Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9a5f2d8-8b7f-36de-b907-a3d969db3468.roa
File:                     b9a5f2d8-8b7f-36de-b907-a3d969db3468.roa (raw, json)
Hash identifier:          Wu8rIgjsjrYiivvaj34nEAv8kfKKE44TLR3tKLlbZoo=
Subject key identifier:   2D:EF:91:D7:69:7B:14:24:3F:63:79:F9:0F:6A:CA:03:C0:7E:F3:86
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F571A3300DDE8BB0CC240
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9a5f2d8-8b7f-36de-b907-a3d969db3468.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     3853
IP address blocks:        2001:470:2f4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:57:1a:33:00:dd:e8:bb:0c:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=648c76bb-0852-4d2d-98a5-b9384698d2ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e6:fc:2d:61:7e:5f:43:70:c9:d2:0f:a1:0d:
                    b1:81:1f:36:a0:c1:73:12:04:39:b9:6e:02:37:62:
                    0b:8d:69:bf:21:f1:6d:16:a9:c7:f9:fe:1e:3f:05:
                    f1:50:63:21:97:51:58:4e:ad:99:6a:9f:02:be:de:
                    5e:fa:bf:cb:fc:3a:ce:0f:b8:ea:6e:c6:a8:08:bb:
                    67:f0:10:d2:78:28:5e:56:4f:c4:29:2b:89:a5:cf:
                    18:8d:2d:ca:15:78:e8:14:e2:55:98:68:ce:5f:b6:
                    30:73:17:c0:a9:2c:6c:a6:48:1f:e9:ad:db:70:e0:
                    bc:9d:45:db:96:63:ba:15:ca:27:02:aa:ef:ab:cd:
                    0a:52:97:b8:c5:b2:bc:fd:9b:e8:af:de:d8:32:c4:
                    2d:45:85:a2:1c:bb:07:7a:fd:7f:cb:ef:3a:ed:6c:
                    46:1c:ed:a8:b9:9d:4a:17:2c:b3:8e:0f:8d:3b:25:
                    9c:c2:ba:18:61:6a:2e:82:2c:e8:f8:6d:3b:d3:d2:
                    f3:61:1c:d6:26:00:7f:57:51:50:ed:9b:4d:a5:6f:
                    ff:92:f1:ac:7c:1e:16:0c:23:1b:d7:f5:74:19:05:
                    44:c4:e8:08:07:28:c7:de:80:c9:90:a3:24:f9:9a:
                    2f:c5:29:b9:65:fc:11:bf:11:45:63:8e:32:c8:4c:
                    95:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EF:91:D7:69:7B:14:24:3F:63:79:F9:0F:6A:CA:03:C0:7E:F3:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9a5f2d8-8b7f-36de-b907-a3d969db3468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2f4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:47:26:a5:65:93:b6:b2:0d:07:4e:0e:8b:de:35:42:b8:d5:
         94:69:bd:e1:cc:37:78:e7:1a:21:26:ab:e9:50:22:26:9c:cd:
         18:46:8d:6a:01:4a:fd:d5:00:86:89:4c:0e:65:0b:1c:0c:d8:
         9b:86:45:28:16:47:26:53:75:55:32:76:84:a9:3b:ff:a1:59:
         3c:b7:1d:7c:9d:71:40:c5:64:02:41:0b:76:29:f9:28:a4:3d:
         b9:c5:f8:2a:a2:6e:dc:e3:47:c0:1b:fd:92:ee:5e:92:13:40:
         c4:b1:d4:0f:6b:3a:d8:78:d5:da:e4:27:2e:bd:4e:c9:30:22:
         09:e0:45:0c:02:9d:27:ae:82:d8:b9:7e:3e:20:ba:4b:b1:cb:
         08:b0:01:22:7e:8c:40:1d:61:7b:62:6d:e6:c2:32:2f:b7:5e:
         45:eb:52:7f:d1:50:70:3f:d5:61:23:c6:c3:b1:ac:ad:39:da:
         75:da:5e:d9:54:a6:6b:6e:6d:f1:e5:6b:9e:6c:56:3d:9c:f4:
         27:6d:44:aa:8e:10:b1:9f:80:c1:6e:58:d6:34:07:6d:5a:3c:
         e9:d6:bf:57:53:0a:0f:66:5f:93:21:9b:37:99:dd:32:f2:97:
         9e:92:f3:7e:83:48:6d:3c:8e:b4:ea:6f:40:0b:9e:73:cc:5f:
         65:c2:54:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:53:27 2026 by rpki-client