Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5b1d4d7-a4c5-3122-acfa-a3a7f2938fea.roa
File:                     d5b1d4d7-a4c5-3122-acfa-a3a7f2938fea.roa (raw, json)
Hash identifier:          PQBydBt7HkgYjFGJFzp45dQx6t2BLpb9xH5Hkca+tdo=
Subject key identifier:   54:9D:0E:46:67:06:BE:A8:7C:DA:53:3A:F5:10:CD:8C:21:C0:0B:12
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F581CCBD094EC18FF9480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5b1d4d7-a4c5-3122-acfa-a3a7f2938fea.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     46760
IP address blocks:        2001:470:31b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:58:1c:cb:d0:94:ec:18:ff:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=50367656-679c-4aad-923d-c43ab426d148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:59:7b:76:15:c8:21:d7:23:03:3c:7b:bc:13:
                    82:36:0b:d2:bf:6a:4a:db:10:b7:d8:91:77:05:76:
                    08:87:6d:7f:ef:d4:17:c2:a7:b5:d6:96:e4:f8:ab:
                    f8:e2:12:f2:08:7c:6c:28:a1:e9:52:8a:1a:46:85:
                    cc:86:00:b6:e3:f0:32:42:e8:fd:13:53:28:05:d6:
                    ed:85:1b:6d:0e:4c:1d:20:42:f3:3b:d9:62:f4:41:
                    77:8c:11:bd:d5:a7:3b:d4:62:8d:79:2d:e9:2b:fe:
                    48:e3:3f:78:40:58:3e:90:b6:60:60:32:97:aa:cb:
                    63:af:db:98:c0:36:ee:ce:77:83:11:04:3c:8c:6c:
                    6b:62:22:58:a1:df:7b:bf:29:7b:6b:5f:cf:95:36:
                    76:9f:0c:70:92:38:51:bc:ee:e8:fa:54:c4:ad:c9:
                    75:82:81:db:1a:65:5d:c2:9d:fd:ec:22:38:7e:2e:
                    e3:e4:60:5e:a9:24:48:08:ad:52:32:a5:28:a4:15:
                    aa:21:0f:3d:ae:eb:ed:e6:fc:6a:6e:59:ab:41:4b:
                    fd:60:5e:78:69:74:06:b2:57:82:75:61:e4:55:6b:
                    22:b8:88:19:65:79:af:e0:de:1b:49:3d:9a:f9:9c:
                    71:7a:f3:87:87:f0:74:c0:91:1c:e7:ac:3d:bf:92:
                    0d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9D:0E:46:67:06:BE:A8:7C:DA:53:3A:F5:10:CD:8C:21:C0:0B:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5b1d4d7-a4c5-3122-acfa-a3a7f2938fea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:31b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:9f:d0:aa:c8:04:e5:fe:48:2e:06:2c:e2:e6:09:2a:6c:8b:
         87:eb:ec:73:55:b9:0c:d2:b9:d5:8c:56:38:e9:e9:eb:9d:83:
         d7:65:47:83:38:9b:50:84:ef:1e:ca:0c:b8:ad:b0:57:f8:e9:
         9d:90:57:6a:35:2a:13:59:bb:1c:b5:91:9d:24:ed:cd:cd:88:
         85:3f:39:7e:18:34:a1:34:cc:9f:2d:44:9d:2e:1a:7e:d3:ff:
         14:b3:ff:8f:92:8d:11:80:9b:a5:8b:07:ff:9b:31:12:ac:a1:
         69:92:d0:0e:17:8a:98:27:5e:ba:7b:5a:fa:20:17:e9:ee:47:
         e3:94:b6:91:81:c7:80:9f:4e:db:6c:17:84:55:bc:34:d9:fe:
         36:d7:a6:04:37:11:da:a0:a8:5b:6b:db:2b:25:35:e8:55:e4:
         56:72:c5:b6:1f:56:65:41:9d:8f:24:bb:49:55:2b:e9:2b:70:
         e2:df:cc:b1:27:1d:92:de:8b:29:d8:9b:d2:26:56:4f:0c:c7:
         cb:65:b1:53:18:96:c9:40:8a:0f:01:f3:aa:cc:5b:8b:15:01:
         24:74:f0:9f:58:2a:e6:ad:39:4d:40:18:2f:86:e2:61:0c:7e:
         ae:7b:17:bc:24:7f:45:23:79:cf:7c:ec:0d:2e:7f:2e:fd:92:
         31:5e:20:23
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE46L1gcy9CU7Bj/lIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk
NTAzNjc2NTYtNjc5Yy00YWFkLTkyM2QtYzQzYWI0MjZkMTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFl7dhXIIdcjAzx7vBOCNgvSv2pK2xC32JF3
BXYIh21/79QXwqe11pbk+Kv44hLyCHxsKKHpUooaRoXMhgC24/AyQuj9E1MoBdbt
hRttDkwdIELzO9li9EF3jBG91ac71GKNeS3pK/5I4z94QFg+kLZgYDKXqstjr9uY
wDbuzneDEQQ8jGxrYiJYod97vyl7a1/PlTZ2nwxwkjhRvO7o+lTErcl1goHbGmVd
wp397CI4fi7j5GBeqSRICK1SMqUopBWqIQ89ruvt5vxqblmrQUv9YF54aXQGsleC
dWHkVWsiuIgZZXmv4N4bST2a+ZxxevOHh/B0wJEc56w9v5INdwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFSdDkZnBr6ofNpTOvUQzYwhwAsSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDViMWQ0ZDctYTRjNS0z
MTIyLWFjZmEtYTNhN2YyOTM4ZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMb
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACuf0KrIBOX+SC4GLOLmCSpsi4fr7HNVuQzSudWMVjjp6eudg9dl
R4M4m1CE7x7KDLitsFf46Z2QV2o1KhNZuxy1kZ0k7c3NiIU/OX4YNKE0zJ8tRJ0u
Gn7T/xSz/4+SjRGAm6WLB/+bMRKsoWmS0A4XipgnXrp7WvogF+nuR+OUtpGBx4Cf
TttsF4RVvDTZ/jbXpgQ3EdqgqFtr2yslNehV5FZyxbYfVmVBnY8ku0lVK+krcOLf
zLEnHZLeiynYm9ImVk8Mx8tlsVMYlslAig8B86rMW4sVASR08J9YKuatOU1AGC+G
4mEMfq57F7wkf0Ujec987A0ufy79kjFeICM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:50:29 2026 by rpki-client