Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/861a26ab-6131-3d0c-a178-989633be4886.roa
File:                     861a26ab-6131-3d0c-a178-989633be4886.roa (raw, json)
Hash identifier:          ouCfVMklR9ERPnQy7myUmR7iNnxqDunsmI4Z5yWCh5Y=
Subject key identifier:   4C:4B:44:C9:DE:2A:F3:07:21:4F:6B:DF:97:DB:69:9A:7A:91:A3:6C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DAAE04BB7001330FAB6625EE0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/861a26ab-6131-3d0c-a178-989633be4886.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     43180
IP address blocks:        2001:470:341::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:4b:b7:00:13:30:fa:b6:62:5e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=233bb7f6-a0fe-44ff-9927-a1daf5cd75b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:89:ec:eb:5b:3b:b6:e0:74:0a:e8:d0:95:80:
                    7d:b2:2c:ba:ba:05:85:f5:b3:fe:ce:2d:f4:f4:71:
                    0a:70:26:5d:c3:f4:32:0e:f6:df:24:44:80:d0:91:
                    03:da:8c:02:ac:6f:58:34:20:09:31:09:c1:b5:16:
                    71:67:b8:00:21:97:fc:9b:14:b5:e4:6a:ed:d8:a4:
                    fd:d8:5e:02:6a:20:68:4d:46:e8:e5:7d:af:87:53:
                    0a:b2:cf:80:7e:d3:61:69:54:85:2a:ea:82:71:c2:
                    6a:ad:75:a7:fd:e1:d8:63:ec:e3:a6:3d:a4:c8:5f:
                    32:df:b1:23:c2:9c:25:9a:b3:e0:94:fa:4f:68:a3:
                    9b:07:01:b8:38:33:7f:ce:df:ed:f2:c4:59:bd:e7:
                    11:f1:19:22:aa:30:b8:d8:93:0f:ab:97:a0:f9:51:
                    b4:99:f2:0f:77:74:41:6f:71:c0:f3:7f:77:23:01:
                    dc:b7:5a:68:c0:0b:39:aa:db:d2:ad:5f:0f:1d:35:
                    92:c5:52:f9:af:af:06:6d:67:d6:ca:5b:95:dd:ab:
                    45:08:cb:20:65:dd:40:a7:73:17:eb:fa:a1:53:db:
                    f7:55:cc:ee:42:d1:79:c0:be:44:83:50:09:de:0d:
                    92:c4:92:9a:73:4f:c1:14:a2:19:6d:19:cc:3a:9e:
                    6e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4B:44:C9:DE:2A:F3:07:21:4F:6B:DF:97:DB:69:9A:7A:91:A3:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/861a26ab-6131-3d0c-a178-989633be4886.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:341::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:e3:cb:d3:31:c3:6c:d0:cf:28:86:56:d9:7a:7d:14:2d:a4:
         2b:d8:bc:e5:e0:77:2d:ac:db:91:6c:5f:86:4c:9c:5b:a4:54:
         28:d3:92:20:70:be:2d:39:ce:f5:99:0a:cf:b1:8d:df:42:98:
         32:9f:6d:82:44:bf:91:23:e6:a7:bd:de:85:8f:c0:5f:44:d5:
         53:25:0b:8f:c9:b1:92:1c:50:85:27:33:dd:ab:68:17:29:f8:
         e3:f4:14:81:66:e0:ef:09:07:0b:03:95:11:e5:61:a6:c5:42:
         bc:b2:01:2a:0e:40:d5:02:5f:f3:fe:72:17:ea:f9:8b:c9:ff:
         01:1a:cb:6c:2a:5f:06:2b:db:4f:c6:15:2a:9b:d2:89:b8:f6:
         f1:1a:f8:a0:c5:7d:48:d0:1c:de:1d:d1:dd:ab:6a:53:3b:c9:
         91:9f:95:cd:25:97:4b:be:35:33:fc:37:e9:01:f0:00:2f:02:
         95:f8:7e:7d:ab:ba:d8:93:17:78:0a:93:c9:84:bb:b3:16:26:
         c3:11:f4:56:da:4a:3b:2d:2c:ec:b4:1b:c5:db:97:18:03:df:
         a7:dc:58:8e:27:3c:11:55:68:33:43:f0:1a:94:e9:de:28:b0:
         c6:ce:6b:b5:26:a9:2c:39:15:15:21:3a:1c:95:1b:4c:34:5d:
         dd:50:7f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:28:22 2026 by rpki-client