Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a7b149b-a41a-3d59-9501-641b7f9cc5c2.roa
File:                     5a7b149b-a41a-3d59-9501-641b7f9cc5c2.roa (raw, json)
Hash identifier:          MlfqhbW+q1lmP3xWgxSgBSI/LuyN8rHZSZRo0KyFEWw=
Subject key identifier:   BA:8A:37:3F:68:CC:FA:B5:A0:FD:B5:AD:08:DF:EF:EE:84:1D:DD:CB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F50E326677E94D843CB80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a7b149b-a41a-3d59-9501-641b7f9cc5c2.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     206186
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:50:e3:26:67:7e:94:d8:43:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=f8fdd6d1-e4ae-423e-a8c0-80682412d93d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:55:ed:3e:82:f6:82:c0:6a:db:e5:91:e5:03:
                    e0:a2:7e:6a:17:24:11:07:e5:2e:7d:c0:1c:40:d7:
                    62:03:ba:06:f8:9e:de:87:ab:6e:95:57:84:c1:a6:
                    80:0d:a1:2a:bb:18:22:c3:43:6e:02:a3:02:d7:8b:
                    91:1a:dd:49:ef:86:3b:8e:9d:44:a9:50:64:c6:90:
                    cf:bf:f6:56:18:c2:3e:2c:47:78:4f:21:46:05:0a:
                    1c:33:b9:5a:6b:8f:71:62:6c:d0:be:cc:7d:05:cf:
                    71:e1:bb:e1:93:06:0d:24:cd:dd:2e:a2:9d:44:c3:
                    6d:53:4f:22:70:e5:a0:18:9f:f6:94:0a:c2:e5:91:
                    f8:19:67:f1:34:73:bf:5f:85:97:86:24:83:01:09:
                    3d:f0:dc:6e:65:6a:fd:40:b0:cd:9d:2c:17:6a:c1:
                    db:09:47:4c:70:96:19:ba:30:b1:2f:15:c7:5d:61:
                    32:4b:8e:ce:6f:da:f9:55:ae:bc:2b:b0:5b:82:c3:
                    94:1f:cb:7a:bc:d3:e3:ca:71:6b:4b:dc:8b:2f:a9:
                    9b:da:1d:c9:46:64:bc:fe:43:db:1f:81:7b:95:96:
                    bd:4b:86:b9:00:fe:e9:fd:06:e5:c2:ab:c2:d8:2e:
                    8c:b2:84:e4:0d:d3:76:1f:bb:3d:ef:27:07:64:17:
                    7e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8A:37:3F:68:CC:FA:B5:A0:FD:B5:AD:08:DF:EF:EE:84:1D:DD:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a7b149b-a41a-3d59-9501-641b7f9cc5c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:2d:c6:61:dc:04:d5:36:56:f0:01:86:77:10:db:d8:c9:fa:
         5c:61:ea:cb:1a:5b:f9:d4:c1:0f:4a:ce:d3:ac:54:42:2a:1e:
         09:76:55:73:62:08:8f:59:a5:e9:ae:42:5f:ae:2e:ad:e4:80:
         eb:ef:f2:df:ea:f6:9d:17:16:d4:df:37:f6:79:7d:2e:29:27:
         ce:cf:64:2c:13:cc:58:4b:82:3f:b9:04:be:75:86:94:68:f1:
         14:e2:f9:b6:de:11:a5:11:e2:d9:c3:4b:51:c4:5a:e0:1e:ba:
         a7:33:b1:2c:f5:25:5b:3c:0b:70:0f:d7:aa:24:85:7d:dc:8b:
         6f:63:bc:b8:c3:24:21:66:af:da:4b:ab:81:75:55:6e:13:34:
         96:36:ae:ba:b9:a0:61:64:60:04:81:5d:c0:31:de:11:c7:33:
         62:98:ae:37:a5:66:46:36:86:2d:20:db:44:d5:f6:6d:12:9a:
         4f:ec:8e:54:d1:2b:bd:ea:d2:59:43:81:d6:fd:43:b5:02:0c:
         ca:8c:00:27:a5:bb:b9:cf:b7:cb:ff:2d:fa:05:90:f6:e4:cf:
         f4:c5:e8:9d:8a:08:04:9b:55:1e:8c:20:81:6e:bd:08:d1:0e:
         84:fb:a5:c9:04:31:0b:c6:b2:d8:33:c7:59:03:61:6f:cb:b0:
         d4:d4:d4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:35:51 2026 by rpki-client