Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0418588f-4f3e-3e84-ac8a-d6ab06d5065a.roa
File:                     0418588f-4f3e-3e84-ac8a-d6ab06d5065a.roa (raw, json)
Hash identifier:          yPNzROCCsTfXy9z2UD87xwDb07bLGlLzKUq4x1uYWaw=
Subject key identifier:   16:5E:B6:3E:70:D8:A7:03:F1:3F:A6:C1:3E:7B:96:84:88:1A:DA:A4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D0D424084FE256B460E6020A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0418588f-4f3e-3e84-ac8a-d6ab06d5065a.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     38040
IP address blocks:        2001:470:511::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:40:84:fe:25:6b:46:0e:60:20:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=6cd13508-98fa-46e0-a4e2-d335a29ab992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:39:ff:42:51:61:f5:be:b5:62:92:d4:90:0d:
                    94:a6:aa:15:83:4f:62:ad:b1:fe:21:02:63:67:9b:
                    79:29:d7:6b:9e:d2:ef:b5:d1:6b:36:5f:87:6a:bf:
                    57:65:e5:1f:7d:38:72:a7:9b:24:00:b8:1c:5a:ca:
                    26:71:a9:73:3e:18:3b:fa:59:a5:47:67:ba:8a:ff:
                    b4:b2:9f:7f:07:30:b6:35:ba:36:0b:82:2c:b2:28:
                    7a:1d:05:85:ea:66:08:23:8e:56:2b:49:ec:32:d9:
                    cf:92:7b:78:39:12:52:91:c0:09:ae:2c:49:7f:65:
                    26:6b:36:46:ed:4f:a1:9b:d7:1c:d2:96:dc:a3:e6:
                    34:a4:c1:51:0f:9a:ff:62:41:a2:2b:03:a4:3a:ab:
                    92:f6:74:69:61:ee:0e:6f:b2:55:20:be:b1:46:bb:
                    74:e8:7e:9f:cd:0f:ab:13:4c:b9:8f:02:7d:45:ff:
                    d5:b1:d1:f1:b7:5b:fa:f7:81:6a:66:87:6c:ec:57:
                    e5:bc:7c:62:aa:53:4c:81:2d:bb:42:d7:81:25:db:
                    f8:bc:ae:50:d0:a7:32:ff:fc:39:eb:a8:8b:e1:4b:
                    f6:e7:53:17:81:b9:b2:12:c1:47:38:6b:5f:90:fc:
                    c4:68:12:c9:7d:eb:ef:d5:81:0b:65:c8:b3:93:5a:
                    91:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5E:B6:3E:70:D8:A7:03:F1:3F:A6:C1:3E:7B:96:84:88:1A:DA:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0418588f-4f3e-3e84-ac8a-d6ab06d5065a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:511::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:88:e3:a0:24:4e:ff:9e:59:5b:55:26:f7:7a:13:99:66:83:
         d4:ad:c3:06:62:9a:af:ff:53:04:71:dd:f2:13:49:95:44:ef:
         f6:54:ec:98:c1:71:5f:22:56:55:4b:b5:4c:78:8d:71:68:04:
         f7:e7:95:89:ed:77:45:b6:e6:c9:f8:df:ed:1d:54:8c:9f:28:
         7a:25:0e:d2:a5:f8:25:d3:56:1a:78:e7:df:c5:e0:f4:87:1d:
         24:20:c5:f1:6e:30:76:3f:83:78:79:3b:ec:20:f6:e2:78:c4:
         3d:45:8c:86:7e:34:b6:ba:0c:3b:8f:e0:57:13:11:a4:ec:bf:
         f9:4c:06:3e:92:4d:92:73:05:ab:16:57:a5:04:2d:81:d7:8d:
         83:b0:80:81:5a:1f:98:f5:67:3b:01:15:da:5f:3c:e2:a1:a0:
         2e:0c:4f:60:28:5d:d0:ff:97:72:d0:40:84:28:0c:89:4e:94:
         97:ea:de:b2:5c:7a:93:ab:a5:8a:b6:37:1f:6e:1b:ec:9f:73:
         0b:23:d5:b6:ba:de:28:20:49:a1:bf:4c:07:2f:97:a3:e7:0d:
         79:47:65:f0:54:54:00:c1:bf:93:14:3d:99:ed:ac:82:27:67:
         e1:e8:bc:70:19:8c:a4:8f:7f:ce:cb:17:40:5f:01:18:40:a1:
         ce:f4:1f:6f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0NQkCE/iVrRg5gIKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk
NmNkMTM1MDgtOThmYS00NmUwLWE0ZTItZDMzNWEyOWFiOTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zn/QlFh9b61YpLUkA2UpqoVg09irbH+IQJj
Z5t5KddrntLvtdFrNl+Har9XZeUffThyp5skALgcWsomcalzPhg7+lmlR2e6iv+0
sp9/BzC2Nbo2C4Issih6HQWF6mYII45WK0nsMtnPknt4ORJSkcAJrixJf2UmazZG
7U+hm9cc0pbco+Y0pMFRD5r/YkGiKwOkOquS9nRpYe4Ob7JVIL6xRrt06H6fzQ+r
E0y5jwJ9Rf/VsdHxt1v694FqZods7FflvHxiqlNMgS27QteBJdv4vK5Q0Kcy//w5
66iL4Uv251MXgbmyEsFHOGtfkPzEaBLJfevv1YELZcizk1qRkQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBZetj5w2KcD8T+mwT57loSIGtqkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDQxODU4OGYtNGYzZS0z
ZTg0LWFjOGEtZDZhYjA2ZDUwNjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAUR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADaI46AkTv+eWVtVJvd6E5lmg9StwwZimq//UwRx3fITSZVE7/ZU
7JjBcV8iVlVLtUx4jXFoBPfnlYntd0W25sn43+0dVIyfKHolDtKl+CXTVhp459/F
4PSHHSQgxfFuMHY/g3h5O+wg9uJ4xD1FjIZ+NLa6DDuP4FcTEaTsv/lMBj6STZJz
BasWV6UELYHXjYOwgIFaH5j1ZzsBFdpfPOKhoC4MT2AoXdD/l3LQQIQoDIlOlJfq
3rJcepOrpYq2Nx9uG+yfcwsj1ba63iggSaG/TAcvl6PnDXlHZfBUVADBv5MUPZnt
rIInZ+HovHAZjKSPf87LF0BfARhAoc70H28=
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:29:47 2026 by rpki-client