Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6bbc47d-5ac1-3720-a446-d32bcd52ab77.roa
File:                     d6bbc47d-5ac1-3720-a446-d32bcd52ab77.roa (raw, json)
Hash identifier:          qAlVYyeJnEUXlPn0jd/u6VwpH+YZz5dg/dsNePuyUJc=
Subject key identifier:   66:39:8B:A5:48:B5:40:46:3B:03:39:D2:BD:D4:4B:FD:E7:C4:68:6F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EAA5889E2EBCE9454EFE20
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6bbc47d-5ac1-3720-a446-d32bcd52ab77.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     400039
IP address blocks:        2001:470:1e8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:a5:88:9e:2e:bc:e9:45:4e:fe:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=55fc234d-c37f-4abc-8a88-4958be06aa55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:94:85:95:26:39:a3:cc:99:0e:57:70:5a:f6:
                    67:c2:e5:09:2e:98:30:6a:c5:cf:5f:54:de:36:29:
                    7c:3d:c1:ff:64:5a:db:15:d1:3b:11:ad:4d:fb:5a:
                    41:d6:08:1e:92:37:aa:25:80:3f:dc:ea:9d:ba:43:
                    15:9f:32:06:ff:9f:40:70:c1:eb:f8:56:6c:a0:0e:
                    1c:0e:98:80:f8:50:7a:e3:53:26:cb:55:61:eb:99:
                    79:af:fc:d9:56:60:e5:ec:9d:7e:69:f1:1a:f6:84:
                    fa:20:2f:e9:18:18:e9:da:b8:14:2e:ec:b2:98:f6:
                    a1:8f:25:f7:ce:ca:97:de:52:82:2e:57:6f:2b:fa:
                    81:7b:36:b5:cf:e9:66:04:83:37:af:37:3a:03:73:
                    ac:bd:c9:bc:91:70:a8:b3:e6:8a:0f:df:72:b2:e6:
                    72:3f:3a:57:03:cd:02:cf:93:cd:9d:ba:31:bf:6a:
                    55:9d:d9:6d:91:71:7f:c6:97:e4:0e:81:77:e7:93:
                    2d:8f:4e:2d:cd:c3:4d:6f:b0:6c:98:a0:fc:33:36:
                    c2:ff:1b:3c:66:b4:9b:25:4a:5f:17:ad:ff:fa:62:
                    6b:87:34:fc:9b:ae:92:90:b2:fc:ff:c1:dc:cf:ec:
                    05:b3:7b:8d:7f:88:07:e6:2a:39:b4:97:4e:2c:7c:
                    eb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:39:8B:A5:48:B5:40:46:3B:03:39:D2:BD:D4:4B:FD:E7:C4:68:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6bbc47d-5ac1-3720-a446-d32bcd52ab77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1e8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ca:49:bc:2d:74:89:75:1e:2f:e9:43:54:0a:05:cc:50:c9:
         53:81:03:56:b6:d8:7d:8c:0f:c9:dd:98:b0:4b:6d:18:4c:ef:
         6e:8a:17:5d:9b:54:fe:22:04:27:bd:f3:3c:7c:23:4b:42:2a:
         a0:fc:38:32:35:1f:e9:3e:5f:36:4a:63:75:ae:5b:54:6f:5d:
         88:57:89:04:69:f1:63:f9:40:93:85:3c:61:af:ea:e2:eb:3c:
         07:65:4a:20:5b:d9:db:4f:18:46:af:c3:e4:8a:e3:86:f6:3d:
         34:28:c4:71:45:01:b2:89:5c:10:a9:c9:d5:c0:40:0c:47:8d:
         24:ae:d3:a8:1c:bb:c1:2f:e1:34:d3:f8:23:88:bc:ea:8b:bc:
         b2:ed:20:e5:1d:22:a2:43:72:c8:1c:0a:b8:ed:3e:cd:0f:34:
         7d:77:73:59:79:24:a8:f6:09:16:93:07:38:54:60:dc:84:5b:
         10:a8:b8:7a:98:39:29:1c:02:b3:ec:14:a9:f2:1d:c0:69:b6:
         c6:8c:97:37:81:c6:51:4a:a7:e7:3f:fe:8a:21:e0:14:99:61:
         4b:d9:29:ad:44:67:cd:7c:9b:f4:3b:0f:64:a9:e6:25:83:b1:
         38:2f:14:fd:1b:61:d6:99:6d:df:fb:1c:a0:f9:51:b9:ce:bc:
         82:55:dc:7f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6qWIni686UVO/iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
NTVmYzIzNGQtYzM3Zi00YWJjLThhODgtNDk1OGJlMDZhYTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJSFlSY5o8yZDldwWvZnwuUJLpgwasXPX1Te
Nil8PcH/ZFrbFdE7Ea1N+1pB1ggekjeqJYA/3OqdukMVnzIG/59AcMHr+FZsoA4c
DpiA+FB641Mmy1Vh65l5r/zZVmDl7J1+afEa9oT6IC/pGBjp2rgULuyymPahjyX3
zsqX3lKCLldvK/qBeza1z+lmBIM3rzc6A3Osvcm8kXCos+aKD99ysuZyPzpXA80C
z5PNnboxv2pVndltkXF/xpfkDoF355Mtj04tzcNNb7BsmKD8MzbC/xs8ZrSbJUpf
F63/+mJrhzT8m66SkLL8/8Hcz+wFs3uNf4gH5io5tJdOLHzrZQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGY5i6VItUBGOwM50r3US/3nxGhvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDZiYmM0N2QtNWFjMS0z
NzIwLWE0NDYtZDMyYmNkNTJhYjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHo
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHvKSbwtdIl1Hi/pQ1QKBcxQyVOBA1a22H2MD8ndmLBLbRhM726K
F12bVP4iBCe98zx8I0tCKqD8ODI1H+k+XzZKY3WuW1RvXYhXiQRp8WP5QJOFPGGv
6uLrPAdlSiBb2dtPGEavw+SK44b2PTQoxHFFAbKJXBCpydXAQAxHjSSu06gcu8Ev
4TTT+COIvOqLvLLtIOUdIqJDcsgcCrjtPs0PNH13c1l5JKj2CRaTBzhUYNyEWxCo
uHqYOSkcArPsFKnyHcBptsaMlzeBxlFKp+c//ooh4BSZYUvZKa1EZ818m/Q7D2Sp
5iWDsTgvFP0bYdaZbd/7HKD5UbnOvIJV3H8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:52 2026 by rpki-client