Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff7a4c78-4de8-370f-8299-7d08cbd0ac57.roa
File:                     ff7a4c78-4de8-370f-8299-7d08cbd0ac57.roa (raw, json)
Hash identifier:          9n5y+NSoSZKtxrpKAysfmB91TNrZX/UQMtS1EQau9tU=
Subject key identifier:   F4:B2:BB:5E:E9:F8:B7:8F:9A:6A:7D:44:2A:2E:63:10:3B:9C:B0:37
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584CEA5CFE68F3AAE7CF6245E0E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff7a4c78-4de8-370f-8299-7d08cbd0ac57.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     400661
IP address blocks:        2001:470:f4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:fe:68:f3:aa:e7:cf:62:45:e0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=73973bd3-d04b-4b4a-89d9-bbc6384f4a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:55:b4:41:76:06:1d:e0:a6:04:b3:27:69:df:
                    3d:60:47:b8:97:a4:6e:ce:42:94:52:5e:df:03:a2:
                    2f:52:94:0c:b2:a1:46:ab:07:25:26:6f:e8:36:ef:
                    02:a4:4d:13:9d:c8:3d:3f:81:97:28:bd:e9:c0:8c:
                    48:46:c9:b7:69:8b:5e:4b:c1:99:e4:03:d5:ef:f4:
                    fa:95:30:21:59:fc:99:9d:8e:74:d6:15:50:b9:a9:
                    0e:7d:09:99:c5:9f:6b:c2:f5:17:ba:d8:28:ab:db:
                    ec:d0:c6:fe:c5:76:d9:f8:e3:91:99:18:36:3f:c6:
                    b3:da:d2:97:c0:ed:55:8d:8b:32:5b:29:6b:cb:3a:
                    eb:b4:ee:fb:08:39:a3:7f:e3:b3:e3:02:91:31:03:
                    51:be:d9:39:29:48:16:5f:9b:0a:e4:43:f6:29:09:
                    65:a9:50:91:c0:dc:c8:b2:fa:c5:d2:b3:1b:9a:de:
                    cb:3a:fd:b3:b1:08:a0:7d:8c:06:69:d5:5f:f0:e7:
                    68:61:b9:fb:fe:89:77:c0:66:22:d5:c2:b2:e7:39:
                    59:00:8b:dd:c9:70:ca:09:bd:d4:e8:09:bb:2e:b6:
                    8b:93:81:5d:68:94:b6:35:f1:71:5f:3f:3d:19:6c:
                    fe:43:9c:84:17:fc:33:9b:1d:20:4d:00:14:50:2a:
                    89:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B2:BB:5E:E9:F8:B7:8F:9A:6A:7D:44:2A:2E:63:10:3B:9C:B0:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff7a4c78-4de8-370f-8299-7d08cbd0ac57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:f4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:ff:34:3c:4a:7c:2e:f7:80:f9:83:a8:78:ec:49:51:f2:2c:
         57:83:b6:57:4d:cd:ed:1e:ca:4b:3d:19:0d:0b:fc:44:78:52:
         53:e5:e3:c4:64:6e:32:e9:bb:55:39:ef:4a:9d:5a:1d:1c:a7:
         58:64:04:3a:2a:0a:a4:dc:02:7e:52:10:dd:88:ac:f6:1c:80:
         f4:5a:d8:b7:81:a8:59:09:71:09:70:d9:66:a1:6d:69:bb:7f:
         43:39:65:e3:ce:53:c1:2e:34:4e:e0:ff:11:6b:e5:e8:d6:d4:
         d1:4f:04:37:ac:2d:78:91:95:78:67:c9:e8:e3:b6:ed:ee:f4:
         a9:ea:ba:70:dc:5c:ec:56:f6:0a:c5:46:f3:6e:8b:dc:46:da:
         99:c4:82:8b:f3:3a:6b:28:4d:70:ee:08:56:52:8d:89:0b:be:
         1c:34:39:7a:ca:a6:b6:07:ac:f2:46:7d:c3:28:bb:04:60:ee:
         28:48:d2:a6:bf:3d:10:92:30:65:a1:fe:39:79:61:44:82:fb:
         b4:21:14:cd:a7:30:1c:4a:c0:68:f1:62:76:fe:9d:2d:d2:fe:
         90:c0:d1:2a:99:97:7e:d8:8a:f1:af:a0:1b:69:f1:02:57:b8:
         53:6d:8b:50:bd:eb:99:9b:df:d0:23:79:e5:bf:c3:bb:27:f1:
         a4:31:27:ed
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzqXP5o86rnz2JF4OAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk
NzM5NzNiZDMtZDA0Yi00YjRhLTg5ZDktYmJjNjM4NGY0YTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFW0QXYGHeCmBLMnad89YEe4l6RuzkKUUl7f
A6IvUpQMsqFGqwclJm/oNu8CpE0Tncg9P4GXKL3pwIxIRsm3aYteS8GZ5APV7/T6
lTAhWfyZnY501hVQuakOfQmZxZ9rwvUXutgoq9vs0Mb+xXbZ+OORmRg2P8az2tKX
wO1VjYsyWylryzrrtO77CDmjf+Oz4wKRMQNRvtk5KUgWX5sK5EP2KQllqVCRwNzI
svrF0rMbmt7LOv2zsQigfYwGadVf8OdoYbn7/ol3wGYi1cKy5zlZAIvdyXDKCb3U
6Am7LraLk4FdaJS2NfFxXz89GWz+Q5yEF/wzmx0gTQAUUCqJqQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPSyu17p+LePmmp9RCouYxA7nLA3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmY3YTRjNzgtNGRlOC0z
NzBmLTgyOTktN2QwOGNiZDBhYzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAD0
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEH/NDxKfC73gPmDqHjsSVHyLFeDtldNze0eyks9GQ0L/ER4UlPl
48RkbjLpu1U570qdWh0cp1hkBDoqCqTcAn5SEN2IrPYcgPRa2LeBqFkJcQlw2Wah
bWm7f0M5ZePOU8EuNE7g/xFr5ejW1NFPBDesLXiRlXhnyejjtu3u9KnqunDcXOxW
9grFRvNui9xG2pnEgovzOmsoTXDuCFZSjYkLvhw0OXrKprYHrPJGfcMouwRg7ihI
0qa/PRCSMGWh/jl5YUSC+7QhFM2nMBxKwGjxYnb+nS3S/pDA0SqZl37YivGvoBtp
8QJXuFNti1C965mb39AjeeW/w7sn8aQxJ+0=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:49:49 2026 by rpki-client