Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/59f092fa-f8fd-3c5e-823f-9e017a8d318d.roa
File:                     59f092fa-f8fd-3c5e-823f-9e017a8d318d.roa (raw, json)
Hash identifier:          Qch0siPWZT5srEZVmPOm7j5K5oVzNzGyLvaSGXD725k=
Subject key identifier:   EC:31:B5:1C:91:8F:45:E3:31:A8:A6:00:E2:3A:82:59:D9:DA:73:B4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D905A8BFC0DF893C198B0F680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/59f092fa-f8fd-3c5e-823f-9e017a8d318d.roa
Signing time:             Mon 20 Apr 2026 01:00:24 +0000
ROA not before:           Mon 20 Apr 2026 01:00:24 +0000
ROA not after:            Sun 19 Jul 2026 01:00:24 +0000
asID:                     51500
IP address blocks:        2001:470:4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:90:5a:8b:fc:0d:f8:93:c1:98:b0:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 20 01:00:24 2026 GMT
            Not After : Jul 19 01:00:24 2026 GMT
        Subject: CN=4119b071-3d93-4dad-ada5-91955ff65c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e7:f1:57:1a:54:12:3c:fe:44:e7:00:c4:d4:
                    fe:99:31:40:12:64:2e:03:27:e4:54:9e:21:54:6f:
                    d9:72:d7:23:33:04:03:ea:32:7e:8e:b9:71:b7:20:
                    08:bd:e2:6e:ee:a0:88:3f:7b:88:5e:72:72:78:81:
                    a9:5b:ab:33:76:37:10:73:7b:6c:4f:1a:92:37:48:
                    e4:f0:1f:62:3d:34:0d:c2:f6:15:e2:88:c2:d5:7d:
                    0f:0f:9b:ae:71:fa:63:e5:47:1e:44:9a:7b:6b:b2:
                    76:24:fe:ff:f7:fe:e0:8f:8f:bf:73:7b:9e:d7:6a:
                    08:9e:1d:3c:54:13:a9:36:c8:7c:6e:b3:b3:34:48:
                    1f:37:3b:ab:84:84:0f:25:9a:38:5a:43:13:62:5a:
                    0d:35:57:58:6d:d5:4e:af:02:79:6d:cb:89:b7:6a:
                    47:85:8b:1e:79:39:6f:3f:fd:55:92:a5:c6:ad:a8:
                    e6:ce:11:d9:f8:74:64:d5:97:70:57:96:37:e9:e3:
                    99:2c:13:2b:c8:6c:03:cc:37:d7:3d:95:97:da:1f:
                    ea:c2:d7:a3:e6:4a:27:42:4b:78:70:4e:29:36:74:
                    ec:b9:1a:ef:05:fb:21:f9:f9:9d:8c:e3:91:bd:11:
                    b4:a9:90:76:cd:40:b5:f9:66:64:e2:f1:9b:fd:20:
                    2b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:31:B5:1C:91:8F:45:E3:31:A8:A6:00:E2:3A:82:59:D9:DA:73:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/59f092fa-f8fd-3c5e-823f-9e017a8d318d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:a6:ce:08:de:82:99:60:8d:25:7f:04:b5:de:5c:14:9f:d2:
         e0:45:3c:8f:05:47:23:87:47:d5:f5:41:15:be:76:5b:ac:b4:
         01:38:00:70:a6:ce:fa:12:a4:8e:65:88:85:ff:ad:94:cc:82:
         d0:de:1e:82:d0:42:0c:8f:94:bf:a1:11:f9:6c:cd:06:6b:c2:
         de:44:a4:dc:fa:77:cc:a8:23:5e:b0:70:81:a7:9f:8b:97:e6:
         3c:bb:b0:23:d3:52:ab:cc:76:45:ea:3b:4e:ef:22:a5:15:f6:
         7a:35:b3:b7:d4:d0:80:9c:ae:25:a7:9f:3f:86:ae:b0:a0:0e:
         19:3b:f3:ae:85:ec:79:3d:8d:1d:90:9c:cf:eb:db:c2:3d:63:
         66:c3:f8:98:5b:db:fd:a8:58:2a:39:cc:23:7f:39:3a:5e:b8:
         25:b3:a7:cd:10:e8:41:6e:83:d6:26:1b:57:8c:31:22:19:14:
         76:5f:53:a7:9b:d5:85:55:9c:07:eb:4e:d8:fe:84:8c:29:61:
         24:94:1d:98:21:27:44:05:ff:db:ba:d6:ba:d7:1f:51:f0:3d:
         e4:a7:83:5c:54:c8:8b:57:64:93:57:06:06:77:d0:7d:02:9c:
         ad:72:b8:01:c5:6b:1d:a5:ee:5a:0c:70:a5:d1:71:47:0c:7a:
         84:e7:63:43
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2QWov8DfiTwZiw9oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk
NDExOWIwNzEtM2Q5My00ZGFkLWFkYTUtOTE5NTVmZjY1YzMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyefxVxpUEjz+ROcAxNT+mTFAEmQuAyfkVJ4h
VG/ZctcjMwQD6jJ+jrlxtyAIveJu7qCIP3uIXnJyeIGpW6szdjcQc3tsTxqSN0jk
8B9iPTQNwvYV4ojC1X0PD5uucfpj5UceRJp7a7J2JP7/9/7gj4+/c3ue12oInh08
VBOpNsh8brOzNEgfNzurhIQPJZo4WkMTYloNNVdYbdVOrwJ5bcuJt2pHhYseeTlv
P/1VkqXGrajmzhHZ+HRk1ZdwV5Y36eOZLBMryGwDzDfXPZWX2h/qwtej5konQkt4
cE4pNnTsuRrvBfsh+fmdjOORvRG0qZB2zUC1+WZk4vGb/SAr6QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOwxtRyRj0XjMaimAOI6glnZ2nO0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTlmMDkyZmEtZjhmZC0z
YzVlLTgyM2YtOWUwMTdhOGQzMThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAS9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKymzgjegplgjSV/BLXeXBSf0uBFPI8FRyOHR9X1QRW+dlustAE4
AHCmzvoSpI5liIX/rZTMgtDeHoLQQgyPlL+hEflszQZrwt5EpNz6d8yoI16wcIGn
n4uX5jy7sCPTUqvMdkXqO07vIqUV9no1s7fU0ICcriWnnz+GrrCgDhk7866F7Hk9
jR2QnM/r28I9Y2bD+Jhb2/2oWCo5zCN/OTpeuCWzp80Q6EFug9YmG1eMMSIZFHZf
U6eb1YVVnAfrTtj+hIwpYSSUHZghJ0QF/9u61rrXH1HwPeSng1xUyItXZJNXBgZ3
0H0CnK1yuAHFax2l7loMcKXRcUcMeoTnY0M=
-----END CERTIFICATE-----
Generated at Mon Apr 27 04:12:51 2026 by rpki-client