Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dd27e340-8529-3a48-a334-01282a18ae0d.roa
File:                     dd27e340-8529-3a48-a334-01282a18ae0d.roa (raw, json)
Hash identifier:          7aWODcynNMOhb2XG7h/Mno35fj6RxjeIv+SRrcyXa50=
Subject key identifier:   02:C3:DF:FE:D6:53:36:B6:6A:8D:E5:87:B3:EF:00:3F:E8:4C:D8:93
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E6145636A748C6EB80BC58D00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dd27e340-8529-3a48-a334-01282a18ae0d.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     393835
IP address blocks:        2001:470:91::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:63:6a:74:8c:6e:b8:0b:c5:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=00c56bdb-1069-4a21-9bb4-20cff1458df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:09:57:d6:e5:e6:ac:6a:de:97:1c:d0:19:30:
                    9e:37:46:ac:d6:c4:21:8f:9f:2f:33:d6:47:1e:35:
                    20:b0:21:c8:5f:5b:07:8d:8d:49:5d:38:66:8d:ec:
                    c3:24:f4:fc:99:d6:27:57:94:40:cd:69:ac:10:20:
                    35:c1:e3:72:da:4a:fd:1f:58:18:1c:fd:7f:fa:f0:
                    c2:f0:39:0a:c9:cc:e1:d5:87:db:9e:3b:ee:86:11:
                    c3:da:b7:79:2f:60:a4:82:a1:17:88:42:ab:a0:47:
                    25:ba:ac:57:71:80:0d:98:f7:4f:41:eb:0f:03:7c:
                    cc:d4:ed:b2:f5:ee:e6:69:18:8a:ce:65:71:f6:0d:
                    b4:c6:62:25:ac:f7:42:4c:1b:ee:77:05:1a:7d:cc:
                    d9:20:89:89:68:75:07:7b:6a:c4:18:59:4d:d4:97:
                    7a:b1:69:6c:ac:08:32:0b:1c:76:a7:f0:ad:f3:e2:
                    a4:fe:99:a5:fa:f0:25:0e:a3:0d:76:14:75:d4:74:
                    e3:6a:d6:cb:31:2d:7b:42:3b:bd:8e:a4:26:87:10:
                    57:8e:c1:68:b1:4d:2e:ce:59:b4:fd:50:3a:74:bc:
                    1e:d3:a8:04:4f:e1:f8:39:7b:4d:04:42:a0:e3:52:
                    6e:74:f4:e9:b9:fe:e4:41:d8:87:28:0d:db:b3:5d:
                    22:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C3:DF:FE:D6:53:36:B6:6A:8D:E5:87:B3:EF:00:3F:E8:4C:D8:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dd27e340-8529-3a48-a334-01282a18ae0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:91::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:c8:98:93:a5:29:5f:0b:e4:6a:89:5e:b3:65:35:75:e9:db:
         f1:f3:df:57:82:71:a8:fc:d7:6a:cb:80:9d:9a:87:85:86:92:
         2d:c4:cd:2e:f4:9f:ec:25:c5:93:1a:64:7e:98:88:9d:82:dd:
         18:dd:33:bd:c5:83:9f:08:0b:56:0d:1c:44:39:6e:65:c8:09:
         7d:d4:94:08:b1:bf:86:17:30:03:d9:61:4a:c3:db:47:b1:25:
         5d:4e:ad:ae:12:c5:09:f8:ab:cc:eb:65:70:a2:b7:6b:cb:b3:
         b7:20:22:4c:6e:17:d3:78:84:ca:6c:74:30:7b:29:30:47:ee:
         41:91:68:0f:42:21:ab:e2:69:ec:32:ae:91:de:a6:a1:a6:b2:
         11:c1:1e:37:02:ea:01:93:ad:33:74:63:87:08:30:ea:26:ec:
         a9:f0:af:a6:7f:b0:b0:38:49:1e:06:58:ee:b5:19:88:87:9e:
         e0:af:1c:d9:13:f4:8c:dc:2e:f2:cb:11:7e:a1:6c:38:e6:bd:
         f7:b1:57:1c:b4:55:f1:92:e7:a1:b8:c5:07:ff:83:bd:52:3b:
         4f:b5:cb:18:c9:a6:12:74:56:ca:82:fc:be:65:9e:47:22:ac:
         67:f7:12:35:b5:68:43:d1:c2:96:48:d9:8f:68:46:0c:b2:93:
         ac:d7:e2:c2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5hRWNqdIxuuAvFjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk
MDBjNTZiZGItMTA2OS00YTIxLTliYjQtMjBjZmYxNDU4ZGYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAlX1uXmrGrelxzQGTCeN0as1sQhj58vM9ZH
HjUgsCHIX1sHjY1JXThmjezDJPT8mdYnV5RAzWmsECA1weNy2kr9H1gYHP1/+vDC
8DkKyczh1YfbnjvuhhHD2rd5L2CkgqEXiEKroEcluqxXcYANmPdPQesPA3zM1O2y
9e7maRiKzmVx9g20xmIlrPdCTBvudwUafczZIImJaHUHe2rEGFlN1Jd6sWlsrAgy
Cxx2p/Ct8+Kk/pml+vAlDqMNdhR11HTjatbLMS17Qju9jqQmhxBXjsFosU0uzlm0
/VA6dLwe06gET+H4OXtNBEKg41JudPTpuf7kQdiHKA3bs10i8wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFALD3/7WUza2ao3lh7PvAD/oTNiTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGQyN2UzNDAtODUyOS0z
YTQ4LWEzMzQtMDEyODJhMThhZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ3ImJOlKV8L5GqJXrNlNXXp2/Hz31eCcaj812rLgJ2ah4WGki3E
zS70n+wlxZMaZH6YiJ2C3RjdM73Fg58IC1YNHEQ5bmXICX3UlAixv4YXMAPZYUrD
20exJV1Ora4SxQn4q8zrZXCit2vLs7cgIkxuF9N4hMpsdDB7KTBH7kGRaA9CIavi
aewyrpHepqGmshHBHjcC6gGTrTN0Y4cIMOom7Knwr6Z/sLA4SR4GWO61GYiHnuCv
HNkT9IzcLvLLEX6hbDjmvfexVxy0VfGS56G4xQf/g71SO0+1yxjJphJ0VsqC/L5l
nkcirGf3EjW1aEPRwpZI2Y9oRgyyk6zX4sI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:48:23 2026 by rpki-client