Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8afd3ef0-698d-334e-bd79-3cd5f07aefe7.roa
File:                     8afd3ef0-698d-334e-bd79-3cd5f07aefe7.roa (raw, json)
Hash identifier:          //vlxWy9ggEKKnekm2BWn6FbfeernTSmxRyIZSQbprU=
Subject key identifier:   95:39:90:E9:6F:13:27:87:AF:2D:7D:D3:75:1F:AF:DE:2C:E6:EB:19
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D8D8FF3321C3F38F0A6FB9380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8afd3ef0-698d-334e-bd79-3cd5f07aefe7.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     16578
IP address blocks:        2001:470:3e6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:f3:32:1c:3f:38:f0:a6:fb:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=65e7dff7-bff5-4922-bed1-6279c4aad28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4b:bb:aa:15:24:1a:88:8e:fb:e7:26:c5:68:
                    ea:2b:3f:17:25:83:c9:9b:a2:d7:9d:ab:d9:f3:d7:
                    53:33:c0:79:58:77:4e:d0:f5:be:73:ec:9d:06:44:
                    f2:a1:14:00:49:a9:8f:a8:7e:b2:ed:89:7e:28:59:
                    9c:80:8d:eb:82:dd:17:a1:e6:4a:5f:43:41:18:aa:
                    99:c7:27:64:21:f0:be:f3:e5:00:f9:78:ef:59:03:
                    ae:45:95:8c:e7:1f:1b:b3:ba:e9:52:34:a5:56:a3:
                    fa:03:71:68:0b:86:b1:75:8f:91:82:f1:96:7b:ff:
                    cc:c7:96:dc:c6:26:9d:63:7b:54:dc:d1:46:a3:b3:
                    fc:19:48:7c:d3:3f:09:c4:cc:32:16:72:fb:41:9e:
                    1f:59:45:fe:d2:37:36:b8:68:71:fe:85:52:0a:af:
                    7b:ab:d9:74:dc:6e:2f:09:e9:b5:df:69:9b:bd:8f:
                    2b:fc:9f:b0:7d:f0:a8:52:f2:c1:94:4e:0a:ba:35:
                    a4:44:b1:86:d5:3e:de:be:57:99:ad:5c:16:40:71:
                    a2:f2:59:fb:fa:0f:a2:5a:28:df:4b:80:6e:2a:cc:
                    6e:f0:9d:e5:80:0a:ae:bf:b7:de:87:d6:d3:82:5f:
                    bf:18:bc:ad:b2:28:66:6a:f4:a9:87:04:93:ce:af:
                    32:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:39:90:E9:6F:13:27:87:AF:2D:7D:D3:75:1F:AF:DE:2C:E6:EB:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8afd3ef0-698d-334e-bd79-3cd5f07aefe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3e6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:bc:18:27:7c:85:cc:bf:4b:73:03:36:dd:06:76:d1:eb:5a:
         bd:30:5d:1b:8d:2e:a5:25:8a:c7:46:0f:4c:42:a8:1f:c6:7f:
         94:d1:ed:37:f9:5a:51:be:02:1f:9a:27:76:23:46:24:7f:b0:
         62:ba:77:da:f0:29:7c:37:cf:09:91:ee:2b:79:6b:32:38:3c:
         89:d6:bb:42:13:32:ec:58:7a:98:d0:b5:42:4a:b6:27:d0:26:
         38:44:8d:f6:43:93:c3:a1:91:27:ce:f6:2b:88:05:eb:13:8c:
         48:b8:1d:fe:86:63:2f:1c:f8:5f:fb:f0:d7:ce:73:3e:29:89:
         50:d7:d5:72:d9:c2:e5:0f:49:72:ac:a0:a2:a3:ec:c9:9f:e1:
         de:ae:97:98:b0:d5:ab:98:9c:5f:48:98:cc:16:c1:ae:6c:0a:
         17:fd:ff:25:41:7a:7d:c5:a2:9d:ee:ba:47:b3:f4:4e:3f:c3:
         e9:b0:05:b0:25:af:bb:35:02:07:0f:12:fd:78:10:d3:12:4c:
         4b:6a:e3:51:e5:5e:51:0a:3e:46:d0:cc:8b:c2:76:1c:c7:c9:
         39:c5:e7:cd:53:fd:92:f0:eb:8d:ab:2b:59:b1:52:d9:b0:44:
         d4:8f:4c:ad:45:81:39:22:cb:6d:3b:ca:76:80:0a:44:78:86:
         28:54:28:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:29:02 2026 by rpki-client