Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5ce2bcd-5249-3c12-a302-c81cce952ad8.roa
File:                     d5ce2bcd-5249-3c12-a302-c81cce952ad8.roa (raw, json)
Hash identifier:          VFc3u59JEFUtpf4Oqfv9CCY5ote3M4QAnM6ozKFlruE=
Subject key identifier:   44:8E:0D:87:D0:DF:16:11:83:30:2F:F7:FB:EA:98:21:E1:06:0A:A6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E4129E0AD3587064BAB724B40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5ce2bcd-5249-3c12-a302-c81cce952ad8.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     399788
IP address blocks:        2001:470:37a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:e0:ad:35:87:06:4b:ab:72:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=62085e64-cc15-489d-904b-636b86d98c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ce:b9:1c:78:77:fe:68:52:f9:e0:b6:b1:de:
                    d1:48:09:a1:ac:65:1d:f9:5e:c1:3d:c8:64:10:12:
                    f7:c5:6b:41:56:b5:80:1a:87:60:5d:4e:1c:d2:78:
                    43:04:45:cf:9b:c5:ed:25:29:5b:0d:46:16:fc:6a:
                    55:45:cf:8b:bb:a5:c0:0d:5c:91:ff:67:c2:97:b0:
                    f9:41:9b:ad:4a:d0:21:29:aa:fe:81:f8:70:96:21:
                    f2:54:db:18:cf:02:c7:0a:22:bd:c5:3f:0b:2c:2b:
                    f6:8c:13:43:de:b6:b9:98:54:37:5a:b2:6e:0e:10:
                    b9:6f:5e:35:31:8d:42:96:54:20:21:2d:f7:bf:32:
                    9e:c3:80:c1:54:69:2d:d6:3e:d0:a6:5e:ea:52:8b:
                    5e:93:fd:2c:85:b0:63:11:3a:ea:a5:6f:e2:e3:19:
                    6e:ab:3e:19:ca:2e:43:2d:06:43:0e:91:79:a7:d7:
                    5e:64:19:2d:66:28:ec:bd:47:93:ef:af:fc:c6:45:
                    73:e9:b5:8a:2f:65:d3:cf:06:3d:d1:b8:65:0c:67:
                    2e:96:e9:fa:ba:e5:02:39:5a:ab:fc:9a:8d:45:ed:
                    66:23:06:15:7f:11:d4:1c:93:17:c0:6f:94:25:f9:
                    3b:cc:3e:e5:31:18:48:0b:ba:34:8a:92:10:15:50:
                    ba:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8E:0D:87:D0:DF:16:11:83:30:2F:F7:FB:EA:98:21:E1:06:0A:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5ce2bcd-5249-3c12-a302-c81cce952ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:37a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:ca:6f:e3:00:79:31:bb:4e:c9:2f:6d:74:e1:59:b3:78:5d:
         cb:9d:aa:f1:8e:85:57:b2:86:77:1b:54:87:7f:fa:17:0b:e5:
         02:3c:69:0b:6f:a2:6b:14:ff:94:2f:c3:28:82:e3:85:41:35:
         ff:c5:8c:4c:73:a1:0b:6e:f4:3b:24:96:ca:ac:36:91:c5:56:
         f2:b8:d5:bc:16:50:d5:4c:26:7f:a3:c3:ac:38:fa:e5:b8:e2:
         1c:16:6e:d9:c1:2a:5f:55:18:26:4c:f0:fc:2d:9b:7e:8e:36:
         b2:cf:d7:73:37:b5:f3:37:15:16:f4:05:58:87:31:31:3c:e0:
         f2:98:72:61:cb:e8:b1:e0:7b:da:aa:54:26:c1:a0:50:36:61:
         0c:b0:0f:c1:07:9b:00:36:5a:a3:4e:69:97:25:aa:b5:d7:25:
         d0:79:c6:fd:d4:8f:1d:42:90:d3:3e:06:78:20:c3:86:0b:c8:
         4e:0d:3a:bd:49:24:b1:b7:24:e6:27:83:75:c9:68:da:60:65:
         5e:72:35:2f:6d:19:48:9f:88:37:54:ed:c2:36:3f:87:75:98:
         dc:45:f4:53:07:d5:3e:4f:e5:3c:df:56:35:b8:d0:8c:94:39:
         fd:35:fd:72:24:69:25:93:90:e5:de:f0:78:fe:9e:03:69:04:
         d4:10:07:af
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5BKeCtNYcGS6tyS0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk
NjIwODVlNjQtY2MxNS00ODlkLTkwNGItNjM2Yjg2ZDk4YzZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms65HHh3/mhS+eC2sd7RSAmhrGUd+V7BPchk
EBL3xWtBVrWAGodgXU4c0nhDBEXPm8XtJSlbDUYW/GpVRc+Lu6XADVyR/2fCl7D5
QZutStAhKar+gfhwliHyVNsYzwLHCiK9xT8LLCv2jBND3ra5mFQ3WrJuDhC5b141
MY1CllQgIS33vzKew4DBVGkt1j7Qpl7qUotek/0shbBjETrqpW/i4xluqz4Zyi5D
LQZDDpF5p9deZBktZijsvUeT76/8xkVz6bWKL2XTzwY90bhlDGculun6uuUCOVqr
/JqNRe1mIwYVfxHUHJMXwG+UJfk7zD7lMRhIC7o0ipIQFVC6HQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFESODYfQ3xYRgzAv9/vqmCHhBgqmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDVjZTJiY2QtNTI0OS0z
YzEyLWEzMDItYzgxY2NlOTUyYWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAN6
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALXKb+MAeTG7TskvbXThWbN4XcudqvGOhVeyhncbVId/+hcL5QI8
aQtvomsU/5QvwyiC44VBNf/FjExzoQtu9DsklsqsNpHFVvK41bwWUNVMJn+jw6w4
+uW44hwWbtnBKl9VGCZM8Pwtm36ONrLP13M3tfM3FRb0BViHMTE84PKYcmHL6LHg
e9qqVCbBoFA2YQywD8EHmwA2WqNOaZclqrXXJdB5xv3Ujx1CkNM+Bnggw4YLyE4N
Or1JJLG3JOYng3XJaNpgZV5yNS9tGUifiDdU7cI2P4d1mNxF9FMH1T5P5TzfVjW4
0IyUOf01/XIkaSWTkOXe8Hj+ngNpBNQQB68=
-----END CERTIFICATE-----
Generated at Tue Jul 7 22:14:22 2026 by rpki-client