Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/35a5077f-b693-3216-92ad-a349d6fd6377.roa
File:                     35a5077f-b693-3216-92ad-a349d6fd6377.roa (raw, json)
Hash identifier:          HXm/aAaZZ3F+m3LjKA1CmKpUH6P+j6Pn6oEQbMXvmDs=
Subject key identifier:   50:90:25:BC:FC:58:FF:19:0B:1D:65:D3:92:3C:8D:09:8D:4E:B3:7A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E0D8438B802E462D6A8058880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/35a5077f-b693-3216-92ad-a349d6fd6377.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     198408
IP address blocks:        2001:470:542::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:38:b8:02:e4:62:d6:a8:05:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=465db5dd-826f-4dde-b291-4da75f38fa25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e8:be:80:4c:ba:65:09:4a:15:78:3c:a7:65:
                    86:db:58:4a:13:e0:53:1e:dc:a0:c4:69:a1:9b:0b:
                    17:7e:16:00:b2:a6:f0:f4:d2:d0:72:bf:88:5d:e7:
                    3f:fa:28:4f:2f:f7:d9:83:1e:dd:e0:ac:47:be:e2:
                    e6:a4:a0:09:0d:23:de:27:41:b9:8c:b3:d1:d6:25:
                    a0:96:fa:3f:0f:6c:9c:aa:1e:19:1c:40:d9:59:96:
                    0a:01:77:f8:14:4d:d1:3b:e8:a9:00:08:bf:e7:44:
                    31:c9:15:8b:15:19:ee:bb:c2:79:35:c1:e8:c6:17:
                    ff:58:1c:c8:7e:e7:45:f8:10:f2:dd:1f:2d:2b:47:
                    95:2e:11:4e:2d:51:dc:8a:e7:28:ef:e2:58:d2:e7:
                    b3:c3:ed:f1:45:dc:7d:b5:8f:23:4f:ec:70:6f:b5:
                    6a:8a:e1:d5:99:a5:a6:e7:85:83:2c:88:9b:0f:68:
                    d0:28:c9:a5:bf:2b:4a:cc:13:5c:b8:b1:31:22:72:
                    07:e5:08:1d:8f:88:b4:1a:ce:ff:f6:55:d0:89:67:
                    0a:75:7c:cf:08:35:eb:37:0f:df:b9:f9:73:8d:2f:
                    40:17:b2:55:d6:1d:b1:cf:37:98:7b:ba:25:40:2d:
                    c9:9c:82:83:15:e8:ef:90:f0:ec:7b:0d:a9:54:a4:
                    8e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:90:25:BC:FC:58:FF:19:0B:1D:65:D3:92:3C:8D:09:8D:4E:B3:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/35a5077f-b693-3216-92ad-a349d6fd6377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:542::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:38:c9:08:36:17:ee:c0:6e:d1:1a:76:6c:de:ab:f1:0f:a6:
         e4:b9:33:f8:a9:e3:7a:f8:21:2e:f4:61:28:d1:af:3e:a5:8a:
         e8:46:e4:70:28:e8:58:91:a6:71:68:27:68:5e:73:aa:b5:77:
         d4:97:4b:ab:0c:4a:5e:fa:c1:e1:71:9c:be:d7:44:92:3c:68:
         9f:7b:70:a5:33:9f:eb:e4:0b:4d:cf:d1:c6:af:bd:08:b9:59:
         7b:45:d0:ee:c0:64:dc:61:ca:31:dd:e8:fb:96:36:67:2d:fb:
         d1:26:fa:1c:e0:9d:87:d8:48:fd:a4:38:dd:64:10:78:c1:9b:
         f1:84:13:d4:e2:a2:5d:c2:26:f0:63:b1:d8:22:29:a3:ef:66:
         8d:90:de:e5:4c:9c:cc:ac:02:7b:c8:e4:93:a1:63:e1:03:9f:
         be:60:bd:fe:8a:fe:f8:9d:fd:63:b9:24:84:c5:26:ea:ae:77:
         0c:0e:c6:36:57:25:52:d2:d6:92:d1:e4:d6:5f:24:25:54:3e:
         d5:a5:d5:a8:a6:b8:f5:79:bf:00:6c:d9:6a:de:8d:7b:32:04:
         36:b9:e7:4a:b0:4f:c2:60:56:4d:45:fc:3c:19:7b:a7:93:98:
         94:76:e3:d0:91:6f:60:66:ae:c1:6f:2d:31:c8:ab:d0:db:d9:
         f8:b0:c9:81
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4NhDi4AuRi1qgFiIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk
NDY1ZGI1ZGQtODI2Zi00ZGRlLWIyOTEtNGRhNzVmMzhmYTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOi+gEy6ZQlKFXg8p2WG21hKE+BTHtygxGmh
mwsXfhYAsqbw9NLQcr+IXec/+ihPL/fZgx7d4KxHvuLmpKAJDSPeJ0G5jLPR1iWg
lvo/D2ycqh4ZHEDZWZYKAXf4FE3RO+ipAAi/50QxyRWLFRnuu8J5NcHoxhf/WBzI
fudF+BDy3R8tK0eVLhFOLVHciuco7+JY0uezw+3xRdx9tY8jT+xwb7VqiuHVmaWm
54WDLIibD2jQKMmlvytKzBNcuLExInIH5Qgdj4i0Gs7/9lXQiWcKdXzPCDXrNw/f
uflzjS9AF7JV1h2xzzeYe7olQC3JnIKDFejvkPDsew2pVKSODQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFCQJbz8WP8ZCx1l05I8jQmNTrN6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzVhNTA3N2YtYjY5My0z
MjE2LTkyYWQtYTM0OWQ2ZmQ2Mzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAVC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACk4yQg2F+7AbtEadmzeq/EPpuS5M/ip43r4IS70YSjRrz6liuhG
5HAo6FiRpnFoJ2hec6q1d9SXS6sMSl76weFxnL7XRJI8aJ97cKUzn+vkC03P0cav
vQi5WXtF0O7AZNxhyjHd6PuWNmct+9Em+hzgnYfYSP2kON1kEHjBm/GEE9Tiol3C
JvBjsdgiKaPvZo2Q3uVMnMysAnvI5JOhY+EDn75gvf6K/vid/WO5JITFJuqudwwO
xjZXJVLS1pLR5NZfJCVUPtWl1aimuPV5vwBs2WrejXsyBDa550qwT8JgVk1F/DwZ
e6eTmJR249CRb2BmrsFvLTHIq9Db2fiwyYE=
-----END CERTIFICATE-----
Generated at Fri Jun 5 16:38:07 2026 by rpki-client