Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bdb9e528-56a6-3610-98ae-38cbc891dade.roa
File:                     bdb9e528-56a6-3610-98ae-38cbc891dade.roa (raw, json)
Hash identifier:          Phu1ZvQ2WyDsz/PEbC2GstsYiVCLL0pDCv6/UzlsVLM=
Subject key identifier:   0F:FF:E3:B1:D2:7C:E8:68:2A:3B:4F:95:6B:63:AE:0D:28:6D:5D:16
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D2D3F672A852D2F0C302C9B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bdb9e528-56a6-3610-98ae-38cbc891dade.roa
Signing time:             Sun 15 Mar 2026 13:00:41 +0000
ROA not before:           Sun 15 Mar 2026 13:00:41 +0000
ROA not after:            Sat 13 Jun 2026 13:00:41 +0000
asID:                     24812
IP address blocks:        2001:470:542::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2d:3f:67:2a:85:2d:2f:0c:30:2c:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 15 13:00:41 2026 GMT
            Not After : Jun 13 13:00:41 2026 GMT
        Subject: CN=a8d056b3-1073-41b7-84fb-f81e95fb2117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:79:4e:c1:c8:5b:20:c4:fa:26:2b:6b:12:75:
                    21:2d:7a:60:a7:58:db:cf:66:3b:5b:ab:54:55:6c:
                    ee:f2:a4:6a:76:6b:63:13:d6:ba:c5:39:d9:e4:8f:
                    c3:47:24:42:93:ad:fd:0e:b1:2b:90:fe:d8:23:c0:
                    ab:8c:42:fc:cc:b4:ff:03:4a:76:57:7b:db:0a:6b:
                    72:c2:3e:ec:77:1f:5c:0c:1f:c4:bc:a2:96:c1:87:
                    e3:29:1d:77:11:b4:be:f1:71:f9:bc:26:d7:21:74:
                    01:e2:4e:7f:17:18:d0:53:9e:b6:84:94:0b:b6:d6:
                    6e:39:48:c0:bb:99:05:7e:2a:f4:c2:ce:2c:4c:2f:
                    68:99:e5:ad:3e:ec:dd:59:38:63:10:96:2c:bc:22:
                    9f:8d:74:49:c3:58:22:e7:09:ce:51:aa:77:e0:a3:
                    0d:21:a4:b3:a4:81:89:be:4e:d9:fc:fc:15:ae:9f:
                    e3:a9:6c:30:47:96:6b:08:9a:a2:4f:ef:11:33:71:
                    46:2d:06:90:7a:25:d5:08:44:ca:73:9c:e7:87:6d:
                    5a:54:6d:04:46:8e:61:3f:f2:45:78:48:8f:85:e8:
                    f2:3d:57:86:9d:96:c2:fb:1b:fd:39:94:ca:d0:16:
                    80:b9:65:40:e1:c3:b5:93:76:01:3a:13:cc:c7:99:
                    8e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FF:E3:B1:D2:7C:E8:68:2A:3B:4F:95:6B:63:AE:0D:28:6D:5D:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bdb9e528-56a6-3610-98ae-38cbc891dade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:542::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:d0:ae:20:32:22:13:04:a0:3c:cd:88:f5:f7:55:bf:f7:61:
         8b:54:4a:ef:2f:76:45:83:54:61:e1:67:cd:97:0d:2b:56:c4:
         6f:77:96:8e:45:81:25:9c:a6:c6:3a:71:bd:76:57:01:3c:2b:
         25:1c:c1:30:22:70:76:b2:fe:60:e7:7f:96:6b:25:58:06:4d:
         e0:50:0c:12:2c:21:b4:20:bb:83:05:f3:4d:bd:58:5a:2e:65:
         25:46:0f:b0:fd:8e:7d:9f:37:a9:7b:d6:d0:b9:9b:7c:15:8e:
         a8:d0:4c:ba:e3:77:1a:3b:00:c5:a4:93:7a:4f:ff:a5:a5:15:
         d6:19:72:3b:9d:25:07:4e:db:77:2e:4c:a6:6c:8e:aa:aa:b6:
         aa:1b:87:99:af:e7:1a:10:2c:0d:b4:fd:f5:7e:74:07:65:81:
         1b:33:35:67:b3:63:c0:88:84:96:50:0d:c9:91:4a:75:78:91:
         f9:41:d7:50:d0:d6:b5:ff:e8:69:b7:e2:c2:29:41:f3:2c:d7:
         36:22:31:2e:cb:08:28:7c:f7:86:44:aa:12:b2:f0:06:ae:b2:
         88:9e:5b:19:ae:bd:7f:78:fb:4c:e0:54:49:53:90:96:c4:c3:
         22:ca:76:fd:0b:44:46:45:b7:ee:69:62:04:aa:e6:ef:a1:92:
         fe:0e:7c:22
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0tP2cqhS0vDDAsmwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk
YThkMDU2YjMtMTA3My00MWI3LTg0ZmItZjgxZTk1ZmIyMTE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknlOwchbIMT6JitrEnUhLXpgp1jbz2Y7W6tU
VWzu8qRqdmtjE9a6xTnZ5I/DRyRCk639DrErkP7YI8CrjEL8zLT/A0p2V3vbCmty
wj7sdx9cDB/EvKKWwYfjKR13EbS+8XH5vCbXIXQB4k5/FxjQU562hJQLttZuOUjA
u5kFfir0ws4sTC9omeWtPuzdWThjEJYsvCKfjXRJw1gi5wnOUap34KMNIaSzpIGJ
vk7Z/PwVrp/jqWwwR5ZrCJqiT+8RM3FGLQaQeiXVCETKc5znh21aVG0ERo5hP/JF
eEiPhejyPVeGnZbC+xv9OZTK0BaAuWVA4cO1k3YBOhPMx5mOTwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA//47HSfOhoKjtPlWtjrg0obV0WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmRiOWU1MjgtNTZhNi0z
NjEwLTk4YWUtMzhjYmM4OTFkYWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAVC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAbQriAyIhMEoDzNiPX3Vb/3YYtUSu8vdkWDVGHhZ82XDStWxG93
lo5FgSWcpsY6cb12VwE8KyUcwTAicHay/mDnf5ZrJVgGTeBQDBIsIbQgu4MF8029
WFouZSVGD7D9jn2fN6l71tC5m3wVjqjQTLrjdxo7AMWkk3pP/6WlFdYZcjudJQdO
23cuTKZsjqqqtqobh5mv5xoQLA20/fV+dAdlgRszNWezY8CIhJZQDcmRSnV4kflB
11DQ1rX/6Gm34sIpQfMs1zYiMS7LCCh894ZEqhKy8AausoieWxmuvX94+0zgVElT
kJbEwyLKdv0LREZFt+5pYgSq5u+hkv4OfCI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:31:46 2026 by rpki-client