Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/403fefd1-873d-3617-a8f7-ea3c6f6da7f1.roa
File:                     403fefd1-873d-3617-a8f7-ea3c6f6da7f1.roa (raw, json)
Hash identifier:          a5w0WYMpgqtupNZPeJLjUf3xOH019z1oSW3YSogknB0=
Subject key identifier:   17:D4:9F:76:25:63:0D:CB:92:B3:18:CB:F5:8A:4C:1D:B3:3D:F5:D6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F535CE0C9A4DD94487A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/403fefd1-873d-3617-a8f7-ea3c6f6da7f1.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     133398
IP address blocks:        2001:470:288::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:53:5c:e0:c9:a4:dd:94:48:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=60966650-fe97-4370-a9a3-c8c2d194fb9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e9:70:e8:02:30:7e:42:95:8c:93:26:4b:1e:
                    f9:11:af:74:31:5f:0b:52:ee:bc:dc:75:f8:32:2d:
                    fe:b7:a4:4a:2e:d0:15:fa:a4:8d:fb:ed:42:bb:9b:
                    0a:91:78:0b:16:5b:9c:ac:d6:0a:c4:44:ab:77:30:
                    78:21:35:d7:f2:78:cc:d1:de:4f:51:7a:fb:90:f7:
                    35:f7:98:e3:df:1b:f5:b6:1f:25:c0:86:5a:f8:5b:
                    78:fa:c5:61:06:45:d7:a4:e9:8c:75:a9:d4:89:89:
                    ad:2d:52:e1:9f:82:48:be:08:f2:2c:c5:c2:14:91:
                    91:cd:db:57:b5:3f:42:e9:b3:ca:8b:88:33:2a:97:
                    01:4c:77:ae:fd:7d:d7:44:0a:e9:65:6a:df:eb:f9:
                    a9:43:3e:88:57:43:38:d6:6d:e2:c6:b8:fc:23:f2:
                    17:da:09:e3:a1:2a:e5:ef:00:55:f5:a9:66:a4:1b:
                    34:89:9f:91:fa:fa:7c:46:df:c9:14:5f:f4:13:2f:
                    51:92:55:90:61:7b:d8:20:f9:e8:27:dc:f1:ef:5a:
                    b8:df:af:d2:a1:f7:05:73:43:66:58:ab:ae:5c:1f:
                    32:45:3c:de:6b:b9:9d:23:8b:91:56:d6:52:fa:8c:
                    43:83:c8:7f:b6:45:30:37:02:b6:f2:08:75:fa:86:
                    05:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D4:9F:76:25:63:0D:CB:92:B3:18:CB:F5:8A:4C:1D:B3:3D:F5:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/403fefd1-873d-3617-a8f7-ea3c6f6da7f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:288::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:8a:cc:b4:3d:02:a7:67:57:b5:1d:c4:d6:a9:e8:77:9d:aa:
         da:83:57:43:cb:49:0e:ba:3e:c0:85:9f:02:73:f3:3b:e7:0f:
         36:7d:db:c0:03:83:7e:59:b0:78:1b:77:24:f4:40:0f:3b:77:
         82:51:9f:4c:1f:6e:43:49:ef:bc:28:3a:78:69:fd:10:a2:31:
         7a:45:32:8f:82:33:75:74:4b:eb:e7:2b:b8:ff:e6:f3:06:0f:
         20:9c:94:eb:a6:0f:86:a3:7e:83:e2:2e:27:a8:6d:ac:3d:a4:
         26:b8:f8:ee:12:68:1f:86:9a:58:02:18:b7:8a:b9:0b:9b:95:
         44:20:06:ae:7e:d7:7a:50:ec:4a:af:4d:04:ef:46:5c:70:ed:
         d0:ea:5d:c7:a8:c5:6c:74:be:39:ce:d4:b1:5c:a8:d8:ef:8b:
         3b:a2:e7:8e:2f:bc:88:ff:82:aa:df:7b:2c:fe:6d:21:b9:22:
         f3:71:77:3f:44:8e:9f:3c:5f:90:6b:56:60:55:dc:7d:58:8e:
         46:59:2b:a2:63:eb:2f:1e:10:3a:c5:f5:4e:95:b4:08:67:c4:
         0e:af:3d:62:08:7d:3e:c9:6b:ab:3b:2d:a0:01:3e:29:e8:f8:
         d2:71:c1:0d:36:3e:a4:c4:bd:90:03:64:3e:55:c5:e7:f3:e1:
         65:85:dd:fc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE46L1Nc4Mmk3ZRIeoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk
NjA5NjY2NTAtZmU5Ny00MzcwLWE5YTMtYzhjMmQxOTRmYjlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzulw6AIwfkKVjJMmSx75Ea90MV8LUu683HX4
Mi3+t6RKLtAV+qSN++1Cu5sKkXgLFlucrNYKxESrdzB4ITXX8njM0d5PUXr7kPc1
95jj3xv1th8lwIZa+Ft4+sVhBkXXpOmMdanUiYmtLVLhn4JIvgjyLMXCFJGRzdtX
tT9C6bPKi4gzKpcBTHeu/X3XRArpZWrf6/mpQz6IV0M41m3ixrj8I/IX2gnjoSrl
7wBV9almpBs0iZ+R+vp8Rt/JFF/0Ey9RklWQYXvYIPnoJ9zx71q436/SofcFc0Nm
WKuuXB8yRTzea7mdI4uRVtZS+oxDg8h/tkUwNwK28gh1+oYF2wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBfUn3YlYw3LkrMYy/WKTB2zPfXWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDAzZmVmZDEtODczZC0z
NjE3LWE4ZjctZWEzYzZmNmRhN2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALqKzLQ9AqdnV7UdxNap6HedqtqDV0PLSQ66PsCFnwJz8zvnDzZ9
28ADg35ZsHgbdyT0QA87d4JRn0wfbkNJ77woOnhp/RCiMXpFMo+CM3V0S+vnK7j/
5vMGDyCclOumD4ajfoPiLieobaw9pCa4+O4SaB+GmlgCGLeKuQublUQgBq5+13pQ
7EqvTQTvRlxw7dDqXceoxWx0vjnO1LFcqNjvizui544vvIj/gqrfeyz+bSG5IvNx
dz9Ejp88X5BrVmBV3H1YjkZZK6Jj6y8eEDrF9U6VtAhnxA6vPWIIfT7Ja6s7LaAB
Pino+NJxwQ02PqTEvZADZD5Vxefz4WWF3fw=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:07 2026 by rpki-client