Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d821af19-f830-30b5-968e-4e50cdc1f536.roa
File:                     d821af19-f830-30b5-968e-4e50cdc1f536.roa (raw, json)
Hash identifier:          s1z3xt96vtANr4fk1GwW5PlKhPZLMbS+R1VGxVAd0JM=
Subject key identifier:   80:E8:C7:44:8F:E6:EB:75:9C:FC:81:F3:63:D5:8E:33:11:EC:62:0A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D343A37A3155D3BEEB635FD00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d821af19-f830-30b5-968e-4e50cdc1f536.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     19661
IP address blocks:        2001:470:2a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:37:a3:15:5d:3b:ee:b6:35:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=82afa6e4-2773-4c88-b7ae-6e372f61113b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:d1:d6:c6:38:01:01:4f:92:1a:b3:db:a7:
                    d5:1d:91:50:11:af:c7:d4:ef:44:0e:54:49:3b:be:
                    79:ce:d5:d6:46:34:89:03:34:96:40:a0:f2:33:8c:
                    24:a2:f0:00:ca:da:8b:4b:b9:b8:bf:e3:bc:a8:5f:
                    d3:58:6a:2b:d6:46:f8:ae:6d:8f:20:62:eb:80:65:
                    bc:68:c1:14:7d:9d:5e:ab:a1:b8:66:cc:18:9d:4a:
                    ca:c6:a7:13:c4:66:a5:6a:51:96:b6:30:39:66:55:
                    81:49:16:a6:ee:27:72:19:5b:15:77:4a:2f:05:82:
                    90:52:8b:d3:cd:9b:a6:52:2d:09:99:11:83:a0:3e:
                    9b:ea:13:a5:11:ec:3b:b6:7f:07:1a:ae:36:aa:dc:
                    a9:fa:1a:ee:bf:ae:10:b9:95:3f:f3:c5:b0:4e:3c:
                    4f:2b:12:b3:49:4d:de:2b:1f:ae:dc:3e:a1:42:fb:
                    c8:55:8c:16:85:39:0b:51:af:96:7d:46:51:fb:93:
                    8a:5b:f1:c7:0e:52:3f:75:43:fe:15:13:56:f8:a4:
                    64:ea:f4:ec:d5:3e:3e:25:7c:ea:75:41:0f:b1:7b:
                    41:c6:0c:9d:c6:4e:2a:6e:e5:88:12:06:58:1f:6f:
                    0f:63:d5:eb:6c:b9:a4:60:1e:62:7c:60:c2:ed:99:
                    26:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E8:C7:44:8F:E6:EB:75:9C:FC:81:F3:63:D5:8E:33:11:EC:62:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d821af19-f830-30b5-968e-4e50cdc1f536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:bb:3f:e7:53:76:9f:bb:60:e1:69:1f:a0:ea:a3:45:c8:b4:
         f8:48:13:b8:b6:30:6e:75:27:ee:f3:d5:02:02:06:a2:58:ca:
         99:7b:ff:99:9f:f2:50:ce:75:12:3e:d0:4b:bf:a6:d6:a3:56:
         98:d5:97:df:a2:57:7f:0e:7f:e6:df:07:ae:9d:9f:a2:fb:d3:
         19:2d:c8:8c:75:80:23:ec:22:0a:15:97:2b:60:a7:16:1d:ca:
         fd:1c:6f:5b:73:41:32:a1:23:67:15:78:2b:47:3e:99:46:7c:
         2d:20:d6:7b:98:05:20:85:bc:9b:1e:f0:14:3a:53:92:c8:eb:
         90:7d:b4:0e:c2:6b:0b:92:76:b8:c8:5c:1a:75:de:a5:99:dd:
         ff:33:7a:4b:ca:8b:2e:73:c3:34:d5:fc:d7:de:3a:c4:5e:1c:
         69:1c:5d:4d:05:e2:8e:8a:1b:5d:bb:03:b9:99:dc:1c:de:f3:
         6b:91:84:f8:66:e4:be:c4:d5:4d:9b:74:8c:dd:1e:de:b7:28:
         60:83:f6:dd:6d:85:c0:a6:0d:5c:2b:dc:ab:01:60:f6:0e:bb:
         1e:40:fc:0c:d2:51:5c:50:52:6a:e6:d7:f1:b7:0b:dd:ac:f6:
         91:c9:2a:38:ee:64:93:d0:d7:67:27:c2:d6:29:82:7d:81:ed:
         58:58:a6:68
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE00OjejFV077rY1/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk
ODJhZmE2ZTQtMjc3My00Yzg4LWI3YWUtNmUzNzJmNjExMTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYvR1sY4AQFPkhqz26fVHZFQEa/H1O9EDlRJ
O755ztXWRjSJAzSWQKDyM4wkovAAytqLS7m4v+O8qF/TWGor1kb4rm2PIGLrgGW8
aMEUfZ1eq6G4ZswYnUrKxqcTxGalalGWtjA5ZlWBSRam7idyGVsVd0ovBYKQUovT
zZumUi0JmRGDoD6b6hOlEew7tn8HGq42qtyp+hruv64QuZU/88WwTjxPKxKzSU3e
Kx+u3D6hQvvIVYwWhTkLUa+WfUZR+5OKW/HHDlI/dUP+FRNW+KRk6vTs1T4+JXzq
dUEPsXtBxgydxk4qbuWIEgZYH28PY9XrbLmkYB5ifGDC7ZkmCQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIDox0SP5ut1nPyB82PVjjMR7GIKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDgyMWFmMTktZjgzMC0z
MGI1LTk2OGUtNGU1MGNkYzFmNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAq
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGu7P+dTdp+7YOFpH6Dqo0XItPhIE7i2MG51J+7z1QICBqJYypl7
/5mf8lDOdRI+0Eu/ptajVpjVl9+iV38Of+bfB66dn6L70xktyIx1gCPsIgoVlytg
pxYdyv0cb1tzQTKhI2cVeCtHPplGfC0g1nuYBSCFvJse8BQ6U5LI65B9tA7CawuS
drjIXBp13qWZ3f8zekvKiy5zwzTV/NfeOsReHGkcXU0F4o6KG127A7mZ3Bze82uR
hPhm5L7E1U2bdIzdHt63KGCD9t1thcCmDVwr3KsBYPYOux5A/AzSUVxQUmrm1/G3
C92s9pHJKjjuZJPQ12cnwtYpgn2B7VhYpmg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:32:00 2026 by rpki-client