak/aZ5IVG1HC6P1TG
dnGpSWUVEXzrvJToBZUXScnJWXcmz1purvXaSK0KK3JQ36KuwQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCfugrls/Ah46YX5uu6FEfeNdBRKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODA2YjE1ZjctYjZjYi0z
ZjM1LWJhNTctOWViYjg2YTJmNDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAM1
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFHEsKbN05iY9IUscr2R2glGXmessCpRCr6qO7gc9JC5klIl1zTe
wF8VhgjW7+4xTO0o67IrrWAydhfNDukXQEfKgNSh5x/jF/8mtY7q8VEvPhr1Icbe
Q6IjsxHE3+5GgFFatzbXQxEkfId8MMLPf3dKU75YW1FLr/bg52y90VxXXN2sBhhm
fNxzT2du4B+7pjlJSrcEp3aNsHOqeVoMoY18Zpq8uFvx5GGWSQEVtkPP409iH63z
t/c2ovRs9gvoTKToLFIcixcSPLt4KAMZt2YnX+n2C5i33Zy3T1/VJwwkJKtKTWd7
mplG984QwSH2gZBGRU0eHVDsRlwG2A/vP1E=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:59:44 2026 by rpki-client