Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/961f9b47-0a67-32aa-8707-aaeb81d108ee.roa
File:                     961f9b47-0a67-32aa-8707-aaeb81d108ee.roa (raw, json)
Hash identifier:          DZJM5V8i3v/QqT49rGzgklNYLt3Xujgnbl4/S0sy+DU=
Subject key identifier:   87:B6:A4:92:BD:C1:E9:2C:9D:8C:85:53:61:E3:EE:05:2E:CB:C3:E5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D27AA73D0D35820EEA0BAC300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/961f9b47-0a67-32aa-8707-aaeb81d108ee.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     197033
IP address blocks:        2001:470:376::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:73:d0:d3:58:20:ee:a0:ba:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=5e3ebf65-6c96-4e13-ac14-21376859907f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:41:2b:60:92:96:19:bf:1f:ee:5f:f8:29:2f:
                    af:9b:a4:db:9e:d7:55:e9:e6:36:76:cb:0a:a3:30:
                    8e:75:ea:77:bd:30:cd:36:9e:e5:b4:f3:60:31:53:
                    a9:e1:fa:fc:53:1f:dc:1b:cf:4e:d9:82:0c:83:07:
                    3d:a4:76:da:d8:dc:a9:4a:22:7f:43:d6:c2:17:de:
                    15:12:43:52:14:d8:42:96:5e:bf:48:05:72:f7:d4:
                    04:ab:a1:ea:fe:dc:43:ca:9b:bb:62:1e:1c:fa:26:
                    26:ee:82:2c:89:f8:fd:0d:1a:6c:8f:d0:06:67:a1:
                    cb:f2:23:e5:c1:f7:d6:02:3e:e8:c8:ef:0d:94:9d:
                    56:93:81:ae:d6:ce:8f:78:be:71:75:54:41:14:44:
                    11:3d:02:d0:09:85:48:5f:60:b4:70:9c:26:8b:d7:
                    f5:bc:d9:c7:0c:65:76:1a:1a:df:ea:b2:bc:b3:c7:
                    5d:0d:7c:81:50:8b:2a:24:09:c2:b8:59:0b:3b:bb:
                    84:62:da:33:e1:fc:cd:44:60:6b:6b:e8:6c:d6:9d:
                    33:63:4b:ec:75:e2:2b:ff:18:56:c2:db:f6:8b:cf:
                    c6:30:c2:db:ed:a2:ae:b1:ce:8f:13:b2:90:db:80:
                    ae:b4:cc:27:59:26:bd:7a:66:c5:27:5d:bc:68:ed:
                    b4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B6:A4:92:BD:C1:E9:2C:9D:8C:85:53:61:E3:EE:05:2E:CB:C3:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/961f9b47-0a67-32aa-8707-aaeb81d108ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:376::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:22:e7:fe:39:85:33:fd:fe:90:37:7f:ed:db:1e:f6:11:34:
         3e:0b:5e:09:3d:25:00:b6:7d:97:5f:69:04:50:a3:b9:f1:ff:
         83:c2:11:cf:4c:b8:cd:99:94:73:2a:73:03:85:82:ac:d7:19:
         58:6a:4d:b2:51:94:89:80:42:7d:17:cf:04:67:bb:59:1a:09:
         93:7f:83:ae:2a:e1:fa:48:a1:dd:03:47:ee:bb:11:da:f8:d2:
         84:34:62:57:84:34:8b:d7:25:b8:26:09:90:16:01:2c:37:ff:
         63:38:20:40:d0:c2:90:d7:5a:94:b9:8d:12:05:65:62:78:75:
         9b:6b:90:8f:9e:04:25:59:66:21:5c:99:a5:33:23:3d:95:88:
         98:6d:27:e3:86:9a:79:ce:50:a3:eb:01:30:48:3a:78:ee:95:
         44:d9:f8:ba:a6:e3:67:f5:59:8a:4e:85:fe:0c:8b:49:3e:d8:
         3f:48:ce:95:0b:ff:2b:f8:1f:7f:c2:e8:f9:d1:2e:7f:9b:e9:
         a1:0b:ab:9e:0e:f3:a1:4f:ec:c4:77:3b:1b:1d:8e:bf:96:64:
         13:77:9b:8f:61:52:dd:dd:bd:dd:2f:a2:54:67:ff:67:a2:1f:
         0a:ee:71:9f:e8:92:f8:0b:90:0c:db:09:56:b0:96:a6:5c:b7:
         00:26:2f:f5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0nqnPQ01gg7qC6wwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk
NWUzZWJmNjUtNmM5Ni00ZTEzLWFjMTQtMjEzNzY4NTk5MDdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0ErYJKWGb8f7l/4KS+vm6TbntdV6eY2dssK
ozCOdep3vTDNNp7ltPNgMVOp4fr8Ux/cG89O2YIMgwc9pHba2NypSiJ/Q9bCF94V
EkNSFNhCll6/SAVy99QEq6Hq/txDypu7Yh4c+iYm7oIsifj9DRpsj9AGZ6HL8iPl
wffWAj7oyO8NlJ1Wk4Gu1s6PeL5xdVRBFEQRPQLQCYVIX2C0cJwmi9f1vNnHDGV2
Ghrf6rK8s8ddDXyBUIsqJAnCuFkLO7uEYtoz4fzNRGBra+hs1p0zY0vsdeIr/xhW
wtv2i8/GMMLb7aKusc6PE7KQ24CutMwnWSa9embFJ128aO20kQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIe2pJK9weksnYyFU2Hj7gUuy8PlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTYxZjliNDctMGE2Ny0z
MmFhLTg3MDctYWFlYjgxZDEwOGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAN2
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKgi5/45hTP9/pA3f+3bHvYRND4LXgk9JQC2fZdfaQRQo7nx/4PC
Ec9MuM2ZlHMqcwOFgqzXGVhqTbJRlImAQn0XzwRnu1kaCZN/g64q4fpIod0DR+67
Edr40oQ0YleENIvXJbgmCZAWASw3/2M4IEDQwpDXWpS5jRIFZWJ4dZtrkI+eBCVZ
ZiFcmaUzIz2ViJhtJ+OGmnnOUKPrATBIOnjulUTZ+Lqm42f1WYpOhf4Mi0k+2D9I
zpUL/yv4H3/C6PnRLn+b6aELq54O86FP7MR3Oxsdjr+WZBN3m49hUt3dvd0volRn
/2eiHwrucZ/okvgLkAzbCVawlqZctwAmL/U=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:25:38 2026 by rpki-client