Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d4b3a6a-33de-3e67-a7a4-7e3467c7c835.roa
File:                     6d4b3a6a-33de-3e67-a7a4-7e3467c7c835.roa (raw, json)
Hash identifier:          yamlZI+6lagAOoKZCY5HvoJBvaGeOuLl1P4Jp9rarYI=
Subject key identifier:   E9:45:2C:9D:9D:B6:00:E8:96:F6:12:BC:96:4A:03:B4:25:67:65:C4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F5011E9934DFF5B3C2E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d4b3a6a-33de-3e67-a7a4-7e3467c7c835.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     6204
IP address blocks:        2001:470:1d8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:50:11:e9:93:4d:ff:5b:3c:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=cc7ce1a3-1606-4db7-9ec6-40bf10b3e4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6f:71:10:ac:7a:9a:58:f5:d9:3d:6f:d1:ac:
                    f5:c9:f6:02:84:1a:a8:7f:a4:a1:93:12:39:36:97:
                    4c:63:72:a0:38:da:bd:0d:a2:90:54:0c:30:3f:0e:
                    52:fb:bd:15:76:38:9e:12:3e:e4:fc:50:21:d3:c8:
                    80:7e:0e:5b:c3:db:70:6f:8b:48:77:cf:8b:24:50:
                    7a:49:87:2c:97:d1:78:3a:5c:32:5c:ca:9b:77:0d:
                    d7:6d:d2:56:0c:02:11:2e:52:35:94:a6:0b:d0:ff:
                    65:a1:19:a1:3e:d0:e5:2e:fa:92:8f:2f:d9:18:88:
                    4f:34:19:39:e7:08:9f:11:ac:42:d0:bf:e4:67:ed:
                    02:1f:ce:82:fe:c1:5c:dc:70:58:c8:58:2e:18:e8:
                    b5:cd:05:75:1c:82:92:4c:20:f5:16:fe:b2:cf:fe:
                    fd:4f:9d:a4:7a:d9:f4:f1:ab:82:d8:09:87:af:65:
                    c7:4f:e2:ee:9d:42:d4:e8:20:f7:e1:03:18:6e:bb:
                    f5:b8:75:dd:a6:7d:55:e8:1f:2a:98:d4:1d:35:7a:
                    ed:84:8e:76:df:65:ae:23:7d:a2:1a:76:cd:41:90:
                    05:95:55:b2:9b:96:32:1f:bb:ab:c8:4e:3d:a9:00:
                    36:d7:28:e4:59:74:34:cf:48:1f:fb:d8:95:cb:88:
                    9e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:45:2C:9D:9D:B6:00:E8:96:F6:12:BC:96:4A:03:B4:25:67:65:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d4b3a6a-33de-3e67-a7a4-7e3467c7c835.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1d8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f6:dd:1e:47:e0:74:b3:34:c2:d8:91:3c:9c:a6:f8:e8:69:
         21:c7:e1:d2:3b:c6:f8:2d:da:cb:6c:ad:d3:84:ca:9b:50:3a:
         3c:52:9f:fb:8b:d1:4b:d1:61:09:1d:36:2d:25:ef:e1:53:9a:
         a8:f5:81:9b:4e:39:fc:a2:28:de:39:a6:29:c3:4b:a9:42:05:
         72:94:12:46:23:fe:4e:27:93:48:3b:9c:95:b8:9c:98:d9:78:
         df:73:0a:28:05:83:32:f4:21:a8:c2:1f:9b:3c:4c:7c:0a:7a:
         a0:73:fe:38:e4:4d:23:42:84:2d:63:3c:b7:01:70:ba:f1:80:
         ec:7e:d9:21:4a:0f:ee:48:f0:39:ae:f0:e4:1d:44:ac:ec:d5:
         fb:dc:c7:9d:38:3b:a0:d9:31:23:10:ae:f6:ee:f6:01:e5:3c:
         c9:ba:ed:74:dc:df:91:3e:05:0b:d4:3b:2b:28:b5:ee:5c:fb:
         4b:c7:88:ed:e8:b0:07:32:00:ca:cf:9c:73:ca:cf:a1:b9:92:
         12:6d:fb:c5:8c:8e:ec:46:5b:e8:c2:4e:e9:c8:0e:66:44:fa:
         81:ad:c8:64:c2:37:17:65:8b:88:b0:bb:70:60:19:79:eb:7a:
         c3:95:76:60:52:c1:6c:0a:2e:71:1a:eb:6b:bb:c8:38:0a:12:
         bd:40:84:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:30:48 2026 by rpki-client