Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ec85f0d7-ed25-3101-97b5-76e829423f7c.roa
File:                     ec85f0d7-ed25-3101-97b5-76e829423f7c.roa (raw, json)
Hash identifier:          8+4zaw68Fd3rkvp0IINbzD4lT37nRMv6F2gmMxX46V0=
Subject key identifier:   31:45:5D:7F:66:D2:54:F1:D7:CE:AB:A1:79:A6:DA:CF:F2:DA:14:91
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D0D4242255623AD1C665E9200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ec85f0d7-ed25-3101-97b5-76e829423f7c.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     402091
IP address blocks:        2001:470:267::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:42:25:56:23:ad:1c:66:5e:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=00e2312f-c55a-43e8-b55c-015816e9c82b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:24:c0:61:4c:18:c2:59:1d:9d:b4:08:82:01:
                    6c:98:c9:b3:15:69:e5:dc:e2:60:c8:de:46:a0:ac:
                    6d:72:3c:f4:83:ab:10:19:83:8c:dc:77:d2:58:05:
                    84:30:2f:39:35:35:19:85:7f:60:2b:56:90:13:4a:
                    c3:28:9c:1e:4d:a8:a7:48:89:61:1c:0d:af:6b:fc:
                    32:63:97:c8:03:14:1f:e9:6a:d6:9f:c4:00:aa:f5:
                    2f:46:2b:56:90:57:98:f1:2e:7b:ba:e3:99:0a:41:
                    40:25:69:dd:69:ec:a6:79:95:7a:78:26:13:07:8a:
                    8e:7f:be:27:97:68:d9:52:e4:8a:2b:96:f4:ea:83:
                    01:94:13:f3:22:39:86:1f:ac:d4:a9:ef:6f:7e:76:
                    8d:11:cd:ed:ae:4e:d9:9b:91:f8:04:b4:f9:c8:14:
                    ea:7a:cc:80:1c:70:1a:0a:24:e2:ee:05:6b:3f:0b:
                    09:90:c1:ec:57:b2:6f:f4:2e:87:cc:ef:9e:89:a5:
                    aa:f6:4c:d9:73:fa:69:d0:29:52:35:44:ab:ae:70:
                    d1:f8:46:18:ec:bf:be:0b:a3:01:2a:35:bd:08:d1:
                    fc:03:3e:1e:8f:10:81:7c:e2:1f:d0:99:60:fd:20:
                    e2:3d:b0:3b:0b:c6:df:21:d7:dc:2d:64:56:a8:86:
                    6d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:45:5D:7F:66:D2:54:F1:D7:CE:AB:A1:79:A6:DA:CF:F2:DA:14:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ec85f0d7-ed25-3101-97b5-76e829423f7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:267::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:6b:d4:9f:0e:9b:60:57:25:41:cf:db:80:5b:76:20:89:17:
         65:3a:1c:6e:72:eb:b8:37:90:a9:d3:c1:7c:02:a8:e9:89:63:
         ff:03:4b:ba:a3:5c:b2:ad:ea:7e:82:f5:5a:9d:3d:00:fd:3a:
         6c:06:59:72:e6:9c:bb:9c:74:26:f1:82:82:88:95:fd:5e:32:
         47:94:d8:bc:a0:f6:95:05:17:b1:b3:16:02:06:41:08:8c:60:
         50:7f:69:ce:5b:82:26:a9:93:fe:da:c0:96:a9:0f:2d:ca:45:
         ae:64:e8:18:f3:5d:56:32:e9:6f:f7:f4:4d:8f:34:ca:a3:a6:
         24:6d:c6:ec:5a:a2:7b:e5:21:c5:ae:c8:36:3a:8a:54:da:4e:
         84:73:76:e6:c6:db:95:97:ef:4a:b6:0c:ed:4b:63:d9:da:ab:
         a0:8e:64:1a:3c:1a:64:d3:4c:50:df:e8:51:c6:e9:b7:36:e0:
         31:30:5a:5b:40:ba:99:40:43:bb:93:b6:6a:8e:ca:ab:cd:e0:
         1f:f4:0b:f7:8e:55:2f:f0:b3:a6:49:46:45:48:3e:a4:8e:84:
         d1:04:92:40:81:a2:96:2a:22:d3:57:c9:29:ed:dd:3c:99:6b:
         5a:6c:8a:a0:3d:8e:84:be:bd:72:17:0b:4a:2a:34:40:08:c0:
         4d:75:02:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:44:46 2026 by rpki-client