Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02510d32-350c-313e-936b-3ebdbbc8f953.roa
File:                     02510d32-350c-313e-936b-3ebdbbc8f953.roa (raw, json)
Hash identifier:          lRXftSKbqFCI5xinu+cIToEEJ07YQ6Z5rg0rJ3Mr42w=
Subject key identifier:   0B:01:C0:A6:07:31:D1:E9:EA:30:F9:7D:C4:1E:71:95:B5:0C:97:CC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F583F812CD487E1B26D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02510d32-350c-313e-936b-3ebdbbc8f953.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     401117
IP address blocks:        2001:470:323::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:58:3f:81:2c:d4:87:e1:b2:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=68539eec-e3f8-45e0-a1f0-5ad83836a556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b0:9b:32:77:e7:64:7f:a1:80:b5:fb:a1:cf:
                    61:e2:88:fd:6b:ac:c3:d5:da:7f:d0:d7:6e:b8:f4:
                    ad:dc:74:c8:47:14:9c:e5:b1:3d:3c:57:7d:39:90:
                    05:84:7a:c2:35:d3:ba:15:9d:12:30:ee:1e:68:3e:
                    ac:76:76:11:6d:83:e8:71:95:4c:71:46:ba:4b:f2:
                    2e:51:7c:c6:3b:3d:98:69:de:d4:3e:42:68:51:dc:
                    16:58:c0:45:91:00:6e:3a:91:63:b7:bc:7a:98:e9:
                    8e:31:f8:83:8e:cc:20:24:b8:66:19:4c:70:90:4b:
                    d2:b1:ed:28:b1:4f:e4:d2:8f:79:ff:39:ad:65:bc:
                    70:a3:76:1b:e9:93:d0:41:65:f9:22:d9:79:89:e1:
                    d9:0e:7c:ac:ca:32:fa:30:6b:1e:69:6f:26:66:44:
                    d4:c0:92:89:0a:f7:85:b9:ae:5b:33:ee:69:98:7c:
                    84:30:a6:62:36:80:a3:6f:3a:45:59:1f:35:4b:6b:
                    60:00:90:d7:82:dc:9d:9d:7c:90:2c:e6:7a:a4:a4:
                    7c:d9:f5:e5:46:fe:b9:db:93:69:b1:8f:94:f1:9c:
                    5d:a5:a0:d7:f8:fa:7d:6a:0a:d1:e9:8b:e6:78:5c:
                    33:5f:b8:1c:5c:c5:7d:8d:ca:30:0c:a4:13:5f:0c:
                    9b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:01:C0:A6:07:31:D1:E9:EA:30:F9:7D:C4:1E:71:95:B5:0C:97:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02510d32-350c-313e-936b-3ebdbbc8f953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:323::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:f6:a9:fc:c5:28:5d:29:76:a8:12:09:97:af:b9:f0:2f:f8:
         ab:df:c2:78:4a:bb:36:26:cb:53:ec:b0:e5:47:0f:a5:95:93:
         81:dc:79:ff:ac:84:70:a2:e1:ec:c3:8d:f8:10:86:9f:8d:41:
         e0:fb:83:3c:99:da:96:93:22:53:8f:2e:9b:db:1b:87:63:f4:
         4f:62:c7:76:1c:91:b9:18:67:bf:1d:db:72:01:1a:dc:e3:43:
         7a:17:7e:5c:7b:e4:91:99:bd:8d:a2:eb:4f:4a:39:f1:0d:65:
         38:76:d1:69:22:65:00:8a:a4:f3:20:48:a5:ff:9b:55:a8:6b:
         76:dc:6b:01:fc:25:cb:91:a6:3f:ac:66:88:b9:35:34:f4:f3:
         5e:70:f5:92:29:97:e7:3c:55:3f:18:ba:15:41:7c:3e:85:1a:
         30:7b:8e:40:92:ff:19:c9:52:02:33:9d:e0:6a:86:e3:ce:02:
         74:1a:c2:27:17:c2:e4:22:9a:7f:1f:dc:a6:d7:d0:d7:da:80:
         67:65:94:c1:75:86:d6:bb:10:08:ee:a5:ac:4a:3e:09:e1:c8:
         c9:15:0e:8b:42:1e:78:ac:cc:16:ec:04:03:82:94:f0:c2:43:
         0f:bf:96:71:41:37:33:82:c4:0c:f6:4b:50:06:ea:6c:78:d8:
         ff:fb:ab:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:58:53 2026 by rpki-client