Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30d3c61d-82b3-34e8-af95-fdbca334de68.roa
File:                     30d3c61d-82b3-34e8-af95-fdbca334de68.roa (raw, json)
Hash identifier:          P9IRgOd9CeyBflvYZYy/pA3qqigO6J4EyARHssLFx+A=
Subject key identifier:   FB:8E:2D:0B:D7:95:30:15:B1:7B:63:9F:DA:D7:1C:A6:0F:47:3B:74
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D98BAAF1FD3C85CAE2C8CBF00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30d3c61d-82b3-34e8-af95-fdbca334de68.roa
Signing time:             Thu 23 Apr 2026 01:00:24 +0000
ROA not before:           Thu 23 Apr 2026 01:00:24 +0000
ROA not after:            Wed 22 Jul 2026 01:00:24 +0000
asID:                     6939
IP address blocks:        2001:470::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:ba:af:1f:d3:c8:5c:ae:2c:8c:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 23 01:00:24 2026 GMT
            Not After : Jul 22 01:00:24 2026 GMT
        Subject: CN=2054cb40-f8f6-4adb-a7fb-b18890d565aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:de:2b:58:c1:78:09:c4:b4:81:27:49:9c:58:
                    ee:56:60:a1:8b:e9:ed:b2:05:33:f0:ee:05:8d:bc:
                    ec:f7:9a:da:03:20:bc:84:08:6e:67:9f:4e:dd:70:
                    b7:32:55:d9:b2:9a:0f:7b:44:04:e6:3a:ca:34:72:
                    9f:4b:04:62:e1:97:de:f4:d9:94:02:d9:ee:25:ef:
                    1f:4b:a6:6f:fd:83:95:b4:61:43:c2:99:5a:27:05:
                    35:7b:13:63:7d:60:79:d7:39:31:78:1d:d1:e0:84:
                    41:c4:0a:8d:f1:da:f5:d4:b4:bb:59:68:52:22:ea:
                    3d:35:ca:38:a8:99:b3:02:67:38:4a:c4:87:78:e2:
                    12:2e:db:5f:f5:a8:20:7f:59:36:b6:a1:28:c7:6c:
                    21:0a:59:44:b6:13:31:22:70:0d:11:f8:bf:68:f3:
                    d3:a3:f5:f7:a5:0d:54:86:79:91:b4:bf:66:43:e6:
                    01:e2:0b:0b:59:3c:03:58:4f:2e:30:f6:77:7d:a3:
                    e7:b3:86:83:58:4f:ac:8e:64:fb:80:2d:18:23:72:
                    1f:47:31:8d:21:cd:1f:03:0b:0f:94:d0:5d:82:f0:
                    f1:32:29:10:ed:f4:42:22:be:7d:08:5a:20:d6:87:
                    de:1d:7e:85:22:90:b9:3f:09:5d:56:7c:e5:1a:1c:
                    34:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8E:2D:0B:D7:95:30:15:B1:7B:63:9F:DA:D7:1C:A6:0F:47:3B:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30d3c61d-82b3-34e8-af95-fdbca334de68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:52:67:af:12:b4:33:6a:27:16:2f:07:b3:23:a5:ac:2e:09:
         44:f7:35:67:3b:ea:7a:b6:3d:3f:d6:3f:61:3c:a4:23:2a:af:
         87:96:3e:26:c7:7a:05:8b:8e:f6:c7:a9:9b:f4:45:41:b1:f7:
         a5:4f:83:d3:1f:4f:41:68:fd:e8:7d:d5:81:94:c9:05:66:83:
         a9:bf:12:6f:cf:36:60:ee:d0:76:83:60:4a:fd:04:6e:66:85:
         93:59:41:11:56:24:e7:a1:5c:a2:f1:b0:04:fa:2c:0a:7d:5c:
         ba:e6:86:fb:dc:37:1b:02:3f:a1:14:c4:55:df:fd:09:79:09:
         95:f7:1d:3e:90:e2:68:58:f7:24:a1:50:be:3a:14:d7:7e:9a:
         61:dd:c2:a2:e1:6c:ac:1e:f3:a6:76:a2:5f:15:0e:9c:2e:77:
         3d:59:9d:d1:8c:ef:b1:f0:33:56:4a:98:68:33:c8:19:65:8a:
         4a:7c:d2:7f:79:ef:3e:d4:e9:a9:30:53:68:ff:2a:05:d3:e3:
         17:20:b3:16:ba:ad:39:a0:bf:72:f9:d8:0e:10:09:08:0a:ce:
         6f:e4:49:60:2d:81:de:fa:f8:9d:02:00:54:e8:f7:69:5b:79:
         29:77:41:6f:8f:af:f0:4c:f5:aa:a7:18:ad:9c:57:e0:d1:6a:
         f5:9d:0a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:53:52 2026 by rpki-client