Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/289a7467-fbb7-3b40-bd1f-958c271c47db.roa
File:                     289a7467-fbb7-3b40-bd1f-958c271c47db.roa (raw, json)
Hash identifier:          lbyG+T78EUbmV8cvnmHQdnREHKVlPQ5Qwjbfux6aPyo=
Subject key identifier:   EE:3A:AE:BA:DD:70:2D:97:11:EF:1E:A5:1E:07:1F:C5:48:87:90:43
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E4129E8DFACBCF82029131A10
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/289a7467-fbb7-3b40-bd1f-958c271c47db.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     2734
IP address blocks:        2001:470:590::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:e8:df:ac:bc:f8:20:29:13:1a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=e6725b7c-a997-4320-8d12-31d50475377f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7e:65:46:1c:ea:be:f0:88:9b:17:ce:d4:b3:
                    af:ff:3f:94:20:2a:49:e7:41:5a:5c:76:a6:8b:b3:
                    2b:f0:5f:84:81:60:94:ba:00:9b:13:ba:59:e3:3f:
                    c9:c4:59:7d:52:04:0a:4d:db:16:d6:7f:3f:25:a1:
                    15:46:83:c1:d6:f9:61:d4:b1:56:77:6c:68:5e:00:
                    89:bd:3e:5f:f9:96:7a:8c:72:a5:db:a9:91:0e:da:
                    c5:c5:77:fa:0a:6b:95:c3:41:1d:3e:37:17:b2:2b:
                    18:66:3a:c2:a3:c4:8d:04:b8:46:b1:49:85:df:26:
                    9d:91:0c:c7:4a:c9:17:0b:ea:02:ad:bf:61:de:cb:
                    01:d2:16:a8:89:87:55:25:dd:14:bc:7a:42:d3:da:
                    ed:c9:f3:7c:0d:a2:5e:b5:6a:5c:65:cd:af:16:28:
                    db:e3:32:7a:15:76:b8:45:91:f7:92:27:c1:a7:88:
                    e1:64:36:13:83:f7:3a:17:82:0e:9a:76:fe:fa:e1:
                    20:9a:22:f3:b3:6f:af:31:72:a6:c6:eb:47:1c:3e:
                    03:f5:a5:19:be:b7:5b:d5:1c:91:da:1d:c6:ec:80:
                    b0:a9:ca:64:37:cd:7e:56:b5:6a:49:bc:0a:db:8a:
                    6e:6c:60:79:ad:ee:34:54:21:65:8c:47:db:bf:97:
                    f3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3A:AE:BA:DD:70:2D:97:11:EF:1E:A5:1E:07:1F:C5:48:87:90:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/289a7467-fbb7-3b40-bd1f-958c271c47db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:590::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:32:74:a9:0b:d0:5d:ef:24:6d:34:64:49:bf:9c:54:b0:50:
         29:12:8c:7c:9e:12:ad:ea:d4:c9:17:7a:91:78:d9:7a:c6:d0:
         73:ae:7a:ee:13:c1:04:a6:95:bf:e0:f5:68:ee:14:42:53:6d:
         f2:19:ea:2d:24:a8:58:83:37:c4:ec:73:85:50:3a:cc:69:e9:
         31:fe:52:39:db:2c:d0:32:11:95:29:d9:f1:e6:f8:07:d6:75:
         b4:39:eb:dd:03:8b:0e:31:f5:4d:84:cd:9e:b0:60:ee:75:b2:
         47:9d:a2:b3:09:e6:67:c7:89:22:48:be:50:ed:dd:15:54:fb:
         65:0a:a0:53:e9:58:71:e4:54:a9:fa:f0:a1:ea:e7:44:8d:89:
         e4:c9:3d:2e:3f:61:e1:47:55:85:e1:9b:5f:de:b5:b1:04:ed:
         88:57:e7:c0:90:e3:98:59:cd:ab:7b:6b:9b:32:90:d2:4f:78:
         f6:47:d4:c2:91:b0:0a:01:90:3e:2e:81:34:17:38:38:36:00:
         b7:5f:08:f0:a1:c1:d8:cd:6f:4c:53:ea:e6:41:9b:42:a7:80:
         9d:5e:de:93:9c:d5:3a:1a:46:05:f7:fc:91:db:57:10:3c:c9:
         26:e0:f0:31:bb:a5:0f:9b:b5:d7:40:18:0e:7a:f1:1f:a1:a2:
         7a:67:5b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:13:30 2026 by rpki-client