Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/81d171e4-34f5-3f0a-9f26-571585536e9c.roa
File:                     81d171e4-34f5-3f0a-9f26-571585536e9c.roa (raw, json)
Hash identifier:          RQt/FhVoTBLohxadAcjSRv77yBoeA1UuLDlMtvDyRsw=
Subject key identifier:   6B:A4:5E:D1:18:3D:87:19:03:C5:06:2B:24:9E:8D:1E:93:D6:0F:DE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F64AAE95B7AF05B390880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/81d171e4-34f5-3f0a-9f26-571585536e9c.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     46997
IP address blocks:        2001:470:139::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:64:aa:e9:5b:7a:f0:5b:39:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=5ca4064c-7522-4c6e-9323-22f29f52b6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:55:9b:59:8f:b8:8c:63:85:05:23:4d:40:01:
                    36:24:8b:85:da:7d:8b:e1:fb:b8:e3:12:7a:5e:f9:
                    fa:97:56:9e:5e:d4:ee:c8:39:a7:40:27:77:49:43:
                    23:17:ee:4b:a4:fb:26:4e:d0:3f:36:34:2f:ef:11:
                    dc:3b:f7:45:5d:4d:d5:6b:e9:bd:6f:75:2f:fd:ef:
                    62:4f:fd:f6:e7:97:55:3d:68:b5:0e:6c:3a:08:11:
                    5e:55:65:b4:46:e8:93:5d:f4:4a:c2:6f:56:42:0e:
                    6e:29:44:6a:bd:be:86:b9:f7:57:82:7d:38:70:09:
                    fd:db:48:9a:18:5e:78:42:79:3b:5e:8e:99:16:a2:
                    87:dc:a4:33:c8:8b:c6:17:59:5b:ba:6a:92:94:61:
                    20:36:d3:e7:7d:65:62:b9:f7:74:c1:51:9b:e5:28:
                    41:29:14:a0:f1:3a:d3:fb:7a:1a:78:ed:b5:e4:23:
                    80:b4:97:3a:67:b2:dd:1a:ee:f6:f1:d5:35:e9:d1:
                    ff:c4:e2:d1:21:81:c6:7f:b1:5c:0f:70:e6:89:0a:
                    63:33:67:f2:1a:db:25:d8:db:79:ea:e5:3c:c4:90:
                    22:36:6b:12:e2:03:2c:ab:be:aa:a3:4c:31:f3:b4:
                    9f:e2:5b:6f:6c:bf:9f:03:c8:2e:3d:0a:da:4f:a1:
                    df:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A4:5E:D1:18:3D:87:19:03:C5:06:2B:24:9E:8D:1E:93:D6:0F:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/81d171e4-34f5-3f0a-9f26-571585536e9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:139::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:77:36:71:da:b6:c5:1a:5a:e8:1e:f8:01:00:1e:16:9b:f5:
         5a:14:c1:fd:17:eb:ef:44:80:25:9d:c8:80:64:2d:c8:73:05:
         9a:b6:b4:20:d5:c7:84:7c:7a:5b:d7:c6:7a:85:52:ba:4e:75:
         17:00:52:1d:5f:8b:06:97:8b:63:58:76:d3:8c:34:d2:36:c9:
         4b:78:6e:15:36:30:eb:1d:bf:04:33:c4:d4:0b:b4:da:00:2b:
         ba:2e:95:e5:92:1c:12:80:eb:c0:d6:97:2d:c8:5a:f9:0e:9a:
         84:29:c0:77:2d:ba:3d:6b:84:4d:fe:01:2c:4f:8d:82:6e:5e:
         f4:e1:cb:4a:75:4c:d7:2b:95:97:a4:91:43:58:81:d3:62:50:
         49:d4:d8:ed:18:06:5c:bc:65:77:d8:f9:12:50:ce:dc:4f:e1:
         8a:e3:c0:dc:7e:00:f5:b2:52:07:46:9e:bf:67:41:11:2b:58:
         52:ad:9b:5e:a4:48:21:c3:62:cd:e8:a3:33:ed:38:41:54:f5:
         14:48:2d:c6:bf:10:31:ad:bc:a8:9b:10:ec:a3:49:7f:e3:68:
         3b:e0:c1:4f:d6:f4:2f:9e:9d:d9:84:42:f9:10:31:cc:a8:18:
         4f:85:29:1e:11:d4:10:eb:76:64:e6:d4:8b:bb:82:e4:70:79:
         10:3f:a0:48
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE46L2Sq6Vt68Fs5CIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk
NWNhNDA2NGMtNzUyMi00YzZlLTkzMjMtMjJmMjlmNTJiNmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1WbWY+4jGOFBSNNQAE2JIuF2n2L4fu44xJ6
Xvn6l1aeXtTuyDmnQCd3SUMjF+5LpPsmTtA/NjQv7xHcO/dFXU3Va+m9b3Uv/e9i
T/3255dVPWi1Dmw6CBFeVWW0RuiTXfRKwm9WQg5uKURqvb6GufdXgn04cAn920ia
GF54Qnk7Xo6ZFqKH3KQzyIvGF1lbumqSlGEgNtPnfWViufd0wVGb5ShBKRSg8TrT
+3oaeO215COAtJc6Z7LdGu728dU16dH/xOLRIYHGf7FcD3DmiQpjM2fyGtsl2Nt5
6uU8xJAiNmsS4gMsq76qo0wx87Sf4ltvbL+fA8guPQraT6HfoQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGukXtEYPYcZA8UGKySejR6T1g/eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODFkMTcxZTQtMzRmNS0z
ZjBhLTlmMjYtNTcxNTg1NTM2ZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAE5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACR3NnHatsUaWuge+AEAHhab9VoUwf0X6+9EgCWdyIBkLchzBZq2
tCDVx4R8elvXxnqFUrpOdRcAUh1fiwaXi2NYdtOMNNI2yUt4bhU2MOsdvwQzxNQL
tNoAK7ouleWSHBKA68DWly3IWvkOmoQpwHctuj1rhE3+ASxPjYJuXvThy0p1TNcr
lZekkUNYgdNiUEnU2O0YBly8ZXfY+RJQztxP4YrjwNx+APWyUgdGnr9nQRErWFKt
m16kSCHDYs3oozPtOEFU9RRILca/EDGtvKibEOyjSX/jaDvgwU/W9C+endmEQvkQ
McyoGE+FKR4R1BDrdmTm1Iu7guRweRA/oEg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:14:33 2026 by rpki-client