Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/51d55848-6771-3b6f-8e76-cc95a66e0801.roa
File:                     51d55848-6771-3b6f-8e76-cc95a66e0801.roa (raw, json)
Hash identifier:          Rh+gKGjsaLJKJ2GvSoizWHUZSlwjsI+Ry4RkEY/ghZI=
Subject key identifier:   5D:C3:FD:D2:A0:6D:A0:13:62:E0:63:5B:C1:00:CA:47:84:D2:37:57
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F61877D56650DEFB913F0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/51d55848-6771-3b6f-8e76-cc95a66e0801.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     36103
IP address blocks:        65.49.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:61:87:7d:56:65:0d:ef:b9:13:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=b49df945-3c89-43bf-a6b7-a36ad82c2c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:38:12:96:35:90:d7:30:d8:17:17:40:b4:77:
                    09:1a:01:90:86:94:9a:3a:c5:2a:5c:ea:96:2c:f4:
                    4f:9c:cb:2c:88:aa:bc:53:44:4c:8a:37:9a:6b:da:
                    73:f7:f1:eb:ea:00:ab:41:81:2f:a1:d2:e3:ed:ac:
                    ce:ad:1f:3c:11:5c:e5:a8:7d:c5:cc:b5:cb:f9:67:
                    68:37:3c:81:a6:2e:1a:e6:8a:df:84:31:72:cc:5f:
                    a3:82:f7:0e:af:b1:1e:7d:77:38:c1:34:bb:83:92:
                    e0:23:c6:ee:d1:cb:74:df:fd:08:19:b9:a0:0b:39:
                    d1:95:e3:91:9a:0a:7e:25:64:25:ff:bc:a4:de:47:
                    0f:1d:fe:10:58:e5:7e:d0:d1:e0:bc:45:93:a4:60:
                    85:ad:71:46:82:47:01:94:78:7a:e7:a3:3d:e3:e0:
                    6e:c1:b9:05:55:4b:a4:2c:13:58:8a:f7:9a:93:04:
                    56:cf:38:e0:19:93:38:bf:0d:aa:1d:dd:ce:31:01:
                    05:dc:2b:d2:3c:da:0b:ac:d5:1f:20:89:ab:cb:67:
                    70:12:87:d1:3d:56:55:ef:75:60:b7:7a:51:aa:ae:
                    29:d0:e4:b6:62:9d:4c:1a:18:6b:14:aa:39:c1:a6:
                    a7:c7:cb:1e:f6:68:99:d7:45:d1:62:5d:d0:db:0e:
                    65:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C3:FD:D2:A0:6D:A0:13:62:E0:63:5B:C1:00:CA:47:84:D2:37:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/51d55848-6771-3b6f-8e76-cc95a66e0801.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:4e:7c:cd:63:bf:0c:90:e3:3d:5d:26:c3:52:02:e9:d9:30:
         30:53:44:50:20:f7:81:02:ed:cf:a1:88:e3:3e:fb:63:5a:da:
         2a:9b:1f:92:f8:46:d0:20:92:fa:07:91:38:73:b9:12:47:be:
         d5:30:d6:36:3f:7c:e6:4b:2a:15:d0:72:39:c5:a0:c9:a9:66:
         b1:ff:95:42:e7:16:88:e8:ad:26:c9:2f:d2:dd:de:b1:93:2c:
         29:e9:3a:89:ce:e3:25:64:98:99:d1:56:ee:99:15:fc:7e:17:
         96:26:0b:15:86:f2:34:85:b6:41:88:90:8b:e6:c3:a2:78:92:
         a5:8d:42:a9:9b:84:fd:aa:b1:83:17:50:d7:5d:4a:0b:b4:1c:
         0e:be:28:65:db:95:31:02:82:40:68:95:79:0f:e3:ef:b3:e9:
         89:64:95:27:3f:ce:a9:76:73:fb:d9:1e:62:ef:bf:d3:b8:e7:
         13:99:18:3a:22:39:54:c7:d7:f0:56:b4:3f:b3:9a:53:ed:3b:
         7b:c2:41:8c:33:7d:ac:e2:25:d1:ed:f5:85:fd:24:31:0e:bf:
         87:c5:eb:54:43:95:91:65:c8:22:51:7e:94:af:75:70:ad:02:
         8e:c9:a9:e9:b2:72:89:17:e8:c2:3f:57:90:a6:43:a1:7b:84:
         01:aa:65:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:36:33 2026 by rpki-client