Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/13dbcdc0-1f07-349e-b44a-dafe6e62e27c.roa
File:                     13dbcdc0-1f07-349e-b44a-dafe6e62e27c.roa (raw, json)
Hash identifier:          fb3gYJNhh5efIZ5epuP9fKIR3jfJ210dC9FTQ3PVF+8=
Subject key identifier:   43:A7:99:58:28:B8:88:95:FD:05:5F:CE:5E:6C:E6:0A:A0:9F:E0:42
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DA54AC24AA1EE0AF267857F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/13dbcdc0-1f07-349e-b44a-dafe6e62e27c.roa
Signing time:             Mon 27 Apr 2026 13:00:30 +0000
ROA not before:           Mon 27 Apr 2026 13:00:30 +0000
ROA not after:            Sun 26 Jul 2026 13:00:30 +0000
asID:                     40111
IP address blocks:        2001:470:3a4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a5:4a:c2:4a:a1:ee:0a:f2:67:85:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 27 13:00:30 2026 GMT
            Not After : Jul 26 13:00:30 2026 GMT
        Subject: CN=080092b7-b40d-499b-aad7-fe4cdb9e899b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bd:a3:61:ba:6e:8e:b8:c2:15:6f:74:86:c1:
                    ae:37:a5:50:a0:51:aa:91:54:d1:75:7e:41:e8:70:
                    61:55:83:55:e0:11:b2:c6:19:38:ab:d7:27:f5:21:
                    6d:6b:56:88:ab:2d:09:d2:ff:4b:9b:f5:c0:98:8b:
                    0b:2f:59:f3:2b:c4:ba:6c:be:15:7f:d7:99:e7:66:
                    55:1a:81:bd:de:62:9a:6c:dd:a5:4f:8a:b5:8b:aa:
                    95:06:27:6e:16:5c:e1:68:58:44:fc:75:f7:e7:e0:
                    56:29:81:27:f4:bb:0b:0a:7c:ef:b0:d7:4e:bf:78:
                    29:af:ce:ae:19:25:79:7c:be:a3:57:79:80:22:ce:
                    57:07:aa:2e:76:80:73:ed:2d:59:14:e6:46:30:24:
                    20:e2:e7:27:32:90:99:f2:14:e5:7d:b9:9e:fd:d3:
                    bb:10:a5:1d:93:f9:c8:0f:76:6c:b5:7a:f0:19:f0:
                    49:c5:22:97:15:fd:12:7a:57:a0:73:f7:b0:b6:31:
                    ec:5b:8c:5d:a4:e3:5e:8d:73:54:dc:0c:3f:da:f3:
                    18:a0:46:7e:49:2a:e7:73:e4:97:0f:60:ba:8f:46:
                    90:62:d5:4b:ed:20:e5:ff:eb:f9:10:19:8b:ff:a0:
                    c6:40:88:75:a7:14:69:91:99:5a:0f:4d:47:6d:e0:
                    62:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A7:99:58:28:B8:88:95:FD:05:5F:CE:5E:6C:E6:0A:A0:9F:E0:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/13dbcdc0-1f07-349e-b44a-dafe6e62e27c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3a4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:e1:94:9b:9c:1f:b2:5c:46:71:2e:28:ef:b1:75:c6:71:bb:
         f5:8e:d7:e4:89:1b:c8:7e:c1:38:f8:a4:ad:0f:f8:17:32:48:
         85:33:2d:a2:19:00:19:ba:c4:21:56:a0:99:bb:ff:e0:43:3e:
         85:55:84:13:5a:a0:d1:65:7d:4e:b6:f1:fc:10:57:5c:fe:40:
         f8:52:6e:e7:2d:62:09:9e:aa:98:9e:4a:bd:2c:19:53:55:42:
         5f:f9:17:fd:df:4f:96:b1:f8:02:99:2c:30:55:49:ca:df:56:
         24:29:8f:39:b3:65:c1:8c:52:55:22:6f:41:f3:4e:b6:59:42:
         03:fb:f4:77:71:2e:ea:63:d7:d6:7d:5b:22:b5:59:5c:31:19:
         d5:21:16:df:ba:1e:2d:1c:84:ab:fe:2a:80:7b:75:5f:64:20:
         a5:a2:72:9b:a6:30:0d:32:f8:f9:06:e0:47:9d:ec:c9:00:3d:
         79:4f:fa:bf:a2:cd:60:39:2f:e7:50:33:7a:e1:da:c6:6c:4c:
         34:21:cc:a3:66:43:b6:7d:09:7e:db:0a:d7:0d:a2:a9:cc:0d:
         9e:cb:5a:78:97:bd:c0:71:19:45:58:a3:2d:c3:0b:ff:34:f1:
         c1:e9:75:15:71:ef:be:83:c6:25:5d:20:d5:eb:7f:04:e5:7e:
         84:e2:7b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:16:36 2026 by rpki-client