Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/80a6ad5d-30b9-303a-a6ea-dda179511741.roa
File:                     80a6ad5d-30b9-303a-a6ea-dda179511741.roa (raw, json)
Hash identifier:          gfeje/y7OgVoehOKqnA1qy3cIP6vChDVlZvD11UjT3E=
Subject key identifier:   86:5A:F3:B4:24:8C:7A:46:C5:90:C9:81:5E:A1:AE:4A:F8:48:04:A8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EAA63EC767B31015CB85C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/80a6ad5d-30b9-303a-a6ea-dda179511741.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     16468
IP address blocks:        2001:470:1ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:a6:3e:c7:67:b3:10:15:cb:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=1dbb5e06-c6af-46d5-adb5-8f20fd173dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bf:31:12:c6:d2:8f:97:47:1b:cb:a5:44:c5:
                    b1:ce:10:d6:a7:2a:1c:86:7e:10:a1:9f:6a:fc:dd:
                    0d:fc:6b:4f:f7:5e:eb:d0:21:d8:fd:0b:1b:99:a2:
                    9b:b4:2e:14:e5:e3:1f:15:43:62:9a:34:4c:09:09:
                    28:9c:bd:75:3b:d5:d7:2a:4d:94:50:0c:21:f4:62:
                    6e:c7:28:94:76:a4:fb:28:78:08:34:ed:3e:5b:7a:
                    f6:d4:1b:40:a8:b2:99:66:84:b6:63:97:58:a1:40:
                    d2:e1:db:78:63:29:f5:7f:02:bc:0e:d0:57:30:87:
                    09:b4:a1:50:c4:c9:1c:e5:ec:5f:25:6a:59:9b:15:
                    99:61:ea:8f:2e:5f:83:a2:ee:e4:93:fd:3e:70:7b:
                    f5:d6:69:e1:00:91:5f:bf:c4:ae:24:6f:54:50:1b:
                    a6:fe:bf:b0:72:ea:19:c9:9e:3d:3e:a5:44:37:c1:
                    bf:7d:c7:47:bb:48:17:04:8c:d4:4d:f8:85:f6:53:
                    28:f8:ee:a2:80:b2:0e:40:0b:38:19:fd:cd:dd:4c:
                    1c:d0:8a:3a:77:4a:45:94:8d:9d:ef:43:0c:59:9f:
                    48:91:ee:75:9e:b2:96:13:4f:f0:90:ff:1d:33:b3:
                    53:bb:9c:e9:a7:59:83:2a:0d:4d:45:95:1a:27:74:
                    78:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5A:F3:B4:24:8C:7A:46:C5:90:C9:81:5E:A1:AE:4A:F8:48:04:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/80a6ad5d-30b9-303a-a6ea-dda179511741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:69:43:c5:3e:76:50:48:c3:03:65:fd:fe:19:82:4c:04:28:
         b7:f4:2d:00:d2:3d:36:a5:f9:ab:c8:6d:14:97:f1:14:68:a6:
         b4:27:dd:0d:11:1f:0d:7e:e8:7f:65:3b:0c:8c:bd:f8:4f:2d:
         0f:f7:a3:d5:67:b4:b2:d4:c2:77:14:2d:6c:c5:ed:40:78:bd:
         33:66:74:94:aa:e6:c0:cf:06:74:fd:93:cf:5c:7c:8e:38:78:
         1c:8a:12:4e:a4:3b:13:e9:70:01:ea:bb:94:71:8d:c4:0e:5a:
         6e:f1:1e:13:9f:dc:70:05:90:b6:ff:4b:a1:29:b6:8e:1f:09:
         f8:76:e4:0e:ad:8b:c0:97:b7:8d:26:a8:c8:c0:64:79:48:55:
         19:ea:96:9b:e2:e2:9c:a6:8b:d4:8b:64:82:b5:53:a1:50:c7:
         76:a8:98:e6:0c:15:fa:7d:c5:0d:0c:e9:ca:5a:46:37:51:7b:
         6c:43:40:ca:7d:a4:57:02:9c:ce:6d:fe:c7:cb:7e:e2:09:e7:
         7b:60:08:23:e5:e7:97:eb:f5:1b:63:60:81:03:74:3b:fd:fa:
         e1:2d:2c:dd:8c:3b:81:e6:e3:a7:15:ae:ad:1b:f9:e4:e4:14:
         59:95:66:ff:32:ed:c9:90:94:04:71:c5:1b:91:82:6e:f6:31:
         c9:94:d5:38
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6qY+x2ezEBXLhcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
MWRiYjVlMDYtYzZhZi00NmQ1LWFkYjUtOGYyMGZkMTczZGM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr8xEsbSj5dHG8ulRMWxzhDWpyochn4QoZ9q
/N0N/GtP917r0CHY/QsbmaKbtC4U5eMfFUNimjRMCQkonL11O9XXKk2UUAwh9GJu
xyiUdqT7KHgINO0+W3r21BtAqLKZZoS2Y5dYoUDS4dt4Yyn1fwK8DtBXMIcJtKFQ
xMkc5exfJWpZmxWZYeqPLl+Dou7kk/0+cHv11mnhAJFfv8SuJG9UUBum/r+wcuoZ
yZ49PqVEN8G/fcdHu0gXBIzUTfiF9lMo+O6igLIOQAs4Gf3N3Uwc0Io6d0pFlI2d
70MMWZ9Ike51nrKWE0/wkP8dM7NTu5zpp1mDKg1NRZUaJ3R4VwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIZa87QkjHpGxZDJgV6hrkr4SASoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODBhNmFkNWQtMzBiOS0z
MDNhLWE2ZWEtZGRhMTc5NTExNzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAH/
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE9pQ8U+dlBIwwNl/f4ZgkwEKLf0LQDSPTal+avIbRSX8RRoprQn
3Q0RHw1+6H9lOwyMvfhPLQ/3o9VntLLUwncULWzF7UB4vTNmdJSq5sDPBnT9k89c
fI44eByKEk6kOxPpcAHqu5RxjcQOWm7xHhOf3HAFkLb/S6Epto4fCfh25A6ti8CX
t40mqMjAZHlIVRnqlpvi4pymi9SLZIK1U6FQx3aomOYMFfp9xQ0M6cpaRjdRe2xD
QMp9pFcCnM5t/sfLfuIJ53tgCCPl55fr9RtjYIEDdDv9+uEtLN2MO4Hm46cVrq0b
+eTkFFmVZv8y7cmQlARxxRuRgm72McmU1Tg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:04:37 2026 by rpki-client