Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9300cc27-8ff5-35df-a23f-9ecd735e51ce.roa
File:                     9300cc27-8ff5-35df-a23f-9ecd735e51ce.roa (raw, json)
Hash identifier:          K84zBHdCZ4xROpxcEwc/g+MFxOzcWh50lVfoZpbqxVE=
Subject key identifier:   33:C0:A1:66:BB:E6:26:CB:E6:3B:7D:FD:9F:CD:AA:C1:9F:DC:AB:31
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F6F3EB1BB78C1433CC5C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9300cc27-8ff5-35df-a23f-9ecd735e51ce.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     12119
IP address blocks:        2001:470:303::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:6f:3e:b1:bb:78:c1:43:3c:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=2a3ff5c7-5a0e-4637-8df6-fd0f306e0797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:90:a6:ce:97:d1:72:54:20:3f:45:b2:e1:33:
                    8d:55:ab:bf:f5:bc:e5:e2:a9:34:b5:40:33:90:62:
                    c4:3a:b0:3d:6f:e8:7b:13:78:09:a4:8e:b1:50:fc:
                    a8:f3:a8:d8:df:78:20:98:60:eb:61:f1:08:82:c0:
                    a0:3a:8b:07:12:ba:71:b6:58:30:58:00:c9:5d:1c:
                    8c:10:bf:08:0a:4f:d9:3e:30:51:10:11:c9:46:6b:
                    da:6a:e3:4d:b6:b9:b7:27:e3:15:f2:4b:de:77:68:
                    44:9f:8a:2a:65:ea:3f:f7:ef:e0:3a:fd:be:06:ff:
                    7b:a4:6c:4f:66:f2:d2:44:65:bd:cc:30:2d:ce:fe:
                    f5:84:e5:08:ee:1f:67:35:8b:c3:5f:49:1a:db:55:
                    21:76:b5:9e:f5:8c:e8:5c:12:45:5f:d9:e9:48:ee:
                    73:d8:a6:8e:e3:28:54:f1:73:8a:8d:6c:b6:d3:40:
                    6f:75:00:75:a1:63:05:43:e3:50:9c:bf:a1:17:6e:
                    f2:b4:b2:c5:72:4a:e7:bf:16:88:9f:97:a8:1e:f0:
                    72:a2:18:c0:eb:a5:99:64:ad:ba:e8:84:8d:4e:42:
                    fc:7f:f0:05:1a:2b:fe:26:ff:ad:20:74:27:cc:3f:
                    5d:99:13:a0:9e:cb:78:82:b9:54:f3:09:b7:ea:a6:
                    6e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C0:A1:66:BB:E6:26:CB:E6:3B:7D:FD:9F:CD:AA:C1:9F:DC:AB:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9300cc27-8ff5-35df-a23f-9ecd735e51ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:303::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:a3:ec:26:2e:82:41:fc:24:f3:67:99:92:e1:ec:51:4c:fb:
         3f:31:3c:d3:86:47:81:ae:9d:e2:51:92:30:7b:e5:bd:c6:45:
         d0:dd:02:0c:6a:e4:a9:d3:ce:57:6f:e6:3a:b6:65:16:d6:03:
         16:41:7e:40:a5:d2:e2:0c:4b:82:e8:33:c1:01:31:14:1c:86:
         78:dc:77:42:97:89:b2:d8:41:74:27:54:13:9f:74:f1:50:12:
         8d:6e:e9:4a:e4:3c:32:14:65:42:ba:86:02:0c:d8:c3:ca:64:
         4f:62:18:8b:f4:95:20:bd:67:ab:f1:d9:3e:6b:e5:0e:6d:2c:
         cd:85:af:e5:87:6c:bc:6d:68:dc:fe:1f:ec:2f:0f:4a:1e:2b:
         6b:50:6f:c8:c9:48:23:1e:db:94:8d:29:b9:9c:1a:5b:62:73:
         be:36:10:75:e9:cd:af:dd:ef:29:85:89:ea:02:58:60:50:8d:
         7a:50:e8:56:52:ac:ff:21:31:45:83:65:25:61:23:67:32:14:
         da:5e:bf:cc:4d:b1:d4:97:99:58:22:f9:e9:da:7a:3a:8c:19:
         99:a3:7b:25:ed:74:c4:2c:2c:a2:6c:9b:24:a9:85:75:69:60:
         d5:2c:5f:0d:0b:1d:d2:66:71:85:1e:94:08:af:e0:12:b4:a2:
         10:dc:1d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:35:47 2026 by rpki-client