Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c1e4913-e4a0-30ed-bf7d-721d15d5ded0.roa
File:                     5c1e4913-e4a0-30ed-bf7d-721d15d5ded0.roa (raw, json)
Hash identifier:          MmiX6UOU+3k2ukeL9lT4Y07cx6gP4t63/oe+4Wgex3I=
Subject key identifier:   94:38:DD:AB:AB:08:DB:C1:B5:E8:3B:11:FB:14:D2:AA:DB:7A:AB:80
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D1F4A38489B93BA2893A33A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c1e4913-e4a0-30ed-bf7d-721d15d5ded0.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     135423
IP address blocks:        2001:470:48d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:38:48:9b:93:ba:28:93:a3:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=66025b74-da85-47e0-9b98-45fe2562cd9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:61:48:28:ae:11:a3:5e:ce:24:a8:03:4f:26:
                    43:d8:bb:c8:68:f0:45:39:f7:0f:ec:a9:93:1c:62:
                    a3:2c:a6:2a:8d:a2:49:39:83:eb:e2:f1:48:e8:6a:
                    ca:a6:6a:2b:dc:3c:c8:3c:1e:0d:14:ed:04:fc:2c:
                    9c:f2:8f:92:6c:9e:18:c9:13:27:1d:5a:02:e6:e6:
                    98:32:d6:13:ea:cd:ae:69:05:9c:12:7a:8c:af:50:
                    10:4b:5a:81:1b:b4:9e:c1:5f:e9:63:0b:d5:c1:cb:
                    74:9f:19:c3:e6:fb:9d:3e:2e:99:f5:95:39:00:54:
                    a1:21:5c:8f:de:ab:c8:0d:16:69:3e:f0:2b:75:bf:
                    ba:bf:a7:ce:5a:61:b0:b3:38:84:0f:9f:65:c1:9a:
                    86:e3:a7:01:b4:ab:ff:c8:3f:6b:92:f1:62:47:9d:
                    e7:72:a2:1f:65:9b:25:e9:cb:f0:54:be:03:22:60:
                    46:b0:66:7d:59:45:f7:9e:47:1b:bc:8c:fe:80:50:
                    e5:9c:54:3a:a6:4d:df:a7:5e:81:a0:43:ca:63:aa:
                    c5:23:30:d4:04:58:f8:ef:e1:4c:67:86:97:f3:10:
                    5f:b6:0e:c3:8b:66:e1:40:33:03:84:70:9b:1d:2d:
                    46:4a:89:ba:37:77:7c:6f:db:a1:c8:a1:40:00:78:
                    0c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:38:DD:AB:AB:08:DB:C1:B5:E8:3B:11:FB:14:D2:AA:DB:7A:AB:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c1e4913-e4a0-30ed-bf7d-721d15d5ded0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:48d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:89:37:35:48:46:c0:47:f6:70:c4:ff:20:35:cd:72:15:cd:
         7f:b4:78:0c:49:57:b0:17:43:ec:07:8a:86:da:75:13:06:84:
         aa:da:51:da:53:19:d0:65:58:db:b6:fa:82:46:7d:93:5c:e9:
         34:66:24:4e:14:9d:9a:be:65:3a:60:87:dd:67:70:78:68:a2:
         71:04:7c:aa:92:25:d0:6f:e6:83:a0:7d:e1:35:98:7a:c0:a9:
         c8:aa:3b:a0:c5:bc:b9:88:dd:40:f2:43:bf:82:91:83:c5:be:
         3b:6a:5e:76:18:00:d7:16:4b:f3:63:23:38:ed:ea:67:cf:db:
         04:34:61:33:26:e8:0b:da:81:9a:f2:43:cb:ad:21:5a:fe:9a:
         a8:74:13:49:11:e0:77:5c:13:be:6a:9e:e3:d4:20:f8:8b:a9:
         91:fd:1a:48:26:f3:e9:88:73:67:b8:f3:1b:65:18:f7:c2:61:
         e2:0f:75:f8:92:2a:7a:7b:df:3c:32:e5:9e:6b:0f:ad:25:11:
         2c:45:b7:89:28:fb:82:5d:76:c3:39:d2:5b:d6:de:35:ea:50:
         21:f4:a5:d7:70:1f:b5:9e:24:46:09:40:8b:71:38:1f:11:c4:
         51:11:e0:d6:b8:74:5c:d0:92:19:cc:ca:ac:5c:68:f8:ab:4d:
         cd:4d:d6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:06:30 2026 by rpki-client