Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/94d2dbc7-8864-32da-881a-913dab0ee7ad.roa
File:                     94d2dbc7-8864-32da-881a-913dab0ee7ad.roa (raw, json)
Hash identifier:          hLxwwRuRl86Afai7DWmvTny+4bRaO3KvhvAl8ptQ84o=
Subject key identifier:   7A:D0:25:EC:44:9C:EB:F3:54:8F:42:DA:45:DC:7D:44:A2:FF:6C:78
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D3F65032A74A3F852DC199680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/94d2dbc7-8864-32da-881a-913dab0ee7ad.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     27180
IP address blocks:        2001:470:416::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:65:03:2a:74:a3:f8:52:dc:19:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=d3d4933c-ecda-4dbb-8c5a-26ecf68022f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:03:7a:20:df:be:7a:eb:ac:b4:d9:37:ae:
                    8f:51:ac:4d:02:e2:8e:d7:71:d1:16:fc:57:13:22:
                    2b:99:84:5d:3e:5d:56:4a:04:eb:5f:6f:7d:ef:bd:
                    1c:d9:a2:9a:32:92:a4:c6:28:7b:e6:4a:3a:45:6d:
                    18:11:a0:9f:cd:ef:5e:c6:4e:b5:56:1c:c7:4f:75:
                    23:a3:38:e1:8b:83:9e:42:cc:04:28:d3:76:a5:16:
                    89:3b:80:5a:39:4d:6a:3b:b3:cf:fc:66:a8:f7:b9:
                    01:9e:16:56:80:ff:71:c3:87:42:03:6e:8d:73:11:
                    f3:b2:bd:56:f1:ae:39:24:76:14:1d:9d:e9:70:f6:
                    a4:28:23:e9:c3:04:a0:35:76:b8:76:89:ca:39:6b:
                    9f:25:06:76:29:e1:9e:50:f8:58:80:34:f7:f6:1b:
                    ac:c5:6e:66:77:8a:2b:fa:b2:cc:f4:d7:74:ad:bd:
                    83:72:8c:33:c5:44:61:18:cb:46:eb:1e:1a:45:82:
                    d3:32:b6:84:17:c8:38:08:d9:13:e2:03:df:ea:3c:
                    63:ff:f8:bd:59:02:2e:e5:dc:32:05:5d:78:c2:54:
                    87:00:18:f6:b8:5b:7c:4a:62:7c:ee:01:f6:07:64:
                    34:3b:5c:06:bf:3e:93:7e:c0:f4:81:aa:a6:ef:66:
                    e9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D0:25:EC:44:9C:EB:F3:54:8F:42:DA:45:DC:7D:44:A2:FF:6C:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/94d2dbc7-8864-32da-881a-913dab0ee7ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:416::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:ab:f2:e4:ac:73:8e:83:8f:87:e4:77:79:88:0f:39:ba:6f:
         10:a5:23:73:f3:26:f1:16:72:54:b3:cb:d5:d9:19:a5:cd:6a:
         8e:3b:9a:6b:d3:a5:7e:14:19:e3:fd:a6:3f:67:b3:06:8c:2b:
         79:fd:0b:4c:2f:24:bb:78:1d:69:1a:15:a1:4d:f4:db:9b:38:
         73:4d:d7:b9:94:9d:36:eb:06:fa:b0:a0:0d:f8:7f:3d:e9:f6:
         ca:c3:61:83:f7:1f:14:b0:2f:ac:98:ac:23:83:85:71:da:08:
         2b:d5:cc:70:18:e1:51:e2:7a:63:78:f4:24:e5:1f:3f:38:f8:
         a6:65:85:81:d8:02:34:64:06:cc:65:47:4e:44:8e:de:ab:10:
         4e:13:3a:4e:eb:4d:a5:8c:1b:97:85:e4:c6:0c:96:36:eb:af:
         0a:cf:60:7f:ef:97:8c:a5:83:7a:b2:94:04:53:8b:fc:f2:c7:
         05:dc:f3:bf:58:dc:08:a2:b0:c6:af:15:78:b0:48:9b:61:bc:
         b6:bc:8b:1a:c5:ae:8f:c7:2d:a4:89:da:4d:cc:26:2f:47:25:
         b3:70:e3:0e:04:0c:4f:a4:96:61:37:59:06:fc:87:ec:2b:dc:
         2a:92:fa:68:f7:09:e1:76:64:7f:46:66:b1:6c:b9:e2:76:e9:
         84:3f:5c:79
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0/ZQMqdKP4UtwZloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk
ZDNkNDkzM2MtZWNkYS00ZGJiLThjNWEtMjZlY2Y2ODAyMmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwADeiDfvnrrrLTZN66PUaxNAuKO13HRFvxX
EyIrmYRdPl1WSgTrX299770c2aKaMpKkxih75ko6RW0YEaCfze9exk61VhzHT3Uj
ozjhi4OeQswEKNN2pRaJO4BaOU1qO7PP/Gao97kBnhZWgP9xw4dCA26NcxHzsr1W
8a45JHYUHZ3pcPakKCPpwwSgNXa4donKOWufJQZ2KeGeUPhYgDT39husxW5md4or
+rLM9Nd0rb2DcowzxURhGMtG6x4aRYLTMraEF8g4CNkT4gPf6jxj//i9WQIu5dwy
BV14wlSHABj2uFt8SmJ87gH2B2Q0O1wGvz6TfsD0gaqm72bpFQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHrQJexEnOvzVI9C2kXcfUSi/2x4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTRkMmRiYzctODg2NC0z
MmRhLTg4MWEtOTEzZGFiMGVlN2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQW
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFmr8uSsc46Dj4fkd3mIDzm6bxClI3PzJvEWclSzy9XZGaXNao47
mmvTpX4UGeP9pj9nswaMK3n9C0wvJLt4HWkaFaFN9NubOHNN17mUnTbrBvqwoA34
fz3p9srDYYP3HxSwL6yYrCODhXHaCCvVzHAY4VHiemN49CTlHz84+KZlhYHYAjRk
BsxlR05Ejt6rEE4TOk7rTaWMG5eF5MYMljbrrwrPYH/vl4ylg3qylARTi/zyxwXc
879Y3AiisMavFXiwSJthvLa8ixrFro/HLaSJ2k3MJi9HJbNw4w4EDE+klmE3WQb8
h+wr3CqS+mj3CeF2ZH9GZrFsueJ26YQ/XHk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:22:10 2026 by rpki-client