Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23de0344-69c3-3e63-af41-e684fa481263.roa
File:                     23de0344-69c3-3e63-af41-e684fa481263.roa (raw, json)
Hash identifier:          bG6mmR/ClF90lna939Nx9i2X+G9lqT0nhQx6s3FHN3w=
Subject key identifier:   41:F8:B4:59:10:DC:FE:53:BA:3C:D0:06:98:3A:30:6C:D6:AB:1B:A8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F4D40544629D5108CCF08
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23de0344-69c3-3e63-af41-e684fa481263.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     207465
IP address blocks:        2001:470:140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:4d:40:54:46:29:d5:10:8c:cf:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=dfe16d81-21bd-446c-b21d-2b5f105f3b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:00:b5:13:2f:76:39:e3:31:94:56:6c:f8:a5:
                    26:34:be:62:86:e8:57:ec:90:a5:76:f3:d6:7c:17:
                    b2:6c:c6:84:92:25:69:32:0a:f2:02:2c:23:f7:5b:
                    56:87:b4:57:ce:41:fe:64:e8:4f:76:8e:c2:99:72:
                    3f:ff:0a:36:72:90:5b:86:6f:23:6f:70:ca:11:6c:
                    c7:ee:7d:62:f4:11:87:2e:ea:96:d9:17:c4:fd:a2:
                    6d:58:91:4a:c9:55:31:e8:32:e2:0e:ec:ab:9e:98:
                    3b:66:e3:a1:49:b8:b4:fc:ec:cd:d9:4c:3f:6e:2d:
                    b6:85:cd:28:8f:65:08:92:3d:5a:36:75:55:04:c3:
                    a3:4b:71:42:fd:be:33:ca:d8:f4:af:56:b6:79:e1:
                    48:63:65:64:7c:60:b1:07:dd:c9:65:7b:1d:18:e1:
                    74:af:80:44:8f:46:66:91:81:33:94:9c:5f:dd:8a:
                    8f:58:7f:06:21:c4:16:3c:ad:29:1a:8a:e9:85:2b:
                    93:32:ca:5a:87:4c:31:b7:d4:95:2a:aa:bc:d2:e7:
                    c8:ee:7b:77:49:b7:17:52:ce:41:26:70:ff:08:b7:
                    ff:f7:ac:68:f8:48:f8:e9:95:69:28:15:3c:96:d4:
                    92:43:d8:d7:a7:af:b9:93:18:42:d8:f2:f2:8e:0e:
                    f8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F8:B4:59:10:DC:FE:53:BA:3C:D0:06:98:3A:30:6C:D6:AB:1B:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23de0344-69c3-3e63-af41-e684fa481263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:140::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:95:3a:cc:78:5d:40:1b:10:90:90:d0:5e:13:64:88:24:57:
         87:c0:29:47:e1:04:88:35:c7:f3:32:ca:a0:73:14:b2:5c:30:
         49:d9:59:c4:a7:9f:e7:b7:75:a0:20:f4:d0:d7:14:38:34:d3:
         14:7e:2f:8f:72:1d:52:9f:5b:ca:57:77:30:6a:85:94:e6:96:
         6e:bc:34:7c:11:b3:02:dd:96:be:e8:b6:c9:87:63:b4:64:96:
         50:ad:d1:f9:ea:5f:6b:8a:3b:da:a4:77:f5:2d:5a:2d:2e:5f:
         26:26:6c:b9:14:c1:c6:80:db:2c:35:5b:ec:88:3a:0c:88:7a:
         82:c3:69:4b:7c:03:e3:65:8e:65:d5:a2:2e:07:53:03:2d:41:
         04:e7:2f:69:b8:ff:06:9d:6f:94:ad:90:c8:cc:f6:c1:47:6d:
         ad:88:cc:10:82:35:50:3d:1c:b0:13:d6:d9:56:da:73:27:c9:
         6c:c8:dc:07:51:ac:7b:a0:b8:ee:1b:c7:48:d6:84:34:58:b0:
         ed:96:ee:97:df:b7:d4:ce:b3:ff:0b:d4:cb:be:36:d4:f9:67:
         10:75:26:a0:02:d8:72:7a:d9:a1:d7:e8:4d:55:0c:24:40:34:
         ac:a6:a5:f9:06:17:6d:b0:a2:b2:92:c5:ab:68:1b:b2:db:93:
         04:3c:4d:f8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE46L01AVEYp1RCMzwgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk
ZGZlMTZkODEtMjFiZC00NDZjLWIyMWQtMmI1ZjEwNWYzYjI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwC1Ey92OeMxlFZs+KUmNL5ihuhX7JCldvPW
fBeybMaEkiVpMgryAiwj91tWh7RXzkH+ZOhPdo7CmXI//wo2cpBbhm8jb3DKEWzH
7n1i9BGHLuqW2RfE/aJtWJFKyVUx6DLiDuyrnpg7ZuOhSbi0/OzN2Uw/bi22hc0o
j2UIkj1aNnVVBMOjS3FC/b4zytj0r1a2eeFIY2VkfGCxB93JZXsdGOF0r4BEj0Zm
kYEzlJxf3YqPWH8GIcQWPK0pGorphSuTMspah0wxt9SVKqq80ufI7nt3SbcXUs5B
JnD/CLf/96xo+Ej46ZVpKBU8ltSSQ9jXp6+5kxhC2PLyjg74SQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEH4tFkQ3P5TujzQBpg6MGzWqxuoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjNkZTAzNDQtNjljMy0z
ZTYzLWFmNDEtZTY4NGZhNDgxMjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACKVOsx4XUAbEJCQ0F4TZIgkV4fAKUfhBIg1x/MyyqBzFLJcMEnZ
WcSnn+e3daAg9NDXFDg00xR+L49yHVKfW8pXdzBqhZTmlm68NHwRswLdlr7otsmH
Y7RkllCt0fnqX2uKO9qkd/UtWi0uXyYmbLkUwcaA2yw1W+yIOgyIeoLDaUt8A+Nl
jmXVoi4HUwMtQQTnL2m4/wadb5StkMjM9sFHba2IzBCCNVA9HLAT1tlW2nMnyWzI
3AdRrHuguO4bx0jWhDRYsO2W7pfft9TOs/8L1Mu+NtT5ZxB1JqAC2HJ62aHX6E1V
DCRANKympfkGF22worKSxatoG7LbkwQ8Tfg=
-----END CERTIFICATE-----
Generated at Fri Jun 26 19:39:06 2026 by rpki-client