Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/646c6b86-c78b-3396-8cc4-73f0fd500d9f.roa
File:                     646c6b86-c78b-3396-8cc4-73f0fd500d9f.roa (raw, json)
Hash identifier:          PyDUOqgM1XlYiX+Y9R95OCz+qHi0slvjLfBsZ5HJ+XU=
Subject key identifier:   F7:4F:32:00:A5:B3:E8:D8:97:07:30:EE:D8:3A:A2:9F:98:44:6D:6F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D3F6501CE6C0E94775BF7F680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/646c6b86-c78b-3396-8cc4-73f0fd500d9f.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     56286
IP address blocks:        2001:470:498::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:65:01:ce:6c:0e:94:77:5b:f7:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=a4651d6f-b1af-4484-94fe-49b6bf98e7a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:40:52:11:e4:29:e7:e2:52:a1:c2:a3:f8:a5:
                    2e:ac:87:09:06:ab:59:38:4d:15:bb:0b:20:ba:b1:
                    24:92:0b:5a:5f:86:94:46:db:e5:45:5f:2f:47:a6:
                    c1:14:23:9c:2a:d4:58:d1:3e:7d:7b:64:6d:7e:d3:
                    46:8f:74:04:c0:8c:34:83:4c:f1:49:4f:e1:9d:72:
                    e4:2f:ae:01:57:31:22:8a:b6:05:04:8a:d4:1a:69:
                    64:84:a8:cd:66:5e:da:b5:8b:f3:5e:3a:5a:00:ac:
                    1b:29:da:15:c6:9c:bc:c0:d8:3a:f1:44:24:13:02:
                    37:35:d6:17:d0:4d:9c:2b:1e:94:ea:72:b0:02:67:
                    3e:10:fc:7a:12:75:b8:7a:be:0c:5d:fc:01:90:72:
                    c3:f5:27:2d:62:70:b7:21:72:f8:93:92:8a:a3:83:
                    b1:ee:84:4f:55:f0:20:2b:55:98:17:dd:31:b5:8e:
                    f5:af:c5:8a:dc:44:7c:4d:86:3e:6e:39:14:30:4a:
                    6f:59:d6:34:0e:02:1b:e4:b0:54:c3:6a:95:62:4b:
                    cb:a9:9c:f9:f8:45:bc:d8:9b:dd:7b:b4:8d:26:4b:
                    18:fc:d7:3c:eb:09:07:40:f5:07:17:19:2d:d6:56:
                    89:a4:65:8d:2a:15:da:5f:16:ed:61:c4:d1:c8:dc:
                    f6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4F:32:00:A5:B3:E8:D8:97:07:30:EE:D8:3A:A2:9F:98:44:6D:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/646c6b86-c78b-3396-8cc4-73f0fd500d9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:498::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:67:c9:cd:0d:d3:b9:47:e7:ce:12:32:38:54:76:d8:76:6d:
         99:72:80:d1:91:26:ab:e7:b3:bc:28:58:fb:d5:7a:ea:2e:ba:
         39:d9:cd:18:8b:95:c5:c6:bd:e0:6d:19:4a:55:7e:eb:fe:f4:
         7d:9b:1a:c2:94:09:d4:5d:3f:46:09:72:66:5e:8a:71:dc:c0:
         b5:7d:37:b2:85:2c:4d:87:90:da:e3:96:c5:95:44:f2:f4:54:
         45:7a:8d:5c:8a:41:e1:ca:77:57:21:62:66:f1:b2:53:6e:26:
         05:8a:f0:89:1a:6b:46:82:e6:fb:d0:18:28:03:db:51:ef:85:
         b2:8c:59:32:0f:56:ca:63:dc:e8:4d:41:3a:02:bf:81:26:81:
         36:cd:75:76:c8:a8:83:1e:49:de:1a:c4:46:17:09:48:50:b8:
         8c:1f:76:ec:cd:04:29:a9:5f:af:95:28:dd:81:2c:83:dd:11:
         22:2e:e8:59:49:92:09:53:d7:60:3d:47:34:5b:ce:b6:f0:3b:
         b5:13:69:e3:0d:e8:8c:41:2f:62:50:c4:08:68:3c:63:88:74:
         d4:19:cc:ba:6d:d2:ba:5e:28:8a:46:fd:3a:cd:92:43:52:ad:
         55:1e:c7:75:e1:e9:ee:81:60:fa:c4:ec:04:20:cd:00:9c:9f:
         35:de:f0:ff
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0/ZQHObA6Ud1v39oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk
YTQ2NTFkNmYtYjFhZi00NDg0LTk0ZmUtNDliNmJmOThlN2ExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEBSEeQp5+JSocKj+KUurIcJBqtZOE0Vuwsg
urEkkgtaX4aURtvlRV8vR6bBFCOcKtRY0T59e2RtftNGj3QEwIw0g0zxSU/hnXLk
L64BVzEiirYFBIrUGmlkhKjNZl7atYvzXjpaAKwbKdoVxpy8wNg68UQkEwI3NdYX
0E2cKx6U6nKwAmc+EPx6EnW4er4MXfwBkHLD9SctYnC3IXL4k5KKo4Ox7oRPVfAg
K1WYF90xtY71r8WK3ER8TYY+bjkUMEpvWdY0DgIb5LBUw2qVYkvLqZz5+EW82Jvd
e7SNJksY/Nc86wkHQPUHFxkt1laJpGWNKhXaXxbtYcTRyNz2cwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPdPMgCls+jYlwcw7tg6op+YRG1vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjQ2YzZiODYtYzc4Yi0z
Mzk2LThjYzQtNzNmMGZkNTAwZDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcASY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJVnyc0N07lH584SMjhUdth2bZlygNGRJqvns7woWPvVeuouujnZ
zRiLlcXGveBtGUpVfuv+9H2bGsKUCdRdP0YJcmZeinHcwLV9N7KFLE2HkNrjlsWV
RPL0VEV6jVyKQeHKd1chYmbxslNuJgWK8Ikaa0aC5vvQGCgD21HvhbKMWTIPVspj
3OhNQToCv4EmgTbNdXbIqIMeSd4axEYXCUhQuIwfduzNBCmpX6+VKN2BLIPdESIu
6FlJkglT12A9RzRbzrbwO7UTaeMN6IxBL2JQxAhoPGOIdNQZzLpt0rpeKIpG/TrN
kkNSrVUex3Xh6e6BYPrE7AQgzQCcnzXe8P8=
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:32:04 2026 by rpki-client