Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b1c1a066-dbc1-306b-9b6d-5b513b874b9f.roa
File:                     b1c1a066-dbc1-306b-9b6d-5b513b874b9f.roa (raw, json)
Hash identifier:          qMvUl7k5T27rIfrcESRkffd0W0MMRkYriRCAma3duqs=
Subject key identifier:   25:45:49:47:4A:18:36:B0:C7:CD:8A:09:5C:B7:49:E4:D0:C4:3E:91
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D0D42420BD6877420D3179EA0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b1c1a066-dbc1-306b-9b6d-5b513b874b9f.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     46364
IP address blocks:        2001:470:2c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:42:0b:d6:87:74:20:d3:17:9e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=1ecc598e-1649-4663-b03c-814e6c3aa866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:2c:68:f2:e5:f0:2d:3f:2c:2c:c6:e1:e2:5a:
                    76:88:f4:f8:b7:e1:4b:4c:14:f9:47:24:18:7f:43:
                    63:eb:ee:55:be:44:93:53:81:3b:8c:e5:de:01:2b:
                    5e:a8:47:22:1c:e0:64:e0:08:5b:61:62:77:9c:ff:
                    33:50:7d:d5:16:3d:e2:5a:d8:fa:a9:5f:57:0e:c5:
                    d3:a2:ef:42:6d:72:1f:c3:07:42:a9:9d:6e:3c:94:
                    7d:6f:7e:44:8f:0a:18:85:84:4c:b9:7e:35:5c:23:
                    6c:53:13:f6:a2:bd:68:f7:98:97:ce:fb:79:83:72:
                    ff:1c:d1:5b:23:9f:15:4c:85:2f:f7:7d:57:74:9b:
                    c9:87:78:33:09:fe:3d:14:55:c1:2f:49:d8:51:a7:
                    41:1c:7a:db:e5:9a:71:92:dc:d3:2b:02:ad:87:b5:
                    9a:30:51:b1:e4:e6:de:cd:ad:cb:93:be:6e:15:27:
                    42:01:54:df:64:04:e4:18:52:75:79:26:23:e3:10:
                    22:5b:7c:49:cd:15:10:31:e4:3c:dc:2f:9c:8f:36:
                    da:20:96:d8:c7:6d:f8:ad:e5:03:14:49:f2:d3:38:
                    7b:01:4e:68:e2:00:51:af:fd:2e:4c:0e:c9:53:71:
                    1b:f0:be:a3:64:08:62:ec:1a:68:cd:89:62:b9:27:
                    b0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:45:49:47:4A:18:36:B0:C7:CD:8A:09:5C:B7:49:E4:D0:C4:3E:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b1c1a066-dbc1-306b-9b6d-5b513b874b9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:1f:d2:aa:69:3d:b3:4c:24:15:ec:d7:f8:ee:c7:5e:4d:88:
         0e:0a:20:ce:7f:94:e8:b5:dd:23:9d:14:ea:7f:52:71:54:79:
         c2:6f:53:00:6d:22:83:4e:56:8a:ef:a0:81:f9:40:28:a9:e1:
         84:97:17:a3:a9:53:af:92:a4:b9:a3:dd:09:f7:d0:f6:a1:aa:
         2c:f3:b5:18:59:17:38:ae:dc:37:85:a1:71:e4:2a:3f:18:d3:
         6b:1d:ee:f6:9e:76:a8:a1:9c:54:6d:41:8d:d4:f7:cb:dc:80:
         1c:a0:1c:81:45:ba:69:fd:aa:97:af:d0:01:7e:e8:61:43:a7:
         62:0c:99:f1:b3:aa:00:42:dd:0b:7a:ed:41:81:95:40:f1:7e:
         e2:3f:07:c0:a8:2e:eb:6d:3c:f4:b3:ed:8e:db:d0:8a:c7:f6:
         0b:85:7b:23:c4:c4:b4:e6:8b:25:dd:ee:92:1c:77:18:35:3f:
         12:cd:ea:36:d4:35:f0:9b:55:f0:b9:aa:92:7f:a0:28:53:74:
         2b:56:90:cf:16:96:20:f6:ae:53:bd:08:a4:b3:09:21:4b:cc:
         48:70:52:31:fd:ea:af:4e:bf:6d:90:bf:2a:4c:3d:30:41:e7:
         01:62:10:de:12:3c:2d:6d:cc:f9:96:30:2f:34:47:95:7d:32:
         4f:a6:56:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:31:13 2026 by rpki-client