Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0eb00d09-976b-377c-b4df-33356b4ce967.roa
File:                     0eb00d09-976b-377c-b4df-33356b4ce967.roa (raw, json)
Hash identifier:          XqYjDu5dJe3vBEB3DauEdRENWYD6lKwjsQ6FgOKxiFA=
Subject key identifier:   0E:44:D6:BF:B6:2E:AA:6F:B7:BE:7B:D6:46:23:1E:7C:A3:22:F5:F2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EA78BA3D71B477E7B6C300D00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0eb00d09-976b-377c-b4df-33356b4ce967.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     399381
IP address blocks:        2001:470:360::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8b:a3:d7:1b:47:7e:7b:6c:30:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3322572e-4fac-4663-a639-9ea063d70b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9b:f6:b1:91:9e:1c:39:17:83:b8:e8:87:0a:
                    96:53:aa:88:73:92:9c:a9:07:8b:1f:48:38:bd:c0:
                    f4:6d:f7:fa:d9:09:8a:77:5c:a9:ae:50:40:92:7e:
                    ae:8d:1d:cb:73:1c:6d:4c:ac:c2:df:ec:f8:15:d5:
                    3b:ed:b3:49:a6:cc:96:16:40:51:bd:16:b2:f5:eb:
                    a9:2a:d5:38:ba:5c:42:c0:40:9e:3b:d2:51:60:4d:
                    48:be:f9:a8:ad:4e:04:a8:2b:b8:70:ff:68:f7:ee:
                    da:4a:8d:16:00:10:5a:ee:39:c9:bc:b3:9a:81:3e:
                    85:7e:30:de:84:62:ee:bc:e2:31:ab:54:8b:b6:80:
                    d6:15:e7:da:61:cc:90:4a:3b:89:51:86:fd:4a:c5:
                    46:06:f2:2e:b4:6f:a0:76:fd:e0:5e:89:40:43:6e:
                    1f:55:12:05:cc:3e:ef:5b:51:59:a5:4a:2a:df:67:
                    61:3b:3e:6b:ea:99:5e:1d:67:44:1e:35:9d:15:1a:
                    1f:f7:d1:42:f7:4c:de:a3:b7:eb:64:ff:90:6c:69:
                    89:25:9e:8c:ea:44:a2:1f:7c:64:0d:c8:f5:dc:f8:
                    9c:37:50:a5:65:9d:9f:4d:c8:60:e4:40:ac:00:31:
                    05:2a:43:c2:68:98:23:1c:3b:71:58:c6:a3:d4:26:
                    5b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:44:D6:BF:B6:2E:AA:6F:B7:BE:7B:D6:46:23:1E:7C:A3:22:F5:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0eb00d09-976b-377c-b4df-33356b4ce967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:360::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:98:af:48:ab:fe:08:52:75:e9:3b:68:b9:48:51:26:aa:92:
         b5:c7:be:e9:9c:dc:9e:45:a1:a6:45:d7:83:75:96:d3:ae:54:
         09:3f:43:7f:95:e5:a6:60:d9:e8:24:ee:f1:b7:3d:11:be:55:
         5a:6d:b4:60:6c:99:d6:de:4a:04:2e:f9:d7:74:ef:cb:c2:ec:
         e9:fd:1c:0f:dc:12:12:dc:85:cd:70:2d:90:b6:62:91:bd:de:
         09:5b:0b:a2:12:8f:42:78:b2:04:04:8e:ad:7b:40:49:7d:db:
         51:8f:cf:86:3d:9d:25:0b:7c:ce:8a:fe:f0:d0:70:3e:ea:f0:
         f5:32:87:5b:3b:f3:54:9c:bc:9e:18:30:a2:ae:41:d8:be:5c:
         25:99:00:d9:ca:b5:f6:34:84:46:82:7b:a1:4e:d4:2e:54:9a:
         e1:40:76:20:73:89:31:2d:f4:d3:fc:ee:17:9d:cb:d8:65:e7:
         de:da:e9:50:d3:f1:64:59:f7:9f:c6:49:1a:f6:81:6f:2d:2b:
         a5:55:f8:1e:20:c6:0f:34:ba:00:03:1a:49:e1:75:fb:5e:8c:
         3e:21:fe:61:8a:5a:d2:26:f9:86:41:55:14:59:1e:d1:d2:1c:
         9f:0e:5e:e1:bf:cc:85:97:21:aa:f9:b7:56:c7:df:e4:c0:9f:
         47:c8:92:0b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6ni6PXG0d+e2wwDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MzMyMjU3MmUtNGZhYy00NjYzLWE2MzktOWVhMDYzZDcwYjgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJv2sZGeHDkXg7johwqWU6qIc5KcqQeLH0g4
vcD0bff62QmKd1yprlBAkn6ujR3LcxxtTKzC3+z4FdU77bNJpsyWFkBRvRay9eup
KtU4ulxCwECeO9JRYE1IvvmorU4EqCu4cP9o9+7aSo0WABBa7jnJvLOagT6FfjDe
hGLuvOIxq1SLtoDWFefaYcyQSjuJUYb9SsVGBvIutG+gdv3gXolAQ24fVRIFzD7v
W1FZpUoq32dhOz5r6pleHWdEHjWdFRof99FC90zeo7frZP+QbGmJJZ6M6kSiH3xk
Dcj13PicN1ClZZ2fTchg5ECsADEFKkPCaJgjHDtxWMaj1CZbdwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA5E1r+2Lqpvt7571kYjHnyjIvXyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGViMDBkMDktOTc2Yi0z
NzdjLWI0ZGYtMzMzNTZiNGNlOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEEcANg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGCYr0ir/ghSdek7aLlIUSaqkrXHvumc3J5FoaZF14N1ltOuVAk/
Q3+V5aZg2egk7vG3PRG+VVpttGBsmdbeSgQu+dd078vC7On9HA/cEhLchc1wLZC2
YpG93glbC6ISj0J4sgQEjq17QEl921GPz4Y9nSULfM6K/vDQcD7q8PUyh1s781Sc
vJ4YMKKuQdi+XCWZANnKtfY0hEaCe6FO1C5UmuFAdiBziTEt9NP87hedy9hl597a
6VDT8WRZ95/GSRr2gW8tK6VV+B4gxg80ugADGknhdftejD4h/mGKWtIm+YZBVRRZ
HtHSHJ8OXuG/zIWXIar5t1bH3+TAn0fIkgs=
-----END CERTIFICATE-----
Generated at Fri Aug 7 11:13:11 2026 by rpki-client