Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b87cef54-59d2-3fbd-9311-a1f5b3511952.roa
File:                     b87cef54-59d2-3fbd-9311-a1f5b3511952.roa (raw, json)
Hash identifier:          bBYbYxAzFav3QcWOeKDXzpZa1KDQrPRks6513BZgSgE=
Subject key identifier:   72:7C:1A:11:D0:26:D9:57:61:4E:97:6A:1D:52:51:03:F3:A0:EB:2F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DC5745767076274C4A0D2AB90
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b87cef54-59d2-3fbd-9311-a1f5b3511952.roa
Signing time:             Sat 09 May 2026 01:30:14 +0000
ROA not before:           Sat 09 May 2026 01:30:14 +0000
ROA not after:            Fri 07 Aug 2026 01:30:14 +0000
asID:                     400704
IP address blocks:        2001:470:50f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:74:57:67:07:62:74:c4:a0:d2:ab:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  9 01:30:14 2026 GMT
            Not After : Aug  7 01:30:14 2026 GMT
        Subject: CN=aaa4a13c-4343-49e4-b358-61c632d95bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6f:54:c9:9c:15:73:4c:bf:3d:76:eb:c1:1c:
                    9a:56:14:c6:89:f9:cd:37:7f:48:f4:c3:b1:5d:c5:
                    cd:2d:58:b9:bd:fe:68:7e:21:5f:0e:a3:a7:93:84:
                    c8:08:df:bb:1d:a1:2b:d6:16:cb:7c:55:93:33:7f:
                    e3:66:ee:aa:84:00:d9:71:21:04:af:0f:a4:7e:a5:
                    67:1a:5b:1a:ea:9d:91:17:bc:b8:88:24:13:3f:f5:
                    03:3d:e5:42:5e:d8:3b:67:3c:dd:3a:40:03:80:61:
                    ca:04:60:79:e7:cb:10:5c:6d:a9:ea:6c:67:fa:d0:
                    1c:42:ae:4f:3c:ed:a3:85:ec:21:ff:d7:56:f6:6c:
                    17:8b:01:95:4e:16:70:ae:5a:cb:2d:74:b7:51:f0:
                    5f:1d:19:f7:d2:4a:09:13:91:b8:c8:0e:fe:52:8f:
                    d7:c6:39:2d:47:13:f7:55:fc:c9:8e:2c:67:77:f7:
                    a9:ab:20:e2:b8:b9:b2:28:b3:2a:1d:61:e5:05:42:
                    5e:33:27:52:0a:a7:51:3a:f9:a6:14:99:2f:b7:4a:
                    47:f7:09:4f:fc:f1:35:e5:49:93:fa:81:41:1d:01:
                    3c:7f:d3:86:36:a4:92:78:bd:a9:d9:61:17:85:14:
                    ff:4d:57:74:04:c0:c4:a4:f7:de:b0:8a:a0:38:54:
                    60:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7C:1A:11:D0:26:D9:57:61:4E:97:6A:1D:52:51:03:F3:A0:EB:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b87cef54-59d2-3fbd-9311-a1f5b3511952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:50f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:d1:98:a8:cb:8f:3d:63:cb:b1:9d:52:78:a3:19:a3:a1:94:
         a0:5b:4d:05:ee:d5:d3:48:31:a7:4c:0c:02:8c:e4:df:9e:95:
         ef:60:0a:ea:91:a4:46:c9:fd:e1:e3:85:2c:e7:47:0c:88:00:
         3a:da:72:54:c2:ee:84:2c:93:2d:86:da:59:48:79:02:3c:7b:
         e6:5a:5a:57:2c:04:52:bd:20:2b:29:36:51:50:24:3f:c2:13:
         ef:75:51:49:e4:14:b1:0d:fa:22:ed:95:04:21:cf:e0:ba:87:
         28:84:76:68:1d:8b:e2:99:c8:81:84:e3:51:7c:f6:f7:c4:b9:
         39:5d:03:4e:79:f6:23:d8:9e:a3:b5:e8:6a:ef:4c:62:a7:6d:
         0d:9a:0e:50:bb:49:c3:49:c0:3f:4a:13:a6:9e:a1:62:2b:19:
         2c:61:75:b4:11:74:1c:c4:61:3d:7d:be:c6:57:e1:53:90:56:
         17:b7:12:d1:7d:c9:7b:58:08:18:62:00:87:dd:3f:72:46:ba:
         54:4f:4a:b3:ef:95:3e:44:e7:1e:71:db:16:57:31:60:a9:97:
         76:8d:2c:20:03:10:ea:17:91:f4:cb:f4:7c:5e:1b:8c:ab:99:
         0d:c6:9a:d7:66:ac:60:39:79:90:2a:c2:fe:24:16:7a:0c:ea:
         8d:f8:e9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:35:19 2026 by rpki-client