Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8109e33-250d-3d73-8e2b-1ff6022e49e6.roa
File:                     d8109e33-250d-3d73-8e2b-1ff6022e49e6.roa (raw, json)
Hash identifier:          Rs+bUvRT9edQX2XTFzDWV0qDr/1FJTeH0FlnT0cJ//c=
Subject key identifier:   72:8E:4E:A9:41:DD:F0:1E:2E:25:0B:6B:67:0A:8B:0D:66:4D:94:49
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DB1DAD47E39DCC18555007600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8109e33-250d-3d73-8e2b-1ff6022e49e6.roa
Signing time:             Sat 02 May 2026 01:00:24 +0000
ROA not before:           Sat 02 May 2026 01:00:24 +0000
ROA not after:            Fri 31 Jul 2026 01:00:24 +0000
asID:                     400992
IP address blocks:        2001:470:3eb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:da:d4:7e:39:dc:c1:85:55:00:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  2 01:00:24 2026 GMT
            Not After : Jul 31 01:00:24 2026 GMT
        Subject: CN=3215c3a6-e2bc-4467-8be1-0d1a1db0d15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4f:b8:ed:e3:c8:42:0e:58:f3:15:19:9a:f7:
                    85:fa:be:a2:dc:a1:3a:82:4a:63:d0:3c:c8:04:55:
                    e9:e1:6f:32:9a:35:a2:1d:8e:5c:75:fa:1b:df:e2:
                    3b:b2:fc:59:f9:5e:f0:98:56:64:bc:4e:f4:15:63:
                    1f:33:a5:8b:96:bd:6f:31:a8:f7:29:10:8d:51:b4:
                    0d:67:1e:4d:e9:1d:89:da:d2:d1:e8:90:59:5e:a9:
                    83:8b:7f:f3:78:8c:59:18:42:d7:e1:5b:40:2d:4c:
                    32:a4:1e:e8:0c:9e:2e:c4:22:dd:c6:ed:00:ed:d4:
                    37:db:18:60:fa:22:0a:78:39:36:f5:e3:8b:59:87:
                    a7:27:2f:37:d1:f0:30:83:c2:1f:9e:ea:04:ea:59:
                    ba:48:b0:f0:65:76:31:04:73:12:8c:a0:14:87:7a:
                    f6:8a:57:2e:c1:ff:50:ed:f4:0b:30:6b:ab:0f:3f:
                    20:80:9c:08:43:11:b0:fa:d7:64:43:94:57:01:87:
                    d3:b3:df:fa:7a:01:d6:af:e5:c2:1d:aa:b6:f7:2e:
                    52:c3:50:c4:44:45:70:53:95:ae:73:87:67:00:a8:
                    61:66:38:28:53:f7:84:7a:33:7f:a4:46:3a:29:3b:
                    a4:e0:9b:42:81:32:ec:31:ca:7c:79:8c:b0:fe:2d:
                    86:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8E:4E:A9:41:DD:F0:1E:2E:25:0B:6B:67:0A:8B:0D:66:4D:94:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d8109e33-250d-3d73-8e2b-1ff6022e49e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:33:c0:e6:51:14:d7:80:1f:6b:da:8e:6c:9e:ec:23:e7:a2:
         b9:f7:c2:95:f4:c7:bf:c6:7d:03:38:d8:5f:b2:28:ba:6c:b5:
         b9:b1:ed:c5:00:2e:ad:1e:d3:d2:d2:fd:11:ea:04:2e:58:61:
         c9:37:38:8e:75:04:0c:e7:bf:67:eb:c8:d2:72:91:b4:a7:d0:
         f7:69:8d:8b:4c:5f:4e:78:78:03:d8:6a:25:1d:83:2c:b2:01:
         77:d8:3a:38:50:ab:7e:16:fb:e6:6b:26:98:85:96:a1:85:05:
         09:8e:cc:6e:e7:54:6e:5e:21:16:3e:fa:1d:39:bb:c0:40:13:
         41:1d:ab:b3:1b:a7:e4:c7:8e:3c:64:cc:ff:a5:e5:1b:c3:cc:
         0f:4e:e1:bc:58:5a:44:d6:70:33:ba:25:c1:62:d1:84:31:2f:
         7c:76:9c:b2:6e:fa:53:6f:de:08:fd:01:65:de:41:45:3a:08:
         61:cb:f3:af:dd:c3:6d:28:87:ec:b3:f8:de:b2:1c:66:a9:bf:
         08:6a:74:45:98:59:5b:a5:10:d5:ce:b8:00:c8:81:2b:5a:bc:
         44:ae:2b:7b:67:ba:42:7a:69:69:48:58:ef:b2:8c:58:ec:1d:
         45:b0:ce:1f:7f:10:8a:32:93:98:66:31:4f:1e:94:d4:64:dd:
         35:91:86:87
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2x2tR+OdzBhVUAdgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk
MzIxNWMzYTYtZTJiYy00NDY3LThiZTEtMGQxYTFkYjBkMTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk+47ePIQg5Y8xUZmveF+r6i3KE6gkpj0DzI
BFXp4W8ymjWiHY5cdfob3+I7svxZ+V7wmFZkvE70FWMfM6WLlr1vMaj3KRCNUbQN
Zx5N6R2J2tLR6JBZXqmDi3/zeIxZGELX4VtALUwypB7oDJ4uxCLdxu0A7dQ32xhg
+iIKeDk29eOLWYenJy830fAwg8IfnuoE6lm6SLDwZXYxBHMSjKAUh3r2ilcuwf9Q
7fQLMGurDz8ggJwIQxGw+tdkQ5RXAYfTs9/6egHWr+XCHaq29y5Sw1DEREVwU5Wu
c4dnAKhhZjgoU/eEejN/pEY6KTuk4JtCgTLsMcp8eYyw/i2GrwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHKOTqlB3fAeLiULa2cKiw1mTZRJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDgxMDllMzMtMjUwZC0z
ZDczLThlMmItMWZmNjAyMmU0OWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPr
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACUzwOZRFNeAH2vajmye7CPnorn3wpX0x7/GfQM42F+yKLpstbmx
7cUALq0e09LS/RHqBC5YYck3OI51BAznv2fryNJykbSn0PdpjYtMX054eAPYaiUd
gyyyAXfYOjhQq34W++ZrJpiFlqGFBQmOzG7nVG5eIRY++h05u8BAE0Edq7Mbp+TH
jjxkzP+l5RvDzA9O4bxYWkTWcDO6JcFi0YQxL3x2nLJu+lNv3gj9AWXeQUU6CGHL
86/dw20oh+yz+N6yHGapvwhqdEWYWVulENXOuADIgStavESuK3tnukJ6aWlIWO+y
jFjsHUWwzh9/EIoyk5hmMU8elNRk3TWRhoc=
-----END CERTIFICATE-----
Generated at Wed May 13 06:31:19 2026 by rpki-client