Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0fb8d6b3-7df2-368a-95f4-beb4124b8319.roa
File:                     0fb8d6b3-7df2-368a-95f4-beb4124b8319.roa (raw, json)
Hash identifier:          kBxMhtejgCRoMl9fs8GoHkl3rc+e9FK44sKJs9QS68k=
Subject key identifier:   F4:B6:8F:4C:92:12:13:40:56:B7:69:C6:85:BA:AA:0C:59:26:95:6E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E709F7C7B42AC81514EAE5400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0fb8d6b3-7df2-368a-95f4-beb4124b8319.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     44411
IP address blocks:        2001:470:4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:7c:7b:42:ac:81:51:4e:ae:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=a0cc514f-4e61-42a1-8219-d48e26e2958f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8c:38:14:1c:2e:38:7f:30:c7:aa:b9:f5:aa:
                    40:e8:0d:7c:12:a0:f0:1e:de:26:b8:4c:63:2e:07:
                    40:6e:bd:f0:dd:4c:31:6b:be:ed:40:13:b3:38:7a:
                    33:00:35:eb:08:34:db:04:d6:f4:e0:f5:0f:f2:7e:
                    ef:ef:77:ea:d7:b0:31:f9:73:5b:99:6c:f2:19:51:
                    a7:de:63:a6:2b:97:6a:c1:fc:22:64:ac:c6:97:72:
                    ce:28:de:e1:df:0a:b0:4d:35:04:4b:fb:68:9a:9a:
                    4e:0a:1e:c0:2b:f4:f0:79:59:56:3f:fc:eb:6b:5c:
                    c8:48:6c:56:b0:05:1a:d6:3d:bf:9c:b3:6e:99:98:
                    f8:8c:64:52:9b:f4:34:74:13:d8:55:65:42:ea:1d:
                    7f:dc:2c:b0:b7:aa:73:49:d5:11:fc:e2:e7:ec:30:
                    84:d9:3c:12:d7:f5:4b:91:15:a6:90:a4:46:0f:a9:
                    8a:9f:f8:39:ec:ef:55:a0:95:f2:a3:23:9e:2a:32:
                    ba:5a:0f:75:df:d3:56:9f:1e:d1:16:c7:b5:f4:33:
                    32:0b:e2:fb:51:bf:d5:2f:3d:35:0f:6a:5d:af:c0:
                    c7:b3:67:72:6d:d6:8b:ff:8d:b7:74:c9:48:09:71:
                    cb:96:f8:80:5c:98:8f:1b:48:ce:11:7f:82:8a:01:
                    f7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B6:8F:4C:92:12:13:40:56:B7:69:C6:85:BA:AA:0C:59:26:95:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0fb8d6b3-7df2-368a-95f4-beb4124b8319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:fc:40:b2:db:66:5a:9b:1d:7d:b7:5d:42:3f:2f:2a:79:91:
         fb:38:d4:53:62:46:0c:81:cf:04:c5:2e:5b:c7:10:5c:76:b7:
         19:c1:7a:aa:ea:ae:14:27:e1:ea:9e:91:d6:75:d3:e3:0a:a7:
         ce:50:71:f1:9e:ad:12:36:29:f8:6d:1d:9a:8e:c6:36:09:0e:
         1e:c2:d8:f7:14:94:f3:ca:1a:be:10:5e:b2:40:39:f7:bf:d2:
         e6:ad:44:a0:35:6f:4b:31:ad:69:ef:26:4c:96:a9:12:02:3a:
         b3:93:1e:93:bb:9c:01:af:c7:18:75:37:f2:37:65:74:f9:0a:
         00:c5:32:63:26:85:58:13:ce:4d:d7:bc:34:52:62:c8:10:25:
         13:f9:17:0c:07:24:fc:6f:4e:e0:25:21:0d:1d:8c:06:74:71:
         6e:52:28:85:8d:15:f3:b2:28:91:aa:1d:f3:7f:3d:50:71:e1:
         f4:50:c2:a9:f0:9c:33:84:22:3a:e3:cc:9c:52:6b:49:a5:4d:
         87:a9:46:f9:6a:c3:ed:e0:3e:07:9d:e7:b5:5b:da:29:53:2f:
         1b:32:2e:a6:89:94:7c:cf:e0:cd:48:41:b1:8c:70:16:5f:65:
         ac:ca:60:73:78:bb:3a:11:35:a1:91:31:bc:6a:8a:97:fb:29:
         aa:6e:58:ee
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5wn3x7QqyBUU6uVAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk
YTBjYzUxNGYtNGU2MS00MmExLTgyMTktZDQ4ZTI2ZTI5NThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIw4FBwuOH8wx6q59apA6A18EqDwHt4muExj
LgdAbr3w3Uwxa77tQBOzOHozADXrCDTbBNb04PUP8n7v73fq17Ax+XNbmWzyGVGn
3mOmK5dqwfwiZKzGl3LOKN7h3wqwTTUES/tomppOCh7AK/TweVlWP/zra1zISGxW
sAUa1j2/nLNumZj4jGRSm/Q0dBPYVWVC6h1/3Cywt6pzSdUR/OLn7DCE2TwS1/VL
kRWmkKRGD6mKn/g57O9VoJXyoyOeKjK6Wg9139NWnx7RFse19DMyC+L7Ub/VLz01
D2pdr8DHs2dybdaL/423dMlICXHLlviAXJiPG0jOEX+CigH3TQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPS2j0ySEhNAVrdpxoW6qgxZJpVuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGZiOGQ2YjMtN2RmMi0z
NjhhLTk1ZjQtYmViNDEyNGI4MzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAS9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGL8QLLbZlqbHX23XUI/Lyp5kfs41FNiRgyBzwTFLlvHEFx2txnB
eqrqrhQn4eqekdZ10+MKp85QcfGerRI2KfhtHZqOxjYJDh7C2PcUlPPKGr4QXrJA
Ofe/0uatRKA1b0sxrWnvJkyWqRICOrOTHpO7nAGvxxh1N/I3ZXT5CgDFMmMmhVgT
zk3XvDRSYsgQJRP5FwwHJPxvTuAlIQ0djAZ0cW5SKIWNFfOyKJGqHfN/PVBx4fRQ
wqnwnDOEIjrjzJxSa0mlTYepRvlqw+3gPged57Vb2ilTLxsyLqaJlHzP4M1IQbGM
cBZfZazKYHN4uzoRNaGRMbxqipf7KapuWO4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:59:24 2026 by rpki-client