Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/55b0890f-37eb-3324-8663-bc96d8354fbe.roa
File:                     55b0890f-37eb-3324-8663-bc96d8354fbe.roa (raw, json)
Hash identifier:          VI5scuQSDuU0INFYKSMPm8elhvBUZ/5vp+9Y7HRUitQ=
Subject key identifier:   DC:81:10:B7:9B:43:5D:D0:B6:0C:CB:42:E1:FB:40:B7:53:32:22:F2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E5E79F8B71C2A493944ADD0A8
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/55b0890f-37eb-3324-8663-bc96d8354fbe.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     215266
IP address blocks:        2001:470:552::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:79:f8:b7:1c:2a:49:39:44:ad:d0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=7984f227-dcbe-4d68-9310-367361199adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:54:17:34:34:12:18:f2:88:9c:37:eb:35:90:
                    1d:1c:4f:52:fe:43:f1:08:91:fb:84:47:c8:56:a0:
                    1c:d0:fc:96:74:ee:64:fd:d6:15:55:b1:a9:8e:61:
                    25:19:3d:8d:fb:56:70:55:1d:9d:24:ff:85:04:1f:
                    63:02:4f:fe:86:e8:9a:fe:dc:a6:4f:7d:b7:6a:24:
                    eb:4b:fb:d7:c5:66:af:b3:8f:92:19:00:05:dc:44:
                    6b:4d:e0:e1:71:21:bb:a2:b9:10:94:1d:87:41:34:
                    12:e6:ac:22:56:0c:9b:5b:79:21:1f:bc:0a:4e:f9:
                    81:f5:33:3c:e4:31:46:35:75:55:f2:8a:23:d2:c1:
                    46:50:a5:a1:d9:cb:55:66:87:3c:03:ae:d0:5b:f1:
                    53:81:14:27:f5:4e:25:32:a2:62:05:f0:c4:c8:8d:
                    c3:90:d8:d4:b2:01:5e:59:a1:0c:24:8f:97:b2:53:
                    07:2b:b8:f8:41:37:25:19:09:48:b1:4a:4d:21:ca:
                    92:22:ee:ff:5b:ac:25:88:43:95:dd:10:3e:9b:d0:
                    31:da:09:05:2e:9d:8e:9b:49:fe:e2:3e:28:a3:ef:
                    a2:5d:c9:fa:f0:d3:eb:c1:74:f5:99:b8:a1:e7:c9:
                    98:ea:31:1c:31:c7:11:af:57:5a:2f:58:ae:df:3d:
                    6e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:81:10:B7:9B:43:5D:D0:B6:0C:CB:42:E1:FB:40:B7:53:32:22:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/55b0890f-37eb-3324-8663-bc96d8354fbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:552::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:b3:1f:86:95:84:48:d8:49:f7:ed:39:c6:2d:c6:e3:f2:c7:
         18:a0:38:be:ca:79:36:db:3b:6c:68:b3:fb:48:e0:46:5e:5b:
         3c:e0:b3:3b:ac:39:02:99:a1:51:e0:70:26:e7:bd:95:10:3a:
         04:37:6e:23:10:d8:9c:5f:9f:d0:2f:cd:dc:1c:19:02:91:2f:
         b2:b7:a4:6c:4c:15:89:66:99:2c:df:59:cb:3d:91:6c:35:1c:
         9a:ec:e4:b2:6e:8d:fa:5d:66:52:af:9b:6d:e9:1a:95:85:0f:
         0a:a0:67:ab:13:6b:e2:36:81:1e:6e:d0:02:7d:14:34:26:61:
         e9:4d:3d:aa:a7:a0:d3:e5:f0:ff:ac:db:aa:9b:6c:47:44:17:
         50:f3:f8:5e:96:3f:7a:cf:03:0c:45:f6:43:3b:62:f1:cb:f1:
         03:24:aa:9f:5d:62:3c:a6:32:4e:64:6a:a5:18:91:7f:52:c1:
         e3:54:73:ee:cd:13:e6:32:54:73:88:b7:5e:83:ba:49:3c:e8:
         45:1a:db:48:7a:d0:34:b0:fd:5c:0f:e7:ba:fe:e0:42:c4:da:
         ed:b7:24:4e:14:00:28:c4:2f:bf:5a:cd:80:7c:2d:11:e3:7b:
         03:13:33:85:c6:8d:2e:93:72:03:88:5e:40:d5:dc:bb:42:14:
         e8:ff:d2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:45:28 2026 by rpki-client