Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33e03416-ae68-373e-81a6-1fa5c9d93881.roa
File:                     33e03416-ae68-373e-81a6-1fa5c9d93881.roa (raw, json)
Hash identifier:          U7sryKclg9Zhw8qt4sp8eX0C8WMXWlLfrk0bMCNILOM=
Subject key identifier:   F3:C5:32:1A:A8:16:05:9F:D3:22:0D:EB:03:5A:92:1C:4C:D6:CE:E4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E7204E0E4B83784F450C96500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33e03416-ae68-373e-81a6-1fa5c9d93881.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     61986
IP address blocks:        2001:470:427::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:e0:e4:b8:37:84:f4:50:c9:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=dc1a3d64-3f0e-43e1-ac56-ec3a4adabdea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:52:7b:e1:e7:da:5b:20:b8:ec:0f:2d:c4:e9:
                    93:35:b7:77:fb:23:57:14:74:13:47:47:6a:f3:12:
                    f6:dd:e4:9a:e9:c5:31:d1:63:b0:66:2b:79:00:32:
                    b5:44:a8:33:65:bc:9f:bc:13:11:2a:aa:48:25:66:
                    8f:b2:30:aa:23:16:97:9a:fa:68:a6:62:13:9c:d5:
                    eb:e4:9a:13:e4:03:52:35:1b:76:b2:9b:34:01:02:
                    59:ae:28:13:c3:ac:eb:ec:53:bd:ba:5e:74:5f:b6:
                    0c:8a:ef:d1:f9:c2:91:69:c0:9d:61:c2:92:e2:a2:
                    8a:22:4a:2d:cc:b3:f9:5d:ac:3c:3d:bd:fd:57:c9:
                    90:ae:06:44:f9:59:ea:a5:09:5e:e3:25:86:07:52:
                    4d:b7:77:e5:ff:ec:d8:9d:dd:d0:6b:51:cd:38:e6:
                    1c:14:2d:06:5c:00:af:bb:b9:ef:f2:ef:39:5a:87:
                    27:c6:e5:6a:2d:bb:75:41:3b:8c:2d:2e:7f:fd:d8:
                    9b:80:95:12:0d:c9:f8:47:ee:a5:14:ab:e1:9c:2f:
                    76:6b:f4:71:fc:91:b7:8d:a0:5e:83:6c:cf:e3:c1:
                    65:e3:9c:14:ac:da:21:91:95:5a:d4:06:cd:91:38:
                    cd:1d:77:c5:de:43:96:b3:dc:c8:45:dd:dc:db:85:
                    8b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C5:32:1A:A8:16:05:9F:D3:22:0D:EB:03:5A:92:1C:4C:D6:CE:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33e03416-ae68-373e-81a6-1fa5c9d93881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:427::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:30:16:84:2f:fd:d4:0e:d3:a3:b9:6d:ae:02:45:17:e2:79:
         eb:66:c9:7d:17:73:f0:36:c2:b1:4c:cd:54:66:2a:89:66:b9:
         61:61:cd:13:df:3c:41:69:17:a9:7c:76:2d:84:73:84:c9:85:
         3c:39:71:bf:ea:bd:d1:ae:29:a5:72:b6:00:f5:80:7c:04:00:
         74:bc:f9:51:32:a3:97:16:57:40:ec:ab:da:3d:77:49:21:5f:
         c5:01:03:46:7c:21:59:31:39:9f:ae:ea:11:7e:61:30:97:a8:
         9f:9d:6c:9c:2f:c6:fa:7a:65:1d:cc:9b:89:51:d7:0c:4a:a0:
         84:e2:2f:4c:3f:4b:93:d1:81:8e:08:3b:dd:0a:ed:76:cc:3e:
         9c:ca:91:9e:17:a6:7a:03:2a:c1:39:26:07:5a:fb:33:d8:f5:
         70:62:22:11:15:d5:6c:99:41:66:b3:74:ea:91:00:2e:57:52:
         57:60:c0:7e:7d:72:b9:be:85:8a:ec:94:85:91:f8:47:17:55:
         70:a4:1a:e6:90:f5:69:1a:6d:b2:76:a8:fe:07:40:bb:03:e2:
         77:e3:c5:b3:54:12:67:a1:4c:cb:44:03:27:e8:3d:90:12:cb:
         d8:e6:8b:91:9e:ee:76:6a:02:6c:17:31:b5:94:98:64:5a:a5:
         71:be:b9:dd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5yBODkuDeE9FDJZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk
ZGMxYTNkNjQtM2YwZS00M2UxLWFjNTYtZWMzYTRhZGFiZGVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVJ74efaWyC47A8txOmTNbd3+yNXFHQTR0dq
8xL23eSa6cUx0WOwZit5ADK1RKgzZbyfvBMRKqpIJWaPsjCqIxaXmvpopmITnNXr
5JoT5ANSNRt2sps0AQJZrigTw6zr7FO9ul50X7YMiu/R+cKRacCdYcKS4qKKIkot
zLP5Xaw8Pb39V8mQrgZE+VnqpQle4yWGB1JNt3fl/+zYnd3Qa1HNOOYcFC0GXACv
u7nv8u85WocnxuVqLbt1QTuMLS5//dibgJUSDcn4R+6lFKvhnC92a/Rx/JG3jaBe
g2zP48Fl45wUrNohkZVa1AbNkTjNHXfF3kOWs9zIRd3c24WLcwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPPFMhqoFgWf0yIN6wNakhxM1s7kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzNlMDM0MTYtYWU2OC0z
NzNlLTgxYTYtMWZhNWM5ZDkzODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIAwFoQv/dQO06O5ba4CRRfieetmyX0Xc/A2wrFMzVRmKolmuWFh
zRPfPEFpF6l8di2Ec4TJhTw5cb/qvdGuKaVytgD1gHwEAHS8+VEyo5cWV0Dsq9o9
d0khX8UBA0Z8IVkxOZ+u6hF+YTCXqJ+dbJwvxvp6ZR3Mm4lR1wxKoITiL0w/S5PR
gY4IO90K7XbMPpzKkZ4XpnoDKsE5Jgda+zPY9XBiIhEV1WyZQWazdOqRAC5XUldg
wH59crm+hYrslIWR+EcXVXCkGuaQ9WkabbJ2qP4HQLsD4nfjxbNUEmehTMtEAyfo
PZASy9jmi5Ge7nZqAmwXMbWUmGRapXG+ud0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:20:47 2026 by rpki-client