Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a62bb16d-8f8b-39cc-9333-dfee8560816b.roa
File:                     a62bb16d-8f8b-39cc-9333-dfee8560816b.roa (raw, json)
Hash identifier:          aydKuZxCOz9E0lT3IXRe6W+yP0Zzyp4uVfuHQYnQHPk=
Subject key identifier:   1A:CA:51:B8:55:D8:18:3E:81:B3:7F:48:A6:F4:E4:9C:5E:11:3A:BB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7C9D8108EAAF41DC92F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a62bb16d-8f8b-39cc-9333-dfee8560816b.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     60456
IP address blocks:        2001:470:1df::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:c9:d8:10:8e:aa:f4:1d:c9:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=41fdbaa5-45ee-4bd7-870f-96e974b8456c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:d3:56:e6:34:93:b5:b2:18:e5:de:22:54:
                    5f:21:48:0a:95:ac:0b:93:7e:f0:fd:0b:4d:d6:e6:
                    5d:5a:1a:92:22:af:60:9f:6b:ec:3b:29:10:92:48:
                    ed:81:39:b5:7a:43:e9:6b:3b:76:f4:c1:53:bf:b2:
                    96:97:95:2d:53:6c:85:9f:cc:14:a3:84:80:45:68:
                    55:7e:6b:15:56:8c:d5:67:29:23:7f:ed:03:d8:75:
                    bb:4e:3d:96:57:a9:10:63:21:1e:cb:4f:5a:85:5d:
                    10:e3:bb:f1:65:a5:ba:a1:1b:9a:c6:28:6a:ac:6c:
                    ce:09:59:fb:07:36:e2:9e:da:b5:d1:72:6e:34:8b:
                    03:a8:f5:df:44:18:0a:7e:3c:48:ef:17:46:2c:1b:
                    0c:d5:8c:e3:0a:f3:ce:25:5a:2c:6c:ca:75:2e:d5:
                    3b:2d:51:b9:8e:59:ec:35:40:e9:de:02:1e:35:ee:
                    b6:c4:15:70:fc:ae:fb:96:5f:c3:a9:61:1b:41:3a:
                    ea:cb:a9:9d:f8:3c:8b:1f:a9:be:d5:b9:9c:05:d7:
                    77:ac:31:e1:62:36:b7:65:36:6c:63:e5:4e:64:ac:
                    10:79:c4:2b:5c:57:f6:cd:61:91:82:b4:da:d3:99:
                    55:4f:51:4b:ff:27:7f:68:66:8f:90:84:9a:b5:bd:
                    89:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CA:51:B8:55:D8:18:3E:81:B3:7F:48:A6:F4:E4:9C:5E:11:3A:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a62bb16d-8f8b-39cc-9333-dfee8560816b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1df::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:f0:e0:27:4e:18:11:c3:f6:88:b9:8b:60:65:15:11:0b:30:
         c2:35:81:9b:28:c6:dd:19:ce:b8:b0:da:a1:22:0c:9e:2b:a9:
         c1:89:92:52:1f:34:24:6f:03:49:49:95:0b:9d:96:f2:49:ea:
         3c:67:f9:76:c4:db:6a:e3:82:94:1f:d7:6b:4a:b6:66:b0:59:
         05:ac:49:cc:51:17:aa:03:58:db:36:40:bd:c4:90:5b:58:42:
         6e:0e:1e:11:c9:dc:c3:0b:0d:a9:c7:8b:a0:2c:78:ae:78:a1:
         e5:cd:5a:e2:1e:38:a8:7d:52:7b:98:db:3d:fe:e3:06:78:a0:
         6e:f8:4f:e1:24:2c:d8:9a:4f:a2:c3:4d:12:25:a2:65:a8:05:
         32:08:9e:3b:00:4d:2f:93:26:ad:cf:cf:6b:71:de:22:d1:3c:
         8a:d8:5b:49:e8:d2:b7:6c:5d:20:82:fa:3a:b6:4d:43:ea:06:
         9a:1c:ee:7d:f1:d9:d2:c9:51:c2:ef:2e:6e:da:d5:83:62:e1:
         34:a0:a6:15:0b:76:a4:a3:01:29:6f:82:c2:c0:f1:c4:58:f8:
         d6:49:33:e5:de:e4:92:40:17:d3:93:38:cd:5b:53:73:82:69:
         ab:a0:37:76:04:5f:38:a6:25:2b:60:cf:35:67:8d:81:a9:dd:
         1d:f7:ae:d7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuZ18nYEI6q9B3JL4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk
NDFmZGJhYTUtNDVlZS00YmQ3LTg3MGYtOTZlOTc0Yjg0NTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5jTVuY0k7WyGOXeIlRfIUgKlawLk37w/QtN
1uZdWhqSIq9gn2vsOykQkkjtgTm1ekPpazt29MFTv7KWl5UtU2yFn8wUo4SARWhV
fmsVVozVZykjf+0D2HW7Tj2WV6kQYyEey09ahV0Q47vxZaW6oRuaxihqrGzOCVn7
Bzbintq10XJuNIsDqPXfRBgKfjxI7xdGLBsM1YzjCvPOJVosbMp1LtU7LVG5jlns
NUDp3gIeNe62xBVw/K77ll/DqWEbQTrqy6md+DyLH6m+1bmcBdd3rDHhYja3ZTZs
Y+VOZKwQecQrXFf2zWGRgrTa05lVT1FL/yd/aGaPkISatb2JJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBrKUbhV2Bg+gbN/SKb05JxeETq7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTYyYmIxNmQtOGY4Yi0z
OWNjLTkzMzMtZGZlZTg1NjA4MTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHf
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACvw4CdOGBHD9oi5i2BlFRELMMI1gZsoxt0Zzriw2qEiDJ4rqcGJ
klIfNCRvA0lJlQudlvJJ6jxn+XbE22rjgpQf12tKtmawWQWsScxRF6oDWNs2QL3E
kFtYQm4OHhHJ3MMLDanHi6AseK54oeXNWuIeOKh9UnuY2z3+4wZ4oG74T+EkLNia
T6LDTRIlomWoBTIInjsATS+TJq3Pz2tx3iLRPIrYW0no0rdsXSCC+jq2TUPqBpoc
7n3x2dLJUcLvLm7a1YNi4TSgphULdqSjASlvgsLA8cRY+NZJM+Xe5JJAF9OTOM1b
U3OCaaugN3YEXzimJStgzzVnjYGp3R33rtc=
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:24:14 2025 by rpki-client