Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3d6360ed-5b00-3fb1-b488-d37c9238bbbd.roa
File:                     3d6360ed-5b00-3fb1-b488-d37c9238bbbd.roa (raw, json)
Hash identifier:          tdgUsbiy5XE48wBnxn8yVIvEk+6gCOwLknQihn5ckUM=
Subject key identifier:   5C:B3:07:0B:9B:8E:CB:0B:1E:FF:EB:C3:93:8B:81:B6:DF:8B:C7:0C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DAF102585BECBA26A710E9140
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3d6360ed-5b00-3fb1-b488-d37c9238bbbd.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     399861
IP address blocks:        2001:470:338::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:25:85:be:cb:a2:6a:71:0e:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=660d1446-b4aa-4dfc-9050-0c405dbeeff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:da:ca:6e:38:de:74:73:97:9f:41:3c:51:58:
                    6e:a2:1a:5a:a0:6c:df:25:1d:75:e3:9d:a4:a2:b8:
                    21:c7:99:b5:7e:c5:32:ec:2c:43:cd:72:99:44:78:
                    94:06:5c:31:62:cb:62:3f:8e:cf:24:82:ac:db:56:
                    45:08:e1:4e:13:86:2d:22:bb:7f:00:be:f2:ae:12:
                    38:99:45:a9:69:ed:e0:81:ad:e2:55:f8:34:7f:55:
                    b4:07:9b:1b:70:d3:82:dc:f2:92:b3:75:69:ce:9a:
                    39:01:6d:4c:17:d2:ff:a0:a7:4f:31:4e:c3:30:96:
                    f4:28:46:4a:2b:90:bd:77:dc:67:70:c1:a5:7c:54:
                    9c:a2:e3:28:c9:e4:f8:d5:6d:35:5e:98:50:7c:02:
                    78:c4:e3:c1:b9:26:ef:54:7a:b3:dc:1f:c2:f3:fd:
                    36:df:a0:35:77:fb:01:49:85:8c:42:9b:89:08:01:
                    5b:08:68:b2:25:e3:09:ef:2e:35:50:84:4c:d9:0b:
                    92:61:ca:63:98:82:b6:56:88:7f:15:67:f4:ff:b5:
                    24:c1:3b:8f:85:a4:de:02:21:13:7f:ad:3f:36:ce:
                    90:c8:bd:cd:57:2c:d2:59:7e:e8:e1:c2:50:eb:8b:
                    e1:53:f3:9b:dd:d3:7c:41:8c:c0:a8:c8:bb:de:ff:
                    38:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B3:07:0B:9B:8E:CB:0B:1E:FF:EB:C3:93:8B:81:B6:DF:8B:C7:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3d6360ed-5b00-3fb1-b488-d37c9238bbbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:338::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:34:47:5a:1c:a3:a1:17:0a:d6:22:74:54:7d:cb:85:8f:60:
         0d:af:1e:8c:ba:8c:53:26:52:57:ef:9f:3e:6b:b3:8b:c0:c3:
         15:2e:24:88:fe:03:c4:89:ba:6d:db:3d:bd:70:fa:7a:46:97:
         0d:35:bb:7d:61:66:1b:88:c1:4c:f0:16:e0:6d:72:b2:52:2c:
         0d:f0:58:d5:98:70:f7:dd:2e:5d:25:f1:01:cc:57:df:b2:f3:
         9b:6e:dc:00:87:91:f6:55:f1:8b:68:76:4d:5b:bf:3f:11:0c:
         a5:f2:9e:f4:e1:ee:2e:21:0e:c5:ea:82:01:13:89:83:bc:28:
         ef:a2:a5:79:ab:e3:ff:b3:12:12:f4:1d:34:a9:1d:f2:b0:21:
         3b:21:1b:59:16:be:86:d0:16:c7:48:bd:93:3a:cd:fa:ca:df:
         0d:9b:ac:9b:fd:36:cb:8f:1e:2b:f9:59:56:5c:57:dc:30:77:
         ab:33:48:43:84:63:53:a0:9d:d3:bf:a4:33:90:34:63:1d:d2:
         b4:7c:88:46:43:53:db:73:41:77:05:1e:83:c7:cc:03:23:01:
         1f:18:63:7c:a8:b2:a7:f4:e0:cc:16:68:c1:1b:1f:3b:a4:42:
         96:45:7c:7f:65:96:47:75:68:04:0c:26:44:18:e3:57:d1:bf:
         f1:f9:15:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:39:53 2026 by rpki-client