Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a092d666-fa1f-3373-b9ff-a7cc7beadac9.roa
File:                     a092d666-fa1f-3373-b9ff-a7cc7beadac9.roa (raw, json)
Hash identifier:          cuUEY8HDS/h4xua5INjK/2ffp9aIBI6EZamCzUEvYDw=
Subject key identifier:   A1:0C:EA:4C:6B:C0:51:59:DD:98:40:C2:45:1B:D3:DC:1C:3D:87:F3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D2D3F6B049DD2E7F6C7649480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a092d666-fa1f-3373-b9ff-a7cc7beadac9.roa
Signing time:             Sun 15 Mar 2026 13:00:41 +0000
ROA not before:           Sun 15 Mar 2026 13:00:41 +0000
ROA not after:            Sat 13 Jun 2026 13:00:41 +0000
asID:                     47898
IP address blocks:        2001:470:542::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2d:3f:6b:04:9d:d2:e7:f6:c7:64:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 15 13:00:41 2026 GMT
            Not After : Jun 13 13:00:41 2026 GMT
        Subject: CN=3d45f27b-211d-4ff4-8384-c514a21f4b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:51:30:3b:8d:8e:bb:1f:79:3c:ed:0c:8e:17:
                    0d:ad:df:21:02:eb:ee:49:53:67:db:aa:35:08:a9:
                    30:d6:26:a1:88:94:8a:90:ac:8c:69:b8:4e:1b:2d:
                    59:e1:80:f6:9d:b5:0b:4a:c7:ca:53:c5:2a:4a:5c:
                    19:57:3c:92:96:6c:4d:e8:27:d4:25:d4:fd:5b:61:
                    e3:4a:17:b2:18:80:7e:61:ea:46:a6:00:ea:91:e3:
                    58:67:41:4f:be:2e:17:13:1e:0e:bd:f3:92:db:7a:
                    11:48:f5:29:08:15:91:ed:5c:c0:92:06:47:9a:ea:
                    73:95:64:02:1e:c8:0a:88:6c:63:7e:d6:c0:6a:95:
                    6f:2d:fe:02:7a:e7:1e:26:5f:2e:76:16:db:da:7a:
                    6d:56:42:60:1b:79:11:cd:3d:e2:b2:ef:7f:6c:48:
                    6d:c9:bd:e0:5a:ec:34:c0:d3:65:6c:56:3f:f7:7e:
                    f6:ce:94:a6:cb:da:ac:b2:1e:2a:66:ad:14:5e:6e:
                    9b:b8:cc:71:37:d3:f2:14:67:71:d7:f6:67:44:c5:
                    dd:90:fb:0e:b7:92:62:a2:c2:ac:23:0a:af:16:5d:
                    71:68:55:66:43:13:67:cd:f6:54:1e:36:3d:83:41:
                    58:6a:c9:5c:dd:f6:5a:f2:92:9e:21:12:f0:a2:62:
                    64:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:0C:EA:4C:6B:C0:51:59:DD:98:40:C2:45:1B:D3:DC:1C:3D:87:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a092d666-fa1f-3373-b9ff-a7cc7beadac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:542::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:03:58:aa:4d:6a:78:39:c3:69:7b:54:f2:4a:f3:32:08:ec:
         19:10:93:36:fb:f6:05:bb:64:8c:65:7e:ad:be:c3:4b:a6:08:
         cd:eb:57:d7:af:d2:77:9b:fe:a7:71:1b:ae:30:dc:dc:17:c6:
         2c:f3:e5:bc:47:90:ee:56:dd:47:1c:a0:2f:d1:ca:c2:14:75:
         23:71:dc:51:f9:0d:a3:51:da:13:11:5d:e9:b4:77:60:77:55:
         f1:d1:89:bf:ff:a6:e6:9c:b7:22:16:e9:1f:36:2b:3a:10:22:
         08:cb:db:2c:90:83:98:e2:1b:5a:9e:1e:72:94:fe:e7:97:d0:
         9d:7a:2b:5d:7a:6c:4c:35:2c:f9:e6:c3:bb:1f:06:20:06:19:
         9f:2a:d5:c5:a0:ac:8e:39:21:b5:26:87:36:42:8e:5d:d7:54:
         13:70:a0:c9:fc:1d:13:dc:e5:7c:c8:d0:87:4d:27:a1:e0:08:
         43:e3:21:fb:d8:b0:17:81:7c:7b:11:c3:97:eb:58:d4:4f:24:
         67:0b:fd:16:48:7e:02:11:64:b9:19:9b:3c:dd:7c:4b:40:36:
         a7:9d:9e:ae:24:a2:bd:19:50:76:df:96:0f:a5:d2:54:53:a8:
         86:80:da:84:67:38:a2:bb:45:a7:5d:62:c9:ee:3d:11:4e:cc:
         e6:d0:f8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:06:41 2026 by rpki-client