Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c74fc652-fd95-3005-b592-72e86e691813.roa
File:                     c74fc652-fd95-3005-b592-72e86e691813.roa (raw, json)
Hash identifier:          r37eSeuc6+QhRkcj7zTU6VhWlblxJkNgLKzjNzqdp+g=
Subject key identifier:   9E:98:CC:E8:AF:36:3C:2D:77:06:DC:FB:1F:12:78:C2:FC:1D:07:08
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DAAE0404FD3E06234DECECB00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c74fc652-fd95-3005-b592-72e86e691813.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     29097
IP address blocks:        2001:470:347::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:40:4f:d3:e0:62:34:de:ce:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=7eee8596-a305-47d2-87c7-65021aa42095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b1:c1:7d:25:f2:f7:62:d9:57:42:f2:e8:b1:
                    aa:25:42:33:ec:07:19:8f:4f:c0:da:b4:ae:e9:7a:
                    3e:1c:d6:42:e6:dc:e7:dc:59:e9:5d:1b:e6:7e:3c:
                    3f:44:e1:8f:3e:45:ff:07:7a:3b:d5:68:19:eb:ec:
                    28:2b:73:ee:5f:4c:4d:a1:b1:d0:9b:f3:34:d7:23:
                    0e:19:93:0b:0c:37:72:13:89:46:fd:3b:db:03:63:
                    58:ab:9f:e3:9f:fc:f6:19:92:3e:82:3c:89:b8:0f:
                    61:cd:b3:20:97:57:39:bb:87:85:f7:7a:0a:02:97:
                    54:ef:20:f6:28:b0:fb:d7:79:7d:7e:5e:90:9d:73:
                    0f:ab:c4:35:d0:00:f5:6c:8d:36:71:18:f6:f3:25:
                    a3:4f:11:1b:6f:29:2d:79:83:54:f6:72:8f:82:c2:
                    22:d8:c4:c1:dd:0d:b2:22:2b:1d:46:ca:6d:f7:36:
                    4a:23:62:1a:32:d9:4d:d5:81:cc:17:69:2e:a1:3b:
                    d1:24:d2:ad:eb:e2:c2:a1:76:4e:16:53:77:43:1e:
                    9f:ec:2f:ee:fd:7c:3f:8b:7b:64:8c:23:a4:d8:41:
                    f2:ef:a6:5c:66:6f:8e:22:b5:9d:62:b2:0a:41:a6:
                    b4:ff:a5:88:d4:9b:07:90:09:bb:bf:ba:81:b1:24:
                    96:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:98:CC:E8:AF:36:3C:2D:77:06:DC:FB:1F:12:78:C2:FC:1D:07:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c74fc652-fd95-3005-b592-72e86e691813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:347::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d7:e7:bc:08:1e:f6:d9:85:9a:ea:ce:a2:dd:e3:01:15:b9:
         93:cb:d0:28:21:0b:6f:cb:10:f9:97:c7:bd:9d:29:4f:ba:ae:
         61:75:8a:2a:9e:97:66:33:43:d0:7b:34:98:37:88:06:e9:81:
         26:59:98:1b:38:9f:d9:67:01:f7:ce:aa:4b:d2:6d:c2:9d:dd:
         1e:5c:5d:99:5c:07:93:71:7f:5f:21:39:f9:ce:55:4a:f3:48:
         2b:92:ef:29:45:43:0c:37:42:ab:37:79:57:f6:95:0e:0b:60:
         89:3f:ff:1b:fb:b6:29:d8:28:6a:cd:9f:c3:81:b6:2b:05:70:
         a6:6c:43:ab:0b:ea:99:4c:1c:09:64:8c:0b:32:2e:a3:77:09:
         4f:be:4d:94:d6:c4:4f:f6:9d:cb:ef:33:82:71:25:e0:bb:64:
         fa:5e:71:ae:ce:3d:2e:75:f1:8c:7b:e6:21:98:c3:4f:a3:56:
         09:d2:73:6a:9b:a1:e8:c4:97:d1:e5:e4:5e:6b:e4:df:eb:66:
         a2:82:e2:8b:1f:0f:6b:f8:f7:e6:0e:62:d3:b5:f3:5a:fe:59:
         ef:35:c3:b8:aa:47:d6:77:a7:23:0f:ac:5f:e3:83:a0:63:7e:
         bb:1a:5e:51:7f:ee:cf:f6:83:16:e5:d6:a8:79:eb:f1:04:1e:
         95:75:62:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:18:44 2026 by rpki-client