Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/592afb25-9d2f-3d3c-99d5-be72df3d0d6e.roa
File:                     592afb25-9d2f-3d3c-99d5-be72df3d0d6e.roa (raw, json)
Hash identifier:          Rz2EYOOHJsojmAgc08Dep1P+SPnXEb99Sv5SmjP/PPA=
Subject key identifier:   C6:69:07:40:E3:46:46:AC:2F:1A:4A:F2:DE:9F:78:6A:FB:37:CA:E8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D2D3F68D04D4196BAE739B680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/592afb25-9d2f-3d3c-99d5-be72df3d0d6e.roa
Signing time:             Sun 15 Mar 2026 13:00:41 +0000
ROA not before:           Sun 15 Mar 2026 13:00:41 +0000
ROA not after:            Sat 13 Jun 2026 13:00:41 +0000
asID:                     16324
IP address blocks:        2001:470:542::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2d:3f:68:d0:4d:41:96:ba:e7:39:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 15 13:00:41 2026 GMT
            Not After : Jun 13 13:00:41 2026 GMT
        Subject: CN=866e1c8e-8c35-4649-93c5-9e04bc937693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a3:ff:1f:82:2c:b3:1e:92:b5:47:a4:55:3f:
                    76:0e:d2:1b:12:df:af:71:b5:a2:0d:9e:d3:8d:40:
                    88:81:c1:b0:14:c4:95:a2:01:48:78:1f:a5:90:85:
                    52:fb:46:0e:75:1e:53:dc:dd:c2:63:46:b2:c2:1b:
                    79:e2:65:af:73:e5:2a:10:be:87:e3:55:c4:f0:e6:
                    53:40:77:9c:e3:c1:6b:e4:c0:34:87:a9:22:1b:8d:
                    2c:57:2f:be:d1:5e:5b:36:5a:4f:00:9b:79:7b:72:
                    42:85:9f:3b:57:f7:dc:47:23:0b:5b:ff:ca:5c:80:
                    e7:87:13:d2:49:a3:aa:9b:09:82:15:7e:7e:8a:6c:
                    c3:ea:b6:f5:f9:59:2e:3b:f2:29:0a:6e:4c:d3:ac:
                    84:35:5b:88:68:ff:c9:79:a4:fc:95:e2:7f:2a:9e:
                    ad:79:cb:86:c3:1d:c8:b6:ec:94:c7:c6:d4:11:7c:
                    72:65:af:0b:17:86:98:5a:55:7b:11:05:67:4d:fd:
                    45:75:a4:4a:1e:bb:e5:ab:ff:99:00:22:ef:b5:7e:
                    05:f8:95:8b:49:b5:20:49:4f:6b:0e:9e:01:b6:42:
                    33:25:6c:b5:fe:7d:7e:d0:cd:44:dc:29:5f:2b:9b:
                    ec:18:f7:c5:67:a3:48:89:b4:57:c5:01:99:61:16:
                    d2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:69:07:40:E3:46:46:AC:2F:1A:4A:F2:DE:9F:78:6A:FB:37:CA:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/592afb25-9d2f-3d3c-99d5-be72df3d0d6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:542::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:82:40:03:a7:5a:43:29:b8:ac:b1:52:a8:32:ce:9c:45:ea:
         c9:16:a9:8b:38:60:b8:b3:5a:96:61:2c:25:05:c0:5c:d3:07:
         01:f4:2d:5a:80:c5:87:6b:49:76:55:d4:be:d4:44:67:d0:6a:
         8a:b3:8f:18:3c:a1:5a:58:40:ea:5b:d4:04:2d:00:c7:07:c6:
         ce:4d:2c:55:a9:ce:ee:ec:9c:74:3e:41:33:64:1f:2b:d8:e5:
         ad:e1:fc:ef:88:73:48:e3:f1:f9:93:6a:b9:1c:92:54:91:22:
         3f:b1:21:17:24:f4:8e:a5:38:f4:c6:b9:cf:14:bd:54:43:c6:
         86:2c:65:7d:8b:1d:9f:8c:ab:be:1f:0c:c5:36:e0:96:fb:e7:
         80:1d:f4:9f:37:31:cb:52:2e:a0:0d:51:15:78:d3:bf:e8:16:
         7b:bf:2a:54:65:22:79:68:b5:66:73:5b:2e:de:98:7e:9b:32:
         1e:2a:5e:b7:a9:ac:60:51:7f:83:84:c0:ff:cc:49:c8:e9:4d:
         87:a3:3d:3a:81:51:45:ee:fb:e3:5f:cb:06:eb:a2:8a:09:1b:
         39:d5:f1:94:a9:04:50:0c:b1:e7:d2:79:0b:37:1d:7b:8e:96:
         cb:e7:1d:ee:d6:d8:2c:c8:9a:f3:37:a1:a8:22:39:95:94:ec:
         99:68:cf:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:19:33 2026 by rpki-client