Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4674e6a0-7949-3a75-aeb2-2769b545bab7.roa
File:                     4674e6a0-7949-3a75-aeb2-2769b545bab7.roa (raw, json)
Hash identifier:          enK+JUSkt7bcvVlpJBN8LdhKS1oq7LpyWNFhSN9wONE=
Subject key identifier:   C2:80:8D:DE:8B:F7:B6:70:4E:03:40:74:D7:A9:10:AA:BC:84:3F:C4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D3B34D19D35E49B4DD7E6EB80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4674e6a0-7949-3a75-aeb2-2769b545bab7.roa
Signing time:             Fri 20 Mar 2026 13:00:40 +0000
ROA not before:           Fri 20 Mar 2026 13:00:40 +0000
ROA not after:            Thu 18 Jun 2026 13:00:40 +0000
asID:                     17024
IP address blocks:        2001:470:2d1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3b:34:d1:9d:35:e4:9b:4d:d7:e6:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 13:00:40 2026 GMT
            Not After : Jun 18 13:00:40 2026 GMT
        Subject: CN=15975161-0be0-4fee-9c29-3d5be6314d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5a:31:0c:3c:85:e4:3e:61:ba:b1:cc:2e:64:
                    88:8f:c5:1c:2f:9e:e4:2f:23:ac:4f:14:6c:50:83:
                    a7:a1:d8:7a:54:92:a6:7d:a7:42:84:5d:3b:a2:c5:
                    f5:51:2d:87:1d:b2:67:94:07:09:90:32:06:30:29:
                    88:e7:0b:7e:70:09:96:b1:35:0a:6b:92:85:f9:ac:
                    2b:7b:e1:a5:ca:d9:73:2e:38:79:2f:db:78:76:21:
                    2b:d1:18:28:aa:6d:59:36:33:ad:50:d7:02:f6:2f:
                    ab:4b:b9:0d:98:ac:6d:e1:50:db:c4:41:2a:3a:c0:
                    55:5c:22:45:6b:18:90:e3:6d:74:cc:cb:ab:99:64:
                    fe:4b:20:bf:1d:54:cc:1a:b9:0d:0a:ee:13:06:b2:
                    7a:8b:d0:84:40:cf:91:30:89:51:56:fb:b4:86:ea:
                    e9:10:e2:95:fe:9b:4f:f1:23:69:1b:57:07:65:90:
                    83:49:a5:59:46:74:5b:ea:9a:1c:3c:ac:62:82:aa:
                    81:05:36:23:8d:0e:cb:c2:03:fe:95:25:e7:e6:be:
                    18:76:a1:ed:21:35:2b:06:81:1e:41:90:c2:be:ea:
                    44:67:a4:6e:e6:27:17:fc:73:5c:2b:1f:13:5b:57:
                    0b:0a:a1:81:4a:e4:7d:96:88:77:9b:29:15:3a:20:
                    cf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:80:8D:DE:8B:F7:B6:70:4E:03:40:74:D7:A9:10:AA:BC:84:3F:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4674e6a0-7949-3a75-aeb2-2769b545bab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2d1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:c3:c7:b9:d9:a8:3c:17:8e:fb:31:70:ea:ad:82:85:c8:e2:
         16:25:33:09:8c:03:0e:8e:e7:f2:11:97:22:3e:de:25:89:72:
         f5:b2:2a:31:ed:7b:3f:c7:47:a2:aa:a9:c3:d8:5c:cf:8b:9f:
         47:4b:7e:ea:c7:86:13:0d:08:be:a9:6a:70:2f:33:3e:46:e4:
         12:8f:f4:74:c0:40:c9:75:e5:db:62:81:76:3b:33:66:f2:0e:
         76:4c:e1:19:fa:1f:1a:84:a0:4b:93:33:df:b3:7e:6b:33:37:
         f4:96:df:8e:e6:4a:f3:07:42:d3:09:68:16:cf:b5:86:09:db:
         10:04:b6:e2:86:08:46:63:0f:64:2e:0f:d1:b8:c0:fb:36:17:
         d7:7c:db:3a:73:7b:85:5b:21:7f:45:d1:78:f5:81:77:90:a0:
         3c:75:8c:a3:14:2d:42:fc:d4:67:6e:9c:ea:d0:fe:05:88:8c:
         e7:22:85:6d:66:67:d9:f0:53:8c:76:98:72:c7:89:ee:a7:4c:
         c1:3f:9b:67:a1:17:2c:49:dc:ae:1e:b7:20:a2:6b:dc:1e:a2:
         da:22:7e:73:bc:d7:b6:83:1e:38:35:93:7a:76:91:2f:3f:b5:
         62:ce:6f:01:2d:dc:98:2a:0b:58:fa:9f:56:a8:e0:41:7c:7f:
         75:45:63:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:29:50 2026 by rpki-client