Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b7188ad-ff41-35c7-9712-db1897af0ca8.roa
File:                     3b7188ad-ff41-35c7-9712-db1897af0ca8.roa (raw, json)
Hash identifier:          FDiTtOhQb7js8o9JBVcTZSrw1z/+qdnHXW+c3rPyqTE=
Subject key identifier:   5B:1B:BC:D8:39:CB:EA:ED:E3:FF:80:9B:51:F1:39:4B:8D:C7:C9:99
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E7204CF1EE3C6629658D6F600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b7188ad-ff41-35c7-9712-db1897af0ca8.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     34187
IP address blocks:        2001:470:427::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:cf:1e:e3:c6:62:96:58:d6:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=f4f0307c-0dd8-4da5-a917-a81124d5dfc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ee:44:31:e6:2f:45:11:c5:1c:01:c5:0c:bc:
                    7d:38:1a:4f:ad:a2:34:22:fa:e2:68:36:eb:cf:b7:
                    58:1a:b6:a2:b5:a7:f4:f4:0f:94:8e:ba:39:45:f4:
                    73:da:79:9f:95:7c:70:24:63:c6:b3:1f:0e:af:62:
                    77:90:51:70:cc:56:8a:60:34:ab:3d:85:c8:cd:50:
                    88:0d:84:8a:28:80:ba:d8:3e:c7:cd:f1:7c:50:f5:
                    43:5f:0b:7f:02:e8:f4:8c:b6:93:ef:5d:88:9a:ff:
                    34:00:c0:b5:2b:9d:d4:63:a8:e1:64:7f:2d:f8:3f:
                    07:eb:e7:46:0c:31:c8:79:bc:f1:89:88:d4:99:3d:
                    fa:22:e8:c4:49:80:8d:46:b2:d2:42:bf:28:7c:4e:
                    02:04:ea:94:9a:8b:cd:d6:70:e6:e7:f0:f2:f9:1c:
                    8b:93:e3:85:c0:3e:04:28:b4:8f:10:1f:b9:7a:3a:
                    e5:3d:28:67:37:44:f3:4f:8e:38:58:f5:f7:c5:1a:
                    40:94:98:18:3e:46:04:1b:21:d5:c8:11:92:c1:63:
                    a8:c7:19:6c:48:58:d3:1b:9f:dc:3a:db:ff:e4:09:
                    ab:ba:c5:27:33:9f:21:79:99:8f:57:e5:72:0f:0c:
                    14:8a:06:af:1c:c0:c3:7a:3e:d2:c6:83:46:5c:6c:
                    ab:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1B:BC:D8:39:CB:EA:ED:E3:FF:80:9B:51:F1:39:4B:8D:C7:C9:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b7188ad-ff41-35c7-9712-db1897af0ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:427::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:6d:bd:e5:07:f2:46:14:47:be:4e:bf:9c:d3:0b:ea:00:81:
         e2:18:f9:ed:b4:29:7b:4e:b3:74:42:57:c0:56:27:64:63:4c:
         d9:b2:96:50:51:d9:46:1c:a9:b1:a2:e7:f2:81:d5:2a:dc:b8:
         c6:74:a9:b5:0b:13:84:6c:92:6c:e3:75:f9:a8:65:90:8c:42:
         77:b4:bb:75:42:93:84:87:a1:59:f2:df:82:b1:4b:b3:80:66:
         26:85:0f:b5:50:86:a7:dd:63:00:d7:8d:3e:5a:77:77:b5:33:
         3f:e6:81:8a:f9:d2:31:cf:97:38:86:3c:74:d0:1e:63:51:60:
         21:dd:e6:49:ab:1a:7b:0b:a7:be:bd:a9:13:1f:14:45:08:97:
         9e:41:af:60:34:78:e6:7f:50:c3:cb:c7:03:bc:dd:4c:48:9c:
         78:3d:9a:fc:8b:28:be:e3:44:7f:41:b2:50:35:e6:5c:2f:63:
         11:80:2f:80:1a:87:eb:24:0f:b7:3e:34:5c:15:31:f7:68:63:
         75:3d:98:eb:44:70:ce:5e:23:d1:2e:b6:29:dd:3b:7d:47:0e:
         f6:2c:46:5c:69:96:89:dd:0e:15:7d:03:56:d1:d0:b9:35:57:
         1f:9b:8e:6f:7b:71:7f:d0:b2:cf:ed:6d:b7:75:32:2c:58:4a:
         71:0e:05:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:10:32 2026 by rpki-client