Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7e140b0d-9ce5-39d9-b61a-fee3ba210d23.roa
File:                     7e140b0d-9ce5-39d9-b61a-fee3ba210d23.roa (raw, json)
Hash identifier:          YIYdwuemXjXPN5C3jTN+hw3sSJzEyD7KChfVnCirYds=
Subject key identifier:   F6:BD:49:17:E4:BD:25:C1:E8:5D:D6:39:5B:1B:EC:14:7B:33:E4:BC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F566E5886CF16CE5A8DC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7e140b0d-9ce5-39d9-b61a-fee3ba210d23.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     1853
IP address blocks:        2001:470:2dd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:56:6e:58:86:cf:16:ce:5a:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=03825249-b685-4cd0-bf05-a1fdfeac5391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:25:97:64:8a:88:b7:e7:bf:79:bd:1a:5c:50:
                    f6:4e:70:1d:0a:c1:94:cb:7b:77:5e:c4:c8:6d:58:
                    a8:6a:c5:aa:28:e6:a3:32:d8:ba:86:50:05:b3:2b:
                    b8:a4:d8:5a:c5:67:00:f4:c3:1d:db:19:de:61:5c:
                    af:44:9a:39:0b:ce:ae:7c:be:b6:17:68:04:86:82:
                    b9:a1:0c:a1:1d:98:5a:e0:af:eb:8c:bd:14:6e:59:
                    d5:9b:7b:31:26:2e:4f:46:d9:79:d2:85:01:fd:c8:
                    c5:d6:d2:70:23:69:f7:3a:7e:c4:51:36:79:0f:60:
                    12:fd:58:30:52:ee:85:16:91:7d:3b:d7:ec:13:85:
                    87:42:e1:18:88:c0:c4:cf:e7:a3:e4:9f:b7:0d:b2:
                    85:ef:9b:a4:ec:4a:dd:f4:61:5e:62:1a:f1:51:3d:
                    5f:4c:0b:a1:ce:c4:70:72:c3:b3:ab:da:02:94:43:
                    f9:bf:6f:e0:5f:af:62:bc:23:38:6d:c6:55:4a:39:
                    5e:cf:34:80:0b:58:1f:a3:69:15:7b:6f:cc:51:da:
                    77:b5:42:77:cc:3d:c2:29:d6:88:65:82:0e:1a:aa:
                    7d:0a:35:44:10:d1:f4:f2:0e:3b:2b:cb:f7:f9:a7:
                    1f:62:3d:39:23:90:61:c4:9f:db:7e:b0:72:c4:1c:
                    79:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BD:49:17:E4:BD:25:C1:E8:5D:D6:39:5B:1B:EC:14:7B:33:E4:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7e140b0d-9ce5-39d9-b61a-fee3ba210d23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2dd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:13:a9:15:91:d3:5d:35:ec:8e:3b:d8:5a:fd:93:f9:4d:cc:
         e3:b1:6f:2d:15:2b:6a:0e:be:b4:80:92:7d:e7:22:44:54:f2:
         b7:e1:81:c2:7b:7b:be:6f:3f:9d:6a:37:9f:79:5a:a9:ff:b7:
         e3:5b:bf:d9:18:d4:9e:19:79:38:9c:5e:2e:6a:3e:8f:fc:a4:
         39:1c:74:59:86:30:44:c6:b7:ac:83:72:61:f3:62:db:b4:be:
         fe:fd:4b:8f:f4:51:4e:91:b9:d7:e5:e4:5e:b5:59:cb:59:74:
         d9:2c:82:c4:7e:d5:59:b8:e5:70:94:4b:3b:fd:4f:8b:d6:5d:
         6a:df:3c:43:a4:14:87:22:9d:0b:0f:5a:6f:f3:7a:ed:a1:6e:
         be:01:1d:97:53:28:ac:05:15:d8:79:7c:53:3b:b4:bd:45:0e:
         54:8c:0c:18:90:eb:5d:34:84:9c:e6:4d:33:f2:62:e4:94:d4:
         8a:75:4f:d2:df:99:dd:61:c8:da:9d:c8:12:e8:e6:ca:a7:b0:
         4b:2a:f9:b1:16:f5:46:96:6f:26:11:e3:72:86:4e:c0:43:09:
         ee:82:8a:71:8e:15:16:0c:42:92:d6:90:6f:13:98:39:de:b3:
         90:0e:f1:2b:2f:2c:20:de:59:c2:fb:74:85:82:f6:98:17:40:
         15:23:2b:f7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE46L1ZuWIbPFs5ajcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk
MDM4MjUyNDktYjY4NS00Y2QwLWJmMDUtYTFmZGZlYWM1MzkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyWXZIqIt+e/eb0aXFD2TnAdCsGUy3t3XsTI
bVioasWqKOajMti6hlAFsyu4pNhaxWcA9MMd2xneYVyvRJo5C86ufL62F2gEhoK5
oQyhHZha4K/rjL0UblnVm3sxJi5PRtl50oUB/cjF1tJwI2n3On7EUTZ5D2AS/Vgw
Uu6FFpF9O9fsE4WHQuEYiMDEz+ej5J+3DbKF75uk7Erd9GFeYhrxUT1fTAuhzsRw
csOzq9oClEP5v2/gX69ivCM4bcZVSjlezzSAC1gfo2kVe2/MUdp3tUJ3zD3CKdaI
ZYIOGqp9CjVEENH08g47K8v3+acfYj05I5BhxJ/bfrByxBx53QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPa9SRfkvSXB6F3WOVsb7BR7M+S8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2UxNDBiMGQtOWNlNS0z
OWQ5LWI2MWEtZmVlM2JhMjEwZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALd
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADoTqRWR01017I472Fr9k/lNzOOxby0VK2oOvrSAkn3nIkRU8rfh
gcJ7e75vP51qN595Wqn/t+Nbv9kY1J4ZeTicXi5qPo/8pDkcdFmGMETGt6yDcmHz
Ytu0vv79S4/0UU6Rudfl5F61WctZdNksgsR+1Vm45XCUSzv9T4vWXWrfPEOkFIci
nQsPWm/zeu2hbr4BHZdTKKwFFdh5fFM7tL1FDlSMDBiQ6100hJzmTTPyYuSU1Ip1
T9Lfmd1hyNqdyBLo5sqnsEsq+bEW9UaWbyYR43KGTsBDCe6CinGOFRYMQpLWkG8T
mDnes5AO8SsvLCDeWcL7dIWC9pgXQBUjK/c=
-----END CERTIFICATE-----
Generated at Tue Jun 30 02:39:08 2026 by rpki-client