Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0f7be68-68d3-3bd1-a2ac-87b9694ec49d.roa
File:                     a0f7be68-68d3-3bd1-a2ac-87b9694ec49d.roa (raw, json)
Hash identifier:          48p1+/LmFm79+/gsp7zf1Wp9A3OD5FOv/9CRFInJqKg=
Subject key identifier:   B6:22:8F:98:8B:AC:D7:2B:4C:BE:DA:93:A0:EA:3B:DB:03:FF:67:11
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F6CA6A2C13B05E013AE80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0f7be68-68d3-3bd1-a2ac-87b9694ec49d.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     3255
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:6c:a6:a2:c1:3b:05:e0:13:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=836e6b40-c686-44b0-bca2-79ea181648a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e1:d7:81:f2:ec:ce:77:9a:01:53:a9:74:33:
                    f8:b2:74:ff:bd:93:b9:59:26:d7:ac:cd:9f:5f:7e:
                    0f:2b:3f:48:4c:c9:8f:bf:20:9b:53:17:f4:05:73:
                    79:0c:c9:f0:0d:ce:36:c9:a5:14:3c:6b:c9:c6:ce:
                    ff:54:5f:0f:21:06:36:53:c0:48:3a:c8:53:38:38:
                    99:94:9d:96:d3:7f:5d:cc:60:d9:d0:8a:d7:60:3a:
                    cd:2f:49:ed:0d:9d:f7:c3:e7:5c:33:31:d6:24:b4:
                    ac:13:e2:40:30:44:3f:ce:0b:32:ba:da:5b:7a:c2:
                    ee:30:d8:ee:1b:a5:71:a7:8e:a3:9d:b6:0e:58:c3:
                    08:86:49:9c:b3:a7:a2:11:d4:42:44:37:4f:99:48:
                    3c:cc:65:fa:d5:62:8e:51:10:04:be:c0:c6:af:55:
                    c0:45:e5:5f:fc:d9:93:3d:49:3c:d8:fe:70:17:93:
                    e9:8f:32:8c:de:d5:96:43:ad:a5:e7:e4:b9:98:9c:
                    87:80:8d:07:31:eb:cc:cc:e5:0e:4f:18:e9:f2:11:
                    d8:28:9f:dc:1e:32:2d:2d:56:cb:c4:7d:aa:bc:87:
                    31:05:74:ae:ad:e1:f2:d4:9b:a0:a5:b4:99:9a:92:
                    ef:d9:07:e4:b0:c2:a0:7d:48:3e:18:f8:cf:34:ea:
                    96:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:22:8F:98:8B:AC:D7:2B:4C:BE:DA:93:A0:EA:3B:DB:03:FF:67:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0f7be68-68d3-3bd1-a2ac-87b9694ec49d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:86:7e:e2:69:6c:4d:8a:01:1b:70:53:92:b5:7b:cc:c6:29:
         39:74:bf:54:31:af:d5:ee:b8:47:91:66:99:e0:17:e9:c3:29:
         a3:13:9d:a0:30:29:60:90:04:56:ad:8f:8a:b8:96:2f:d7:a0:
         20:37:9e:ac:39:73:5b:1a:0c:4d:63:b8:82:d0:a7:df:b3:38:
         02:af:0a:f6:87:c5:7b:0a:f6:4d:a3:e5:77:c5:83:4a:9a:f3:
         40:a5:8f:1e:59:9c:36:36:f3:0d:9c:e1:ac:f8:1b:ef:a2:28:
         9c:7f:42:c5:38:2d:a6:bc:77:ec:fd:38:18:09:2f:4e:87:5d:
         ac:21:88:7d:e9:08:08:e7:27:13:aa:55:e4:89:63:1f:3d:a7:
         4c:74:d4:74:3f:44:69:ff:6d:5a:0f:7e:20:2e:4b:dc:f2:e1:
         23:05:98:4e:40:7b:1e:42:76:0e:ec:11:57:ff:93:85:db:9a:
         cc:4a:e7:a1:77:a5:74:8f:6e:8e:76:0b:cd:d3:92:dd:12:05:
         b2:3c:f9:98:46:0a:10:84:5d:e5:7c:5a:f4:42:5d:e2:76:7f:
         bb:b2:58:ad:20:e0:52:d1:7d:01:0a:2f:3b:fa:9e:ed:ca:e9:
         68:f1:40:cc:59:c4:6e:18:9f:28:dc:f6:90:28:d8:a9:64:e8:
         a1:3c:37:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:08:26 2026 by rpki-client