Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f79595d6-ba4c-32c2-8acd-9a912f64313e.roa
File:                     f79595d6-ba4c-32c2-8acd-9a912f64313e.roa (raw, json)
Hash identifier:          zmO/2SIm3oqpfXZ2yxxbuoOPH5EXJnLdECIAf3Atbrc=
Subject key identifier:   92:6A:E8:DE:6F:53:75:A6:BA:F6:A8:22:EE:86:0F:62:65:8D:A3:6D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F6F9FBB5C737FF8FAF180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f79595d6-ba4c-32c2-8acd-9a912f64313e.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     394450
IP address blocks:        2001:470:313::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:6f:9f:bb:5c:73:7f:f8:fa:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=14377c3f-f80b-497a-9c3a-8dc577a68fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:64:e9:26:bd:c0:0b:5b:2f:88:e6:b4:ba:bc:
                    25:8e:1b:c5:c3:0d:b5:e5:10:38:68:cd:10:b6:6f:
                    7e:2b:d7:ee:02:55:3a:d6:73:0f:cf:0f:13:89:30:
                    9f:5a:0d:f7:66:64:57:2e:b7:32:7d:b4:b4:1b:e4:
                    3a:e9:c3:86:f9:72:95:cf:6f:d2:c8:81:2b:16:a4:
                    a7:06:b1:87:ed:b2:a5:93:79:3f:2f:fb:f8:65:ab:
                    85:65:ef:51:2e:29:12:b7:8e:39:9e:51:e0:ee:23:
                    df:c4:c5:8f:42:a6:77:2a:a4:c1:2c:86:0a:8b:59:
                    97:da:e8:12:e5:6d:74:c7:93:83:07:2c:55:b9:8d:
                    19:77:68:8d:13:e5:01:22:35:fa:2d:14:dd:15:94:
                    44:d9:46:f1:8c:f8:4a:9e:a6:d1:27:5c:59:cf:32:
                    e4:98:45:e5:ea:90:17:85:9e:98:58:7e:67:1f:ae:
                    bc:fb:24:72:a9:ed:ff:25:92:1d:77:08:76:e4:b9:
                    c9:55:a7:a9:72:36:33:9a:fc:e7:8a:4f:e3:b3:03:
                    c3:29:33:ff:42:90:fa:53:cf:90:e7:c5:78:57:b1:
                    91:0d:38:69:73:8d:18:2a:07:71:02:b9:b7:6e:5c:
                    6c:c9:14:95:62:be:44:85:59:8f:c3:e6:b9:58:eb:
                    7d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6A:E8:DE:6F:53:75:A6:BA:F6:A8:22:EE:86:0F:62:65:8D:A3:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f79595d6-ba4c-32c2-8acd-9a912f64313e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:313::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:a8:1a:ee:28:7b:ad:9d:52:92:49:00:27:0e:ee:a2:b4:12:
         da:5a:97:87:24:51:ae:fa:64:6d:73:0e:60:7a:14:1b:56:a1:
         e6:80:42:71:b9:4a:19:7f:9e:af:8b:f0:8f:1b:f7:5b:1d:c8:
         0d:af:f6:62:4a:d6:9a:27:4c:c7:b3:ba:7b:7d:ae:b3:5c:ad:
         ef:b0:08:2a:a9:48:d5:f4:3b:d7:af:a3:98:dd:1d:4e:d3:3a:
         5e:b9:5b:91:47:4c:6b:78:39:98:88:c5:ee:e5:4e:e4:ee:17:
         d2:a5:59:72:7a:f4:78:cc:b5:f9:73:0c:db:3d:76:57:5b:5b:
         f5:18:35:b4:05:16:9f:4f:5a:1a:bf:89:db:fe:42:77:17:8f:
         bf:ac:a9:60:8b:93:c7:7b:42:a9:4d:cb:f8:cb:c3:f2:4a:2e:
         66:61:2e:f6:d5:aa:83:5b:74:b9:c5:c0:d7:c3:5e:cd:3b:62:
         7e:a7:a0:70:1e:46:3d:eb:52:c8:6f:05:c8:b8:97:5d:a0:ae:
         a7:a6:15:7f:d0:2d:f4:f1:b0:73:6c:9f:09:33:b8:28:a9:70:
         5e:03:fe:33:25:a6:c8:cc:57:5b:0b:76:c8:83:66:43:42:38:
         3f:8d:9e:e7:49:81:fd:a7:a9:2d:12:bb:03:20:0e:2c:a6:60:
         ac:05:3e:ea
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE46L2+fu1xzf/j68YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk
MTQzNzdjM2YtZjgwYi00OTdhLTljM2EtOGRjNTc3YTY4ZmRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWTpJr3AC1sviOa0urwljhvFww215RA4aM0Q
tm9+K9fuAlU61nMPzw8TiTCfWg33ZmRXLrcyfbS0G+Q66cOG+XKVz2/SyIErFqSn
BrGH7bKlk3k/L/v4ZauFZe9RLikSt445nlHg7iPfxMWPQqZ3KqTBLIYKi1mX2ugS
5W10x5ODByxVuY0Zd2iNE+UBIjX6LRTdFZRE2UbxjPhKnqbRJ1xZzzLkmEXl6pAX
hZ6YWH5nH668+yRyqe3/JZIddwh25LnJVaepcjYzmvznik/jswPDKTP/QpD6U8+Q
58V4V7GRDThpc40YKgdxArm3blxsyRSVYr5EhVmPw+a5WOt9/QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJJq6N5vU3WmuvaoIu6GD2JljaNtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjc5NTk1ZDYtYmE0Yy0z
MmMyLThhY2QtOWE5MTJmNjQzMTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMT
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJWoGu4oe62dUpJJACcO7qK0Etpal4ckUa76ZG1zDmB6FBtWoeaA
QnG5Shl/nq+L8I8b91sdyA2v9mJK1ponTMezunt9rrNcre+wCCqpSNX0O9evo5jd
HU7TOl65W5FHTGt4OZiIxe7lTuTuF9KlWXJ69HjMtflzDNs9dldbW/UYNbQFFp9P
Whq/idv+QncXj7+sqWCLk8d7QqlNy/jLw/JKLmZhLvbVqoNbdLnFwNfDXs07Yn6n
oHAeRj3rUshvBci4l12grqemFX/QLfTxsHNsnwkzuCipcF4D/jMlpsjMV1sLdsiD
ZkNCOD+NnudJgf2nqS0SuwMgDiymYKwFPuo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:59:25 2026 by rpki-client