Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87222be5-585b-3919-9225-cc81c26d451e.roa
File:                     87222be5-585b-3919-9225-cc81c26d451e.roa (raw, json)
Hash identifier:          D/hcUqxIWrthU5HzVksOfIErWsLU74ygOTGOv/05NDg=
Subject key identifier:   39:E4:5C:DD:13:A1:26:5A:6E:19:05:48:E7:49:03:60:96:B0:6F:4A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D07ACEABC48F314549E651F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87222be5-585b-3919-9225-cc81c26d451e.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     150770
IP address blocks:        2001:470:3fd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:ea:bc:48:f3:14:54:9e:65:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=3cc035e8-e105-4e05-a525-d1051233ee05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:69:7f:95:a1:50:14:30:10:11:8e:f7:ad:61:
                    b9:e9:68:10:7e:37:43:cf:ff:42:cf:c0:97:be:00:
                    50:3c:5c:bd:49:71:bc:d1:4d:69:f4:d6:40:65:a2:
                    10:b9:3b:3a:48:77:fd:45:fa:e9:f7:3f:fb:40:c3:
                    e9:5d:2f:3f:44:73:88:5a:e2:a5:ff:44:23:3b:54:
                    2b:39:57:0a:4a:0a:9f:76:b2:4c:c2:c3:eb:d7:e0:
                    bf:43:7c:16:86:fa:8c:00:2f:ac:9c:69:a9:33:09:
                    20:f4:47:96:0d:5a:8e:15:2f:19:c4:b7:0a:fb:96:
                    02:30:3a:0a:e3:b8:35:f5:4c:fc:f9:b4:08:c3:2c:
                    86:19:f7:b5:68:78:ba:c9:d9:05:60:fb:44:4b:3f:
                    a5:6e:fc:4a:6b:ac:b2:2d:60:0b:35:02:cb:1e:76:
                    f6:69:57:3d:c2:1e:4e:ce:ba:ee:27:af:67:3e:aa:
                    63:90:1d:11:04:29:13:46:24:0a:fa:2f:58:2f:8e:
                    09:a0:0a:1e:76:03:ec:09:03:ae:c5:65:29:5a:ac:
                    26:56:2d:dd:99:4a:34:12:e5:d0:45:13:81:ee:49:
                    77:ea:cd:ae:3c:98:7a:3e:b1:bd:20:5a:ef:e4:dc:
                    97:ea:d8:6a:44:b8:00:cb:32:79:4e:49:2d:92:eb:
                    87:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E4:5C:DD:13:A1:26:5A:6E:19:05:48:E7:49:03:60:96:B0:6F:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87222be5-585b-3919-9225-cc81c26d451e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:2f:ba:41:26:5d:f6:79:79:b1:b4:53:c4:46:a0:d8:ec:e7:
         1b:5d:36:c4:ec:32:4b:af:25:79:18:e8:d2:44:d5:95:04:13:
         10:cd:c4:6e:0a:8c:5b:93:3b:e4:79:3d:be:19:c2:01:56:9b:
         1a:7c:c9:28:ed:fe:71:6f:fd:51:62:6d:fc:8a:dc:d0:7b:74:
         44:bf:1e:70:d3:a2:65:9a:ab:5f:1d:87:d1:92:20:ab:21:3d:
         09:2c:84:1d:0d:da:fd:6d:a9:08:5b:f0:25:d0:24:de:03:1f:
         3c:79:f5:3d:48:e3:0a:51:5a:46:fc:e6:e0:c7:b3:05:f5:38:
         29:da:d8:71:4d:19:64:d0:5d:70:89:bb:32:a7:ea:61:f6:66:
         5b:99:64:b1:d1:3a:11:35:f4:a9:b0:24:6f:5b:ab:14:99:3a:
         5a:72:9f:d2:a5:ec:d1:27:da:bb:fb:14:1e:14:36:74:49:7a:
         e9:4d:b2:bd:5b:66:9f:40:6e:82:03:c4:c6:22:ad:32:a4:49:
         fa:c1:84:d9:6f:44:09:79:5c:96:e1:4d:ec:a9:47:98:0f:89:
         df:2c:3c:2d:83:c6:1a:4e:a4:ef:d8:fb:88:3b:b6:a6:ef:a5:
         5c:02:39:f4:be:df:52:59:6d:9b:c3:64:78:59:21:41:7c:83:
         bd:a1:d8:3c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0HrOq8SPMUVJ5lH4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk
M2NjMDM1ZTgtZTEwNS00ZTA1LWE1MjUtZDEwNTEyMzNlZTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2l/laFQFDAQEY73rWG56WgQfjdDz/9Cz8CX
vgBQPFy9SXG80U1p9NZAZaIQuTs6SHf9Rfrp9z/7QMPpXS8/RHOIWuKl/0QjO1Qr
OVcKSgqfdrJMwsPr1+C/Q3wWhvqMAC+snGmpMwkg9EeWDVqOFS8ZxLcK+5YCMDoK
47g19Uz8+bQIwyyGGfe1aHi6ydkFYPtESz+lbvxKa6yyLWALNQLLHnb2aVc9wh5O
zrruJ69nPqpjkB0RBCkTRiQK+i9YL44JoAoedgPsCQOuxWUpWqwmVi3dmUo0EuXQ
RROB7kl36s2uPJh6PrG9IFrv5NyX6thqRLgAyzJ5TkktkuuHgQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDnkXN0ToSZabhkFSOdJA2CWsG9KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODcyMjJiZTUtNTg1Yi0z
OTE5LTkyMjUtY2M4MWMyNmQ0NTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHEvukEmXfZ5ebG0U8RGoNjs5xtdNsTsMkuvJXkY6NJE1ZUEExDN
xG4KjFuTO+R5Pb4ZwgFWmxp8ySjt/nFv/VFibfyK3NB7dES/HnDTomWaq18dh9GS
IKshPQkshB0N2v1tqQhb8CXQJN4DHzx59T1I4wpRWkb85uDHswX1OCna2HFNGWTQ
XXCJuzKn6mH2ZluZZLHROhE19KmwJG9bqxSZOlpyn9Kl7NEn2rv7FB4UNnRJeulN
sr1bZp9AboIDxMYirTKkSfrBhNlvRAl5XJbhTeypR5gPid8sPC2DxhpOpO/Y+4g7
tqbvpVwCOfS+31JZbZvDZHhZIUF8g72h2Dw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:24:07 2026 by rpki-client