Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02510d32-350c-313e-936b-3ebdbbc8f953.roa
File:                     02510d32-350c-313e-936b-3ebdbbc8f953.roa (raw, json)
Hash identifier:          RZbe+/ExmfHplpPeE1VObCZq7ePmiGV7ZqpiRlcm1CQ=
Subject key identifier:   3B:81:16:1B:64:5A:C2:E6:A5:D0:35:A7:C9:C4:11:F7:AF:D6:38:AA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584C794C78323D7E82BF7461DA80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02510d32-350c-313e-936b-3ebdbbc8f953.roa
Signing time:             Sat 10 Jan 2026 02:00:31 +0000
ROA not before:           Sat 10 Jan 2026 02:00:31 +0000
ROA not after:            Fri 10 Apr 2026 01:00:31 +0000
asID:                     401117
IP address blocks:        2001:470:323::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:4c:78:32:3d:7e:82:bf:74:61:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 10 02:00:31 2026 GMT
            Not After : Apr 10 01:00:31 2026 GMT
        Subject: CN=839d04af-d25f-4147-a057-b8575b82acee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:44:13:6c:25:c0:10:3b:9c:00:be:b7:98:33:
                    01:28:f8:c5:ae:8f:41:6d:da:be:12:8f:55:73:53:
                    8a:3c:20:fa:90:9e:9f:37:fe:53:dd:1b:82:6c:9e:
                    ac:a6:cc:6a:94:33:3c:8a:c7:b4:e1:0e:6d:4e:47:
                    85:2f:6d:38:57:4c:97:c8:7a:40:e7:82:3b:aa:36:
                    0c:86:a4:a3:9e:ba:5e:88:12:ff:66:67:4d:67:c9:
                    dc:ee:03:db:69:99:18:52:f7:1c:1f:8b:33:bd:57:
                    fa:b0:1b:5c:41:22:22:ad:fb:23:9b:86:f1:6f:6c:
                    67:32:63:f7:2f:f6:2b:b8:f8:55:92:82:7b:77:5f:
                    03:76:07:25:a6:d3:35:32:d9:4a:22:e7:2b:dd:f1:
                    c9:21:72:57:8f:2d:68:7e:32:10:47:f8:bc:0c:3c:
                    c7:a4:65:aa:01:f9:dc:80:f4:23:61:da:0d:19:7d:
                    08:f2:a0:47:c4:cd:34:89:6a:a2:65:b1:6d:d4:88:
                    1d:a3:f6:5b:c4:95:35:58:e4:47:17:03:d6:f4:3c:
                    ec:f8:c0:a1:20:7b:b9:f6:64:37:6d:f2:70:05:fd:
                    46:24:0b:9a:74:c7:62:96:4e:77:d5:0a:21:d4:c9:
                    ce:e9:d3:9d:77:07:c9:6d:99:cb:ff:33:ed:5d:50:
                    e0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:81:16:1B:64:5A:C2:E6:A5:D0:35:A7:C9:C4:11:F7:AF:D6:38:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02510d32-350c-313e-936b-3ebdbbc8f953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:323::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:e7:90:11:8d:33:64:3d:25:7b:2d:71:28:c8:10:e5:ef:76:
         08:95:f4:1e:75:31:00:9a:3f:bd:1d:f2:9c:29:4b:38:0f:43:
         8e:b6:ca:42:f5:9c:19:70:4f:e4:64:3f:c2:6a:87:50:28:92:
         a7:03:37:2d:ea:ae:db:3e:0b:bb:0b:27:af:84:74:c5:d0:86:
         2c:2a:c1:d5:d4:53:8c:56:ca:76:65:82:44:e4:9a:38:81:c9:
         54:82:c3:ba:7e:3e:77:dc:f2:27:43:f4:b9:f1:e0:c8:08:3e:
         68:5c:77:c9:50:7e:41:d1:d6:ac:0b:20:78:de:66:7b:06:17:
         12:37:a7:16:f3:2e:a9:a3:66:a0:d1:0b:05:ef:1a:6b:9e:88:
         34:cb:9a:d5:f6:29:ea:8b:76:4e:47:18:2d:7d:73:9b:bc:23:
         b7:b5:5c:42:f9:9a:35:49:d1:16:c3:47:ed:3b:94:17:05:fa:
         db:ba:6c:44:27:b7:3e:bb:eb:c8:1c:b0:09:cf:52:93:c4:2b:
         b3:f5:5f:82:1e:47:da:a5:de:08:7b:6a:53:f3:4e:b9:ff:b8:
         8c:7f:fd:df:5e:a4:c6:1a:cd:98:b5:63:ba:e1:bc:5e:98:03:
         85:57:c4:03:d0:97:2b:03:dd:03:69:b6:48:44:48:8c:7e:99:
         7b:5e:ef:e5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEx5THgyPX6Cv3Rh2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDExMDAyMDAzMVoXDTI2MDQxMDAxMDAzMVowLzEtMCsGA1UEAxMk
ODM5ZDA0YWYtZDI1Zi00MTQ3LWEwNTctYjg1NzViODJhY2VlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0QTbCXAEDucAL63mDMBKPjFro9Bbdq+Eo9V
c1OKPCD6kJ6fN/5T3RuCbJ6spsxqlDM8ise04Q5tTkeFL204V0yXyHpA54I7qjYM
hqSjnrpeiBL/ZmdNZ8nc7gPbaZkYUvccH4szvVf6sBtcQSIirfsjm4bxb2xnMmP3
L/YruPhVkoJ7d18DdgclptM1MtlKIucr3fHJIXJXjy1ofjIQR/i8DDzHpGWqAfnc
gPQjYdoNGX0I8qBHxM00iWqiZbFt1Igdo/ZbxJU1WORHFwPW9Dzs+MChIHu59mQ3
bfJwBf1GJAuadMdilk531Qoh1MnO6dOddwfJbZnL/zPtXVDg4wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDuBFhtkWsLmpdA1p8nEEfev1jiqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDI1MTBkMzItMzUwYy0z
MTNlLTkzNmItM2ViZGJiYzhmOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMj
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMbnkBGNM2Q9JXstcSjIEOXvdgiV9B51MQCaP70d8pwpSzgPQ462
ykL1nBlwT+RkP8Jqh1AokqcDNy3qrts+C7sLJ6+EdMXQhiwqwdXUU4xWynZlgkTk
mjiByVSCw7p+Pnfc8idD9Lnx4MgIPmhcd8lQfkHR1qwLIHjeZnsGFxI3pxbzLqmj
ZqDRCwXvGmueiDTLmtX2KeqLdk5HGC19c5u8I7e1XEL5mjVJ0RbDR+07lBcF+tu6
bEQntz6768gcsAnPUpPEK7P1X4IeR9ql3gh7alPzTrn/uIx//d9epMYazZi1Y7rh
vF6YA4VXxAPQlysD3QNptkhESIx+mXte7+U=
-----END CERTIFICATE-----
Generated at Thu Feb 19 17:56:51 2026 by rpki-client