Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c4494bb-4374-3cae-9456-ee652af7abd3.roa
File:                     1c4494bb-4374-3cae-9456-ee652af7abd3.roa (raw, json)
Hash identifier:          nCC0yJ2fWM89BvsJHEvo1I+90exQH4W9k+BCRQl6wwY=
Subject key identifier:   4E:F5:46:CB:91:0B:94:15:25:0A:74:6C:2F:1F:8B:8D:16:E0:B4:3B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D1172860D8530D4BC1EC4F080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c4494bb-4374-3cae-9456-ee652af7abd3.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     398885
IP address blocks:        2001:470:3c4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:86:0d:85:30:d4:bc:1e:c4:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=8844ae0e-4cd3-4ad2-832b-eb57afcd1b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7f:fa:ea:c8:48:3f:55:a2:2d:04:51:48:fc:
                    07:37:b7:fc:b5:b5:08:19:d3:8c:d1:15:bc:ca:b2:
                    27:cb:31:05:9a:8c:aa:6b:7c:bf:b8:54:a3:4e:e5:
                    1d:3f:b8:a4:4c:7d:c5:4a:fe:5e:7a:d1:f9:68:2c:
                    ff:60:93:23:ce:d5:b4:79:ab:96:ad:ad:d8:0e:55:
                    f2:19:a1:87:c1:fb:7d:d0:d8:43:8b:c7:44:55:d6:
                    90:24:92:5c:39:6c:da:e1:d1:3a:47:81:74:3e:92:
                    03:d9:bf:17:d2:0d:6b:0a:37:b3:fa:c8:a1:ad:93:
                    af:4f:57:a0:80:36:81:99:00:0e:87:32:d3:82:bc:
                    bc:ad:95:ec:03:2c:03:47:4f:1b:6c:e3:91:6d:1e:
                    c2:5f:ea:7f:82:36:c9:ab:03:63:d3:7f:a9:e7:b7:
                    32:a7:6f:22:12:22:04:34:22:6d:a5:62:b9:64:4a:
                    78:7b:da:49:0d:50:0c:08:93:e5:5f:ee:8e:8e:07:
                    1b:d7:46:5b:2b:2a:69:9a:79:5d:bb:cb:c1:a0:8c:
                    c9:83:16:c9:b9:89:d6:49:12:61:0a:09:27:21:00:
                    c1:b4:6f:b8:ff:0b:44:20:ae:49:77:58:85:bb:14:
                    b0:69:b9:87:c6:7b:ce:0b:a6:8e:20:b8:22:ca:63:
                    06:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F5:46:CB:91:0B:94:15:25:0A:74:6C:2F:1F:8B:8D:16:E0:B4:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c4494bb-4374-3cae-9456-ee652af7abd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3c4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:21:a7:a0:45:8d:cb:1f:3a:1c:15:b4:10:7f:da:bf:29:14:
         8c:c3:bb:9a:07:58:bc:82:cc:96:11:c8:8e:e0:1c:b7:bb:f6:
         1c:44:0b:5e:d5:f8:41:af:fb:4b:55:de:b9:43:59:fb:c1:5b:
         06:f7:9c:4c:cb:3b:92:e4:a9:05:bd:f5:e3:26:f2:94:fb:40:
         27:8d:96:8f:a7:88:fc:45:db:2d:68:70:9e:aa:31:76:9e:77:
         9a:8c:81:d7:4b:f4:98:4e:55:52:26:2d:62:28:bf:f0:70:7e:
         16:46:64:5f:25:25:38:55:60:8e:da:03:6d:a2:54:a1:44:fd:
         9f:e7:5c:c0:8f:b6:8c:ac:26:d3:e7:33:ce:2b:5b:c0:25:1b:
         05:3d:d7:4b:c8:06:ed:6b:74:55:15:d1:05:4c:0c:4a:38:45:
         af:86:9d:2f:74:1a:3f:e9:27:c7:41:73:b3:b3:1d:e7:b4:88:
         28:91:c0:37:13:35:06:e0:0e:2b:47:53:e3:1b:58:b6:7a:a2:
         fe:3f:88:61:86:99:85:83:45:1a:2a:cb:21:a0:14:69:07:21:
         b2:c8:99:8d:81:c8:74:6f:79:46:70:43:ef:01:1e:d1:43:9b:
         d0:f9:7f:05:a6:b6:8b:3b:e1:04:75:f4:45:76:9f:d9:52:1a:
         ec:4c:56:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:31:41 2026 by rpki-client