Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c3562a64-7382-3494-bd23-00fecd0cc089.roa
File:                     c3562a64-7382-3494-bd23-00fecd0cc089.roa (raw, json)
Hash identifier:          ugUTodSM5HRLw6E1kKqc3LnB8oete5RFGfcMQqvZlxY=
Subject key identifier:   9D:2E:42:B5:7E:8C:BC:D3:B4:57:9A:7C:F4:CE:72:B6:85:50:76:1B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E0D843875E261B1A45A25BB00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c3562a64-7382-3494-bd23-00fecd0cc089.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     61986
IP address blocks:        2001:470:542::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:38:75:e2:61:b1:a4:5a:25:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=ddede02a-0d0e-4de9-b17c-c25e2c0c39ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b3:be:55:f1:2a:96:b5:21:f6:59:8d:2d:f1:
                    3a:89:ed:cb:ec:ad:b6:25:e2:c8:04:75:34:42:ed:
                    fd:12:3a:b4:52:e4:48:eb:73:1f:32:49:5f:31:db:
                    5c:d1:51:22:2d:b8:75:71:b1:9d:3e:4a:37:f9:12:
                    33:2f:57:d9:c3:60:cc:85:b9:b9:4c:16:75:5c:3b:
                    9d:d8:73:9c:28:83:5a:59:74:2d:f4:22:9e:3e:7e:
                    a9:76:fb:d4:ef:dc:f8:b2:ea:67:22:56:fc:f4:f0:
                    60:7f:f1:38:12:d1:0d:d9:ac:ad:e0:6a:56:ff:33:
                    1a:69:e1:18:e4:3e:7e:44:82:5c:72:9b:cf:78:d4:
                    2a:4c:37:39:ec:f9:6b:c2:86:be:d8:8d:1d:17:d9:
                    a5:89:b7:04:e2:ee:c6:5c:25:05:f0:7a:8a:58:a4:
                    9a:84:e7:f5:43:53:a7:ae:37:b6:85:d0:7c:d7:19:
                    67:c0:6c:4e:cb:91:6a:4a:bd:21:a4:00:68:72:eb:
                    27:53:39:2b:d5:ca:e1:8e:e0:71:d8:9e:0b:cd:7d:
                    ef:78:2f:c6:f5:56:b6:5a:84:ca:6f:cb:ab:cd:a7:
                    e8:37:06:41:bc:ec:dc:2e:57:42:10:02:6a:64:b3:
                    2d:1e:62:ab:d3:49:43:85:0e:e0:58:23:3a:e5:bf:
                    3d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2E:42:B5:7E:8C:BC:D3:B4:57:9A:7C:F4:CE:72:B6:85:50:76:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c3562a64-7382-3494-bd23-00fecd0cc089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:542::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:cd:85:a5:89:82:bd:7f:0c:45:46:22:13:af:3c:7b:2b:f9:
         c3:cc:18:92:36:b3:76:71:a0:14:bb:fa:25:0d:d3:2f:0f:cf:
         3b:61:06:56:40:f2:31:a2:e3:04:18:ea:24:c7:27:a2:88:8a:
         58:da:28:2d:0a:43:23:63:32:d9:f7:35:f0:25:d3:90:30:e7:
         e6:e0:4d:55:bb:bf:88:96:d4:33:e0:88:fc:cd:ee:e6:4b:d1:
         8d:3e:37:35:6b:06:8f:78:a9:df:0e:5c:7b:3c:21:c3:21:38:
         78:b1:f5:fc:72:61:53:1e:95:2f:57:22:99:45:68:71:db:c3:
         02:2b:fc:ee:67:1a:13:e3:0c:5f:9b:0f:3b:de:57:d0:a2:d4:
         f5:27:46:15:fc:cb:66:33:cd:6a:d4:f2:ba:19:02:15:9e:c7:
         8c:c3:b3:bd:e9:38:28:94:24:4a:6e:f2:9b:72:76:ba:e1:86:
         3f:8f:24:55:b5:f1:7d:f9:85:88:1c:1b:e3:f4:c3:0c:e4:aa:
         c0:d2:3c:13:20:45:da:7d:61:52:4a:2a:8c:be:e1:a7:b2:42:
         37:00:d8:2d:87:f6:0c:13:ed:00:c7:59:ef:b6:74:35:6e:ec:
         98:4a:8e:a9:0e:22:30:20:ec:9b:eb:bb:34:6b:1b:9e:00:76:
         39:b2:db:82
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4NhDh14mGxpFoluwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk
ZGRlZGUwMmEtMGQwZS00ZGU5LWIxN2MtYzI1ZTJjMGMzOWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbO+VfEqlrUh9lmNLfE6ie3L7K22JeLIBHU0
Qu39Ejq0UuRI63MfMklfMdtc0VEiLbh1cbGdPko3+RIzL1fZw2DMhbm5TBZ1XDud
2HOcKINaWXQt9CKePn6pdvvU79z4supnIlb89PBgf/E4EtEN2ayt4GpW/zMaaeEY
5D5+RIJccpvPeNQqTDc57Plrwoa+2I0dF9mlibcE4u7GXCUF8HqKWKSahOf1Q1On
rje2hdB81xlnwGxOy5FqSr0hpABocusnUzkr1crhjuBx2J4LzX3veC/G9Va2WoTK
b8urzafoNwZBvOzcLldCEAJqZLMtHmKr00lDhQ7gWCM65b89GQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ0uQrV+jLzTtFeafPTOcraFUHYbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzM1NjJhNjQtNzM4Mi0z
NDk0LWJkMjMtMDBmZWNkMGNjMDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAVC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACTNhaWJgr1/DEVGIhOvPHsr+cPMGJI2s3ZxoBS7+iUN0y8Pzzth
BlZA8jGi4wQY6iTHJ6KIiljaKC0KQyNjMtn3NfAl05Aw5+bgTVW7v4iW1DPgiPzN
7uZL0Y0+NzVrBo94qd8OXHs8IcMhOHix9fxyYVMelS9XIplFaHHbwwIr/O5nGhPj
DF+bDzveV9Ci1PUnRhX8y2YzzWrU8roZAhWex4zDs73pOCiUJEpu8ptydrrhhj+P
JFW18X35hYgcG+P0wwzkqsDSPBMgRdp9YVJKKoy+4aeyQjcA2C2H9gwT7QDHWe+2
dDVu7JhKjqkOIjAg7JvruzRrG54Adjmy24I=
-----END CERTIFICATE-----
Generated at Fri Jun 5 16:37:51 2026 by rpki-client