Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/fc4d7dbd-9606-3f43-8365-cf54431aa61b.roa
File:                     fc4d7dbd-9606-3f43-8365-cf54431aa61b.roa (raw, json)
Hash identifier:          IspunMq/HXor8vyJonfnI8dHNbW2x2dD7RqtAmR9l6o=
Subject key identifier:   F2:88:C8:57:F5:BA:52:52:7C:D1:A7:35:8B:ED:39:AF:55:88:50:70
Certificate issuer:       /CN=b9b0013b-aa8f-41bf-a6f9-0b1c072f5940
Certificate serial:       010D0C9F4328584E2D9F0C371B53616E64C25360
Authority key identifier: F7:2C:38:70:02:34:F6:5A:9B:E7:A2:B7:5D:4B:B1:E9:44:1C:74:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/fc4d7dbd-9606-3f43-8365-cf54431aa61b.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     58419
IP address blocks:        2620:131:3008::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:0c:37:1b:53:61:6e:64:c2:53:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b0013b-aa8f-41bf-a6f9-0b1c072f5940
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=e51266e4-5ee5-46a8-a2d0-80d801038e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:25:30:6b:6e:2e:ae:75:c5:bd:da:d2:df:64:
                    db:fa:c0:c0:38:b4:54:96:21:ae:45:10:f2:b9:3e:
                    e1:8b:46:11:35:00:8a:57:fc:b7:79:de:db:2d:93:
                    20:c2:7b:86:34:f6:04:56:f0:ee:92:d4:1d:3b:56:
                    9e:30:d9:1b:6f:50:2d:99:6d:05:7d:6a:4f:ac:6a:
                    c0:94:9c:a4:20:0d:ca:14:71:de:f1:07:c2:b2:88:
                    21:47:0b:b8:9a:fd:7e:b3:c9:da:48:27:33:f9:ab:
                    d4:e5:be:61:c8:de:3c:85:c5:aa:44:29:4a:0e:f8:
                    63:1f:10:4b:da:7d:47:7a:6c:d0:a5:c7:cf:d2:da:
                    77:f1:eb:66:16:6e:7d:d0:7f:76:93:13:af:ea:fb:
                    88:7b:fd:1b:b9:16:05:db:1e:ae:c9:8c:6c:f5:df:
                    18:bf:72:86:d3:8c:57:27:e1:bb:6e:d6:40:ae:6f:
                    f0:f6:ba:5a:29:c2:35:ff:45:91:14:0c:c8:b4:c2:
                    5b:50:62:ff:73:47:4c:c9:45:b0:c3:6e:98:ab:57:
                    bb:03:04:ab:05:dd:1b:e8:90:4b:d4:5d:33:54:d9:
                    78:15:b4:b2:b6:70:2e:a5:ac:4b:7e:03:50:a8:0f:
                    0f:73:27:f6:56:fa:39:d3:15:99:89:ae:af:fb:ff:
                    69:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:88:C8:57:F5:BA:52:52:7C:D1:A7:35:8B:ED:39:AF:55:88:50:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/fc4d7dbd-9606-3f43-8365-cf54431aa61b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.crl

            X509v3 Authority Key Identifier:
                keyid:F7:2C:38:70:02:34:F6:5A:9B:E7:A2:B7:5D:4B:B1:E9:44:1C:74:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b9b0013b-aa8f-41bf-a6f9-0b1c072f5940.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:131:3008::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:1f:66:85:f4:20:cb:cc:38:ca:de:5a:fb:51:80:de:70:91:
         f3:bb:87:e4:f2:dc:8d:81:3c:7b:52:ac:03:ff:38:e3:69:ed:
         2b:e9:16:f8:61:1f:ad:d1:d0:d3:5f:74:09:25:ca:ae:61:b0:
         ec:3e:a3:84:c1:68:fd:01:ae:89:a5:1e:8c:2a:71:a8:d6:f7:
         2c:23:c1:0b:71:07:0f:d0:d4:15:e5:8c:5d:1e:ec:ef:49:f5:
         b5:44:cb:9d:8f:bf:65:0e:15:d3:38:46:7a:65:14:4c:45:bc:
         f9:aa:f1:06:fc:b5:20:ff:1e:a3:64:c0:ee:04:8f:66:a2:33:
         3b:7e:8d:2d:6b:ea:9a:4c:7b:9f:b3:e7:07:a9:34:28:e7:26:
         9a:6c:5b:50:05:65:df:aa:ca:c1:08:63:f9:2e:97:86:14:bb:
         7d:db:c3:78:ab:98:7d:9b:ab:97:0f:0c:18:38:75:e9:d6:5a:
         28:a6:bc:a1:5e:49:32:e2:f7:32:e0:4f:74:e8:9c:77:2c:9b:
         19:45:81:67:c2:ca:67:9d:ef:47:63:55:e6:b1:c3:e2:6b:46:
         39:3b:20:90:5d:74:cd:d3:ba:a4:69:a5:67:cb:ed:ed:0a:74:
         b3:70:a5:ef:24:8d:66:10:72:14:75:b8:72:e3:cf:0a:eb:03:
         bf:93:4b:f8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4tnww3G1NhbmTCU2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjliMDAxM2ItYWE4Zi00MWJmLWE2ZjktMGIxYzA3MmY1
OTQwMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk
ZTUxMjY2ZTQtNWVlNS00NmE4LWEyZDAtODBkODAxMDM4ZTIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSUwa24urnXFvdrS32Tb+sDAOLRUliGuRRDy
uT7hi0YRNQCKV/y3ed7bLZMgwnuGNPYEVvDuktQdO1aeMNkbb1AtmW0FfWpPrGrA
lJykIA3KFHHe8QfCsoghRwu4mv1+s8naSCcz+avU5b5hyN48hcWqRClKDvhjHxBL
2n1HemzQpcfP0tp38etmFm590H92kxOv6vuIe/0buRYF2x6uyYxs9d8Yv3KG04xX
J+G7btZArm/w9rpaKcI1/0WRFAzItMJbUGL/c0dMyUWww26Yq1e7AwSrBd0b6JBL
1F0zVNl4FbSytnAupaxLfgNQqA8Pcyf2Vvo50xWZia6v+/9pIwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPKIyFf1ulJSfNGnNYvtOa9ViFBwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOWIw
MDEzYi1hYThmLTQxYmYtYTZmOS0wYjFjMDcyZjU5NDAvZmM0ZDdkYmQtOTYwNi0z
ZjQzLTgzNjUtY2Y1NDQzMWFhNjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjliMDAxM2ItYWE4Zi00MWJmLWE2
ZjktMGIxYzA3MmY1OTQwL2I5YjAwMTNiLWFhOGYtNDFiZi1hNmY5LTBiMWMwNzJm
NTk0MC5jcmwwHwYDVR0jBBgwFoAU9yw4cAI09lqb56K3XUux6UQcdBUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iOWIwMDEzYi1hYThmLTQxYmYtYTZmOS0wYjFj
MDcyZjU5NDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJiABMTAI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAL8fZoX0IMvMOMreWvtRgN5wkfO7h+Ty3I2BPHtSrAP/OONp7Svp
FvhhH63R0NNfdAklyq5hsOw+o4TBaP0BromlHowqcajW9ywjwQtxBw/Q1BXljF0e
7O9J9bVEy52Pv2UOFdM4RnplFExFvPmq8Qb8tSD/HqNkwO4Ej2aiMzt+jS1r6ppM
e5+z5wepNCjnJppsW1AFZd+qysEIY/kul4YUu33bw3irmH2bq5cPDBg4denWWiim
vKFeSTLi9zLgT3TonHcsmxlFgWfCymed70djVeaxw+JrRjk7IJBddM3TuqRppWfL
7e0KdLNwpe8kjWYQchR1uHLjzwrrA7+TS/g=
-----END CERTIFICATE-----
Generated at Tue Jun 16 11:16:56 2026 by rpki-client