Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6f91837-6346-3ad6-b91c-0c912a70bd76.roa
File:                     f6f91837-6346-3ad6-b91c-0c912a70bd76.roa (raw, json)
Hash identifier:          ezpCN/8YuA9FVH9jphRG9N53lSEyT1xQpmEEVGFNdHM=
Subject key identifier:   DA:D2:DD:CF:F7:34:F1:AE:02:BB:DA:FD:ED:C1:AB:57:DB:59:2F:50
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E147EEBB3CD74B7E54A9BCC80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6f91837-6346-3ad6-b91c-0c912a70bd76.roa
Signing time:             Sat 06 Jun 2026 09:00:12 +0000
ROA not before:           Sat 06 Jun 2026 09:00:12 +0000
ROA not after:            Fri 04 Sep 2026 09:00:12 +0000
asID:                     59890
IP address blocks:        2001:470:452::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:7e:eb:b3:cd:74:b7:e5:4a:9b:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  6 09:00:12 2026 GMT
            Not After : Sep  4 09:00:12 2026 GMT
        Subject: CN=23fb3964-cf09-4ea5-be5f-de0e886f2583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:ba:1b:d2:27:0a:72:b5:5d:07:50:11:30:
                    e0:f1:9c:18:d1:45:bb:0d:bc:07:4e:2b:a2:14:9a:
                    5e:56:17:f0:d1:4d:cf:55:97:ca:f2:21:fa:c2:82:
                    1e:c5:40:9e:3e:7f:96:d1:36:6a:54:60:06:f1:a3:
                    05:b8:b0:9f:bb:a9:aa:ca:3d:9e:22:2f:cd:c0:28:
                    52:94:22:14:5c:d4:7c:f1:59:59:c6:8d:ae:a5:19:
                    d0:75:26:c5:71:08:13:5a:ee:b0:a6:89:5f:d5:3a:
                    c0:2b:ef:8e:2f:24:d5:36:f9:ca:63:2d:67:7d:93:
                    a4:f7:f5:4d:1d:7f:54:63:96:52:70:dd:0d:02:8e:
                    ee:9c:ba:31:ab:bc:88:d4:7e:08:89:d1:ca:0c:70:
                    db:26:6d:96:60:45:e7:da:73:87:f5:9d:a2:b4:4e:
                    8d:f3:84:36:7e:f9:a5:80:72:87:05:1b:84:59:f4:
                    25:a7:91:a1:e0:49:34:6f:9d:08:97:74:de:73:d5:
                    6c:85:14:84:bb:da:5b:ec:59:85:e6:a8:7e:0c:a1:
                    5d:5f:50:a9:6e:4a:8c:b6:a7:85:af:d1:f7:17:9b:
                    d6:97:1a:7c:18:0f:f6:23:45:50:e5:ac:9c:5c:05:
                    13:a6:f5:e4:da:4c:22:58:14:5f:ff:52:be:11:c1:
                    0d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D2:DD:CF:F7:34:F1:AE:02:BB:DA:FD:ED:C1:AB:57:DB:59:2F:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6f91837-6346-3ad6-b91c-0c912a70bd76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:452::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:63:2a:37:b4:44:99:93:a7:f6:04:20:f1:83:d9:33:5f:57:
         b7:af:6a:f6:0c:3a:1f:f9:3e:d5:88:d2:e6:e9:41:28:67:02:
         e4:33:72:34:a1:26:3d:31:dd:c9:5e:18:8d:79:49:2b:c2:bb:
         52:6e:7d:3e:f3:b6:44:41:ef:08:39:8e:81:3a:57:3c:75:d2:
         49:02:bd:39:4e:33:f7:8d:5b:87:32:a8:40:35:29:24:35:74:
         a1:72:26:c1:0b:48:0c:8e:32:d3:17:16:6d:67:0c:e4:16:5f:
         c9:42:ab:ec:94:5a:54:d2:89:26:ed:69:ef:32:1d:a9:59:b8:
         02:6a:5f:55:a9:aa:4f:4b:0b:4f:b5:0d:55:3c:d8:34:74:09:
         c0:18:15:96:b9:0e:2d:44:5c:9e:1b:c6:c6:84:d9:d7:3d:18:
         e6:98:2d:d0:4c:46:ad:22:d5:67:9f:18:e1:86:7f:d6:40:25:
         c3:6b:08:1f:07:5d:dd:c5:85:88:b2:ea:6a:c5:7b:0b:ff:cc:
         2a:b9:b8:c0:39:8e:a2:19:08:a4:11:e6:4b:1d:f1:79:a4:3b:
         e6:7b:c0:1e:e3:48:01:08:7b:0d:fb:c4:ac:3c:5d:6b:8e:cf:
         17:5e:b0:75:5e:a9:1f:d4:15:9d:cf:d6:2b:b2:3d:85:29:4b:
         5d:eb:59:18
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4UfuuzzXS35UqbzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDYwNjA5MDAxMloXDTI2MDkwNDA5MDAxMlowLzEtMCsGA1UEAxMk
MjNmYjM5NjQtY2YwOS00ZWE1LWJlNWYtZGUwZTg4NmYyNTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxG6G9InCnK1XQdQETDg8ZwY0UW7DbwHTiui
FJpeVhfw0U3PVZfK8iH6woIexUCePn+W0TZqVGAG8aMFuLCfu6mqyj2eIi/NwChS
lCIUXNR88VlZxo2upRnQdSbFcQgTWu6wpolf1TrAK++OLyTVNvnKYy1nfZOk9/VN
HX9UY5ZScN0NAo7unLoxq7yI1H4IidHKDHDbJm2WYEXn2nOH9Z2itE6N84Q2fvml
gHKHBRuEWfQlp5Gh4Ek0b50Il3Tec9VshRSEu9pb7FmF5qh+DKFdX1CpbkqMtqeF
r9H3F5vWlxp8GA/2I0VQ5aycXAUTpvXk2kwiWBRf/1K+EcENaQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNrS3c/3NPGuArva/e3Bq1fbWS9QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjZmOTE4MzctNjM0Ni0z
YWQ2LWI5MWMtMGM5MTJhNzBiZDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARS
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGljKje0RJmTp/YEIPGD2TNfV7evavYMOh/5PtWI0ubpQShnAuQz
cjShJj0x3cleGI15SSvCu1JufT7ztkRB7wg5joE6Vzx10kkCvTlOM/eNW4cyqEA1
KSQ1dKFyJsELSAyOMtMXFm1nDOQWX8lCq+yUWlTSiSbtae8yHalZuAJqX1Wpqk9L
C0+1DVU82DR0CcAYFZa5Di1EXJ4bxsaE2dc9GOaYLdBMRq0i1WefGOGGf9ZAJcNr
CB8HXd3FhYiy6mrFewv/zCq5uMA5jqIZCKQR5ksd8XmkO+Z7wB7jSAEIew37xKw8
XWuOzxdesHVeqR/UFZ3P1iuyPYUpS13rWRg=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:50:17 2026 by rpki-client