Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f032d287-0e73-353b-885a-96a49e64dc8b.roa
File:                     f032d287-0e73-353b-885a-96a49e64dc8b.roa (raw, json)
Hash identifier:          kIIHMyUesqkxb0oCqLOldIPP6zlWzoh2/kuioeRtqFU=
Subject key identifier:   3B:B5:61:68:EE:24:DD:93:49:42:97:0B:94:16:22:6E:37:9F:3A:30
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E7204DACFD4EB37AD2B7E5580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f032d287-0e73-353b-885a-96a49e64dc8b.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     44209
IP address blocks:        2001:470:427::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:da:cf:d4:eb:37:ad:2b:7e:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=0216fce0-bffc-46e6-a80c-8caf12d70cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:8f:2c:4a:24:4d:c9:56:72:1d:35:2e:15:
                    77:50:4f:de:c3:85:17:3a:e0:51:0c:de:68:1e:9e:
                    7e:e7:aa:24:7e:55:07:3b:a4:d9:52:b8:b2:38:c0:
                    44:0a:e7:97:43:da:da:43:33:4b:b3:40:71:53:d0:
                    93:65:7f:97:0e:16:e4:ec:88:1f:3e:85:bf:3d:97:
                    0a:39:d6:73:06:b7:1e:cf:95:da:4d:12:d5:60:71:
                    8e:54:91:db:17:a8:d2:10:88:3e:e3:60:e1:e4:0c:
                    00:4f:bd:25:90:78:ac:62:e2:cb:92:75:ee:f5:3e:
                    cf:30:88:80:b4:cf:a9:0d:35:c6:65:a0:f3:c9:cb:
                    12:6b:83:b6:7c:39:71:5e:d1:c3:ce:65:3d:21:5a:
                    c3:f3:39:73:13:bc:2b:10:c2:14:12:e2:86:ba:d8:
                    da:f8:7f:54:da:90:40:81:7d:4a:c3:90:8a:9f:56:
                    bf:4e:d6:21:9c:88:7c:8a:0b:4e:ba:98:01:6c:4e:
                    31:4f:0b:6a:13:88:f1:4d:21:ee:47:ab:53:b9:df:
                    d9:0d:6f:7b:d8:93:62:de:d3:b6:9e:d0:da:d8:d6:
                    57:01:a4:1a:a6:16:27:81:c6:b0:ad:69:92:c7:f7:
                    c9:73:38:7f:51:7b:0b:75:df:0d:2f:85:d2:19:66:
                    aa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B5:61:68:EE:24:DD:93:49:42:97:0B:94:16:22:6E:37:9F:3A:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f032d287-0e73-353b-885a-96a49e64dc8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:427::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:59:9d:01:6a:04:8b:87:51:24:85:a0:2c:2f:d9:37:fa:fe:
         55:05:d8:3b:c0:d1:22:d1:59:e2:5a:eb:68:96:c2:32:5b:18:
         8c:ae:25:f4:6a:52:49:58:68:5e:3d:19:2c:cd:4c:8f:c3:13:
         f9:83:68:86:20:cb:bb:05:b0:d9:be:ff:86:bd:05:a2:62:2e:
         cf:1c:4e:78:23:25:85:3a:5b:f1:f6:d1:e1:33:2b:56:7e:da:
         ea:ed:87:ba:68:5f:bf:40:d0:f1:4a:96:73:7c:c1:6e:20:62:
         88:41:ae:57:33:51:44:30:6a:60:c9:ea:a6:dc:8a:cc:a4:6d:
         7d:57:b1:6b:ab:d7:dc:ed:a4:1e:35:95:0d:25:c8:44:f1:79:
         3e:6c:5b:41:f7:23:75:37:48:71:84:78:c9:5d:c5:6f:fe:1f:
         24:ee:97:e5:0d:1e:24:d8:e1:a1:28:3d:62:fa:b7:8e:40:7d:
         b5:94:51:5a:3f:6f:db:c9:56:58:b9:39:95:bf:99:9e:15:3b:
         9d:ef:37:eb:1b:2e:5b:31:62:b9:02:4c:56:4c:25:0b:ec:a5:
         22:20:3f:23:ef:cf:fd:68:d3:99:15:b6:2f:78:5c:47:0a:99:
         7e:a0:d7:78:fa:96:b6:5c:ed:64:0d:5d:49:34:ce:21:e9:45:
         5d:77:82:d0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5yBNrP1Os3rSt+VYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk
MDIxNmZjZTAtYmZmYy00NmU2LWE4MGMtOGNhZjEyZDcwY2VhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9WPLEokTclWch01LhV3UE/ew4UXOuBRDN5o
Hp5+56okflUHO6TZUriyOMBECueXQ9raQzNLs0BxU9CTZX+XDhbk7IgfPoW/PZcK
OdZzBrcez5XaTRLVYHGOVJHbF6jSEIg+42Dh5AwAT70lkHisYuLLknXu9T7PMIiA
tM+pDTXGZaDzycsSa4O2fDlxXtHDzmU9IVrD8zlzE7wrEMIUEuKGutja+H9U2pBA
gX1Kw5CKn1a/TtYhnIh8igtOupgBbE4xTwtqE4jxTSHuR6tTud/ZDW972JNi3tO2
ntDa2NZXAaQaphYngcawrWmSx/fJczh/UXsLdd8NL4XSGWaqmwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDu1YWjuJN2TSUKXC5QWIm43nzowMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjAzMmQyODctMGU3My0z
NTNiLTg4NWEtOTZhNDllNjRkYzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI5ZnQFqBIuHUSSFoCwv2Tf6/lUF2DvA0SLRWeJa62iWwjJbGIyu
JfRqUklYaF49GSzNTI/DE/mDaIYgy7sFsNm+/4a9BaJiLs8cTngjJYU6W/H20eEz
K1Z+2urth7poX79A0PFKlnN8wW4gYohBrlczUUQwamDJ6qbcisykbX1XsWur19zt
pB41lQ0lyETxeT5sW0H3I3U3SHGEeMldxW/+HyTul+UNHiTY4aEoPWL6t45AfbWU
UVo/b9vJVli5OZW/mZ4VO53vN+sbLlsxYrkCTFZMJQvspSIgPyPvz/1o05kVti94
XEcKmX6g13j6lrZc7WQNXUk0ziHpRV13gtA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:31:40 2026 by rpki-client