Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4a72d12-07e6-3ae6-97d5-c09435a5c0b7.roa
File:                     d4a72d12-07e6-3ae6-97d5-c09435a5c0b7.roa (raw, json)
Hash identifier:          s4YWt55J08BLgXigxx/b5hFPyD8bLFWPL34jw/gmI4w=
Subject key identifier:   0D:38:3E:A0:C3:3C:D7:78:5A:48:60:63:22:DA:E0:22:E1:92:4F:F6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584C794C76F96FB219E5D8EDF580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4a72d12-07e6-3ae6-97d5-c09435a5c0b7.roa
Signing time:             Sat 10 Jan 2026 02:00:31 +0000
ROA not before:           Sat 10 Jan 2026 02:00:31 +0000
ROA not after:            Fri 10 Apr 2026 01:00:31 +0000
asID:                     212341
IP address blocks:        2001:470:a7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:4c:76:f9:6f:b2:19:e5:d8:ed:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 10 02:00:31 2026 GMT
            Not After : Apr 10 01:00:31 2026 GMT
        Subject: CN=67ce502a-0674-4ef8-9877-59e4f5f12997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:92:7e:7c:ed:8a:1c:ed:8c:b2:22:fc:aa:d1:
                    2b:4a:ad:5d:1d:ce:73:24:e9:77:1c:16:5a:fb:45:
                    1c:b6:6d:e2:68:3a:be:de:15:e1:f3:9c:8c:31:46:
                    ca:fb:81:8c:e3:3f:b6:bd:e8:c2:91:aa:15:90:2e:
                    6f:20:0c:91:c7:db:29:95:11:30:b5:a3:16:14:cd:
                    de:04:49:f9:d3:1c:54:ad:83:15:ab:1e:64:4b:8a:
                    6c:79:ec:80:be:04:f5:24:f8:c4:30:36:1b:9c:18:
                    23:17:16:08:78:1d:72:d8:34:32:b3:5f:9c:71:48:
                    d3:33:3a:c4:e0:e0:6c:4b:d8:75:b7:2d:d8:aa:0d:
                    d2:d7:d8:b2:ff:d0:01:cd:54:59:c0:b2:ce:90:48:
                    78:c1:ad:24:c2:6b:d4:ff:b9:5e:b8:d4:d1:cb:4d:
                    6c:1b:5e:fd:94:68:75:ef:b2:e3:4a:04:b6:94:3d:
                    b6:8d:ef:bc:1a:66:1d:72:22:4e:07:47:22:af:c6:
                    48:44:77:07:4f:40:2b:5a:ce:32:38:7b:a6:75:a2:
                    5e:94:d9:ed:61:b5:ff:4c:51:4e:50:09:34:db:a6:
                    ce:85:e5:6c:cd:b5:1a:a8:b3:e4:90:e0:e7:ff:14:
                    93:8e:d6:76:20:c5:69:c8:f7:6d:ea:42:8e:c1:04:
                    9d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:38:3E:A0:C3:3C:D7:78:5A:48:60:63:22:DA:E0:22:E1:92:4F:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d4a72d12-07e6-3ae6-97d5-c09435a5c0b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:a7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:01:fb:9c:e9:04:66:c4:aa:de:b1:53:8a:7e:eb:dd:13:9d:
         20:9b:f2:f8:8a:51:95:b3:25:b2:74:c4:0d:cf:8c:d8:70:c5:
         f6:42:a4:bc:93:98:a0:4d:0e:87:53:8a:1b:1c:09:ff:8a:27:
         27:04:47:3e:3a:98:de:6f:6d:da:25:34:e8:d5:e3:74:6e:15:
         ed:9f:16:ca:6e:ac:3f:c4:15:3a:23:8e:58:a6:e5:e1:00:8e:
         fb:cf:91:47:b3:bd:af:aa:e2:05:42:c5:2e:1b:fc:a1:00:29:
         7a:6c:e5:1e:51:e1:fa:5b:e6:77:c1:87:c4:c2:37:91:a6:15:
         09:6e:cd:ef:4b:0b:b8:fb:1f:d3:b3:19:90:d8:a0:e4:33:2b:
         54:37:30:73:fa:65:08:70:0d:a4:65:02:04:cf:38:af:cf:12:
         0f:49:29:43:4e:1f:ef:07:a7:e8:e0:65:af:aa:35:91:df:85:
         dd:94:36:fa:76:b5:5f:07:92:b4:d4:2b:4d:cc:23:89:bc:59:
         09:29:bc:25:31:cd:1f:0d:53:d3:8d:f4:df:52:a8:d1:f2:ea:
         7d:39:cb:c0:70:35:a3:fd:e7:c5:02:b0:89:83:94:a1:9e:9e:
         38:0a:4b:7b:f2:34:3e:62:f5:5a:6f:81:28:87:d3:7e:81:72:
         7f:b1:fb:06
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEx5THb5b7IZ5djt9YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDExMDAyMDAzMVoXDTI2MDQxMDAxMDAzMVowLzEtMCsGA1UEAxMk
NjdjZTUwMmEtMDY3NC00ZWY4LTk4NzctNTllNGY1ZjEyOTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJJ+fO2KHO2MsiL8qtErSq1dHc5zJOl3HBZa
+0Uctm3iaDq+3hXh85yMMUbK+4GM4z+2vejCkaoVkC5vIAyRx9splREwtaMWFM3e
BEn50xxUrYMVqx5kS4pseeyAvgT1JPjEMDYbnBgjFxYIeB1y2DQys1+ccUjTMzrE
4OBsS9h1ty3Yqg3S19iy/9ABzVRZwLLOkEh4wa0kwmvU/7leuNTRy01sG179lGh1
77LjSgS2lD22je+8GmYdciJOB0cir8ZIRHcHT0ArWs4yOHumdaJelNntYbX/TFFO
UAk026bOheVszbUaqLPkkODn/xSTjtZ2IMVpyPdt6kKOwQSd9QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA04PqDDPNd4WkhgYyLa4CLhkk/2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDRhNzJkMTItMDdlNi0z
YWU2LTk3ZDUtYzA5NDM1YTVjMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHAB+5zpBGbEqt6xU4p+690TnSCb8viKUZWzJbJ0xA3PjNhwxfZC
pLyTmKBNDodTihscCf+KJycERz46mN5vbdolNOjV43RuFe2fFspurD/EFTojjlim
5eEAjvvPkUezva+q4gVCxS4b/KEAKXps5R5R4fpb5nfBh8TCN5GmFQluze9LC7j7
H9OzGZDYoOQzK1Q3MHP6ZQhwDaRlAgTPOK/PEg9JKUNOH+8Hp+jgZa+qNZHfhd2U
Nvp2tV8HkrTUK03MI4m8WQkpvCUxzR8NU9ON9N9SqNHy6n05y8BwNaP958UCsImD
lKGenjgKS3vyND5i9VpvgSiH036Bcn+x+wY=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:51:31 2026 by rpki-client