Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/468f0e07-f018-3b05-9fd1-9cb904c5cf8b.roa
File:                     468f0e07-f018-3b05-9fd1-9cb904c5cf8b.roa (raw, json)
Hash identifier:          IqVbnBzHP2DC7qK4gDK4H4ZQkzUGyjEMiyGXS6+5v1w=
Subject key identifier:   24:56:32:5F:30:02:CF:61:5F:2E:84:D2:A1:88:05:01:39:A3:C7:C9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584CA5F72FB5B404428C37B9F5C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/468f0e07-f018-3b05-9fd1-9cb904c5cf8b.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     400341
IP address blocks:        2001:470:2be::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:2f:b5:b4:04:42:8c:37:b9:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=2e8727a4-2bd0-4cdd-8590-ecd36e760702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:84:a7:b3:56:58:8f:24:ee:68:83:da:55:5f:
                    8a:ab:fb:3c:5d:e2:5b:45:0d:9a:24:55:ad:09:ba:
                    e9:d6:a1:1e:e2:a6:65:0a:43:92:a1:cc:2d:99:36:
                    de:de:f7:96:a2:cd:b9:0f:7d:d8:6c:33:7d:17:de:
                    77:4c:37:cc:a6:82:56:08:12:a9:36:d1:9f:8b:2a:
                    6f:d0:4a:bb:3f:a9:c8:98:80:72:ae:23:28:27:ec:
                    27:0b:68:6c:20:ec:ce:e4:5c:1e:cf:ea:45:a9:d8:
                    21:94:4c:9b:f3:23:82:a8:aa:9e:95:b0:11:3e:54:
                    2e:66:36:20:0e:d2:c0:98:ad:5c:9a:b1:7a:19:a2:
                    e6:0f:ae:31:42:72:bc:57:a5:30:f8:d3:20:0d:09:
                    7a:0a:e4:8c:e1:7f:e7:de:11:dd:6a:ba:54:6c:48:
                    fc:cd:3e:fe:64:48:92:12:a1:3b:05:b9:da:43:aa:
                    fd:c4:87:0f:f5:77:dd:7f:8c:8f:d0:f7:3b:70:1e:
                    3f:09:f3:e7:19:06:a3:6b:1a:ef:f7:8b:6b:b6:78:
                    ea:e2:a2:3a:77:bd:2b:d5:b3:66:93:7e:17:83:c9:
                    77:5b:01:71:9e:be:ab:c6:17:47:49:de:17:bb:0e:
                    0f:77:a2:12:00:47:60:3e:83:b1:ed:94:df:95:95:
                    d4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:56:32:5F:30:02:CF:61:5F:2E:84:D2:A1:88:05:01:39:A3:C7:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/468f0e07-f018-3b05-9fd1-9cb904c5cf8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2be::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:50:69:87:f6:82:c2:24:54:fc:e0:74:45:52:5e:3b:b2:1d:
         b3:af:0b:c0:9b:11:6f:fe:d4:60:73:a4:2b:bc:8e:9c:62:d1:
         ab:3b:84:81:19:30:6f:bc:7c:9a:b0:f0:5f:9c:f1:d5:90:16:
         74:86:57:b3:a8:fa:cc:88:a0:eb:ba:b6:6b:76:36:0b:9c:e1:
         5b:59:ed:8c:b8:af:35:14:d8:6f:13:a6:4b:c5:82:1f:00:cb:
         08:a0:11:61:a9:ad:0d:5b:a1:82:d0:6b:67:fc:75:54:49:1f:
         cf:4b:ac:94:46:67:e6:b1:c3:fe:d4:55:9b:c2:f8:5f:ac:cb:
         54:6b:db:ef:9b:6a:71:b7:d6:2e:52:5e:bd:c5:34:07:d9:c8:
         f8:7a:06:02:ab:55:77:b4:41:72:04:98:87:02:10:55:69:b0:
         53:cd:ea:e4:25:01:88:eb:33:fb:26:2a:98:56:42:d9:57:e2:
         3d:03:4e:70:0a:a8:b9:9d:28:6f:34:9b:f5:6a:b9:41:96:22:
         d5:46:98:7a:9b:4c:96:91:84:29:db:4c:e1:c3:15:19:23:48:
         aa:c0:5b:82:b7:ba:b1:8a:cc:31:8a:7f:35:f3:12:ed:b3:5e:
         e6:e7:94:59:18:27:64:af:98:a7:c1:b9:b8:55:68:2c:dd:4d:
         4f:cf:6d:9b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyl9y+1tARCjDe59cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk
MmU4NzI3YTQtMmJkMC00Y2RkLTg1OTAtZWNkMzZlNzYwNzAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioSns1ZYjyTuaIPaVV+Kq/s8XeJbRQ2aJFWt
Cbrp1qEe4qZlCkOSocwtmTbe3veWos25D33YbDN9F953TDfMpoJWCBKpNtGfiypv
0Eq7P6nImIByriMoJ+wnC2hsIOzO5Fwez+pFqdghlEyb8yOCqKqelbARPlQuZjYg
DtLAmK1cmrF6GaLmD64xQnK8V6Uw+NMgDQl6CuSM4X/n3hHdarpUbEj8zT7+ZEiS
EqE7BbnaQ6r9xIcP9Xfdf4yP0Pc7cB4/CfPnGQajaxrv94trtnjq4qI6d70r1bNm
k34Xg8l3WwFxnr6rxhdHSd4Xuw4Pd6ISAEdgPoOx7ZTflZXUjwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCRWMl8wAs9hXy6E0qGIBQE5o8fJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDY4ZjBlMDctZjAxOC0z
YjA1LTlmZDEtOWNiOTA0YzVjZjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAK+
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHBQaYf2gsIkVPzgdEVSXjuyHbOvC8CbEW/+1GBzpCu8jpxi0as7
hIEZMG+8fJqw8F+c8dWQFnSGV7Oo+syIoOu6tmt2Nguc4VtZ7Yy4rzUU2G8TpkvF
gh8AywigEWGprQ1boYLQa2f8dVRJH89LrJRGZ+axw/7UVZvC+F+sy1Rr2++banG3
1i5SXr3FNAfZyPh6BgKrVXe0QXIEmIcCEFVpsFPN6uQlAYjrM/smKphWQtlX4j0D
TnAKqLmdKG80m/VquUGWItVGmHqbTJaRhCnbTOHDFRkjSKrAW4K3urGKzDGKfzXz
Eu2zXubnlFkYJ2SvmKfBubhVaCzdTU/PbZs=
-----END CERTIFICATE-----
Generated at Thu Feb 19 18:00:23 2026 by rpki-client