Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa
File:                     b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa (raw, json)
Hash identifier:          lcV3cptkg+EalN82MuPaLdww19x0DziRoVR/whdbGXw=
Subject key identifier:   7A:6D:D4:C5:BF:42:9E:11:55:AC:40:04:30:A9:5B:B0:75:0E:E9:1E
Certificate issuer:       /CN=23f061ce-1a61-493b-8f3b-472334453f0d
Certificate serial:       010D0C9F4328584E0005DE7C02025B7DBA6058B0
Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     4185
IP address blocks:        2620:10f:b000::/48 maxlen: 48
                          2620:10f:b070::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:de:7c:02:02:5b:7d:ba:60:58:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=32ae9cd5-cf43-4e02-87fb-4beab376ba40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:92:b5:bf:c4:94:29:ac:9c:eb:be:52:c4:62:
                    6b:93:c1:2f:55:62:7e:d2:d3:47:f3:b9:d4:56:11:
                    98:40:45:19:9c:2b:38:0c:78:1f:3a:fc:f9:c6:17:
                    e3:47:d4:28:d7:c0:23:7b:e5:ed:82:88:dc:7d:57:
                    50:aa:da:bc:0b:7f:ac:2f:bb:9f:61:35:84:69:08:
                    25:51:6b:ef:61:47:c2:c8:de:10:e5:8c:4b:50:01:
                    71:bf:0b:df:4c:5b:b4:47:06:2d:d7:09:f2:56:37:
                    fc:95:72:bc:6f:3e:d6:9a:10:f7:c0:d1:ca:cb:3d:
                    e0:97:b4:fa:21:f5:8f:56:b4:47:59:f0:9f:43:a2:
                    6b:a3:75:9f:95:0b:c1:73:83:ce:51:52:55:7e:c3:
                    07:3d:6d:bb:ba:8f:10:20:94:df:86:6a:d3:3c:9b:
                    95:1c:aa:5b:22:8c:83:07:d8:ce:3b:45:77:56:a0:
                    e9:e0:f7:4c:46:8f:f2:57:7d:72:ff:1e:de:19:88:
                    fd:37:2c:61:ff:78:c0:7a:70:87:fe:44:d3:7b:81:
                    b0:61:2c:97:8b:9b:56:c7:87:00:34:cc:ef:02:58:
                    41:40:7e:b6:53:7b:5a:2c:58:5f:7e:10:74:74:90:
                    ae:cc:fe:4a:6b:8f:89:f0:27:30:63:b9:a6:39:f0:
                    08:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6D:D4:C5:BF:42:9E:11:55:AC:40:04:30:A9:5B:B0:75:0E:E9:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/b58c3e13-4ccc-3cab-bd80-fc24127d9ac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:b000::/48
                  2620:10f:b070::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:31:3e:1d:cf:f0:25:14:5d:d9:ec:1f:87:71:c1:37:69:df:
         33:66:c7:90:ae:3f:71:ae:b5:8a:3f:85:85:13:40:02:3b:c9:
         94:59:02:96:a7:fe:19:fd:94:2c:5e:df:f0:e2:2b:43:9f:87:
         61:f8:2c:29:b7:59:9a:55:89:59:91:19:dc:18:0f:9a:f4:af:
         dd:52:0f:62:9b:bd:dc:19:24:98:14:ed:76:90:96:b1:05:48:
         48:67:36:fe:47:a0:e3:3b:70:b8:76:0d:3d:03:04:1c:2f:48:
         b6:60:0f:f0:47:a0:41:56:80:b0:af:b1:fe:df:77:31:48:78:
         ea:37:20:2e:14:1f:93:67:d9:b7:db:8a:0f:c0:64:dd:e1:4c:
         de:83:6d:ce:17:36:be:b7:b8:87:91:af:15:9b:36:c9:b8:63:
         6b:31:83:76:b2:5d:7d:b8:fe:41:ae:08:53:67:83:35:d5:2f:
         f4:17:a9:4b:4a:84:70:bc:1a:d7:d0:27:8b:59:4e:6b:e9:9b:
         9d:d0:ea:45:9d:53:e8:d9:b2:14:13:16:51:ab:e2:5f:7a:a4:
         54:61:6c:8e:33:93:42:ea:39:84:8d:36:bf:af:67:41:8a:9b:
         34:c1:23:cd:64:9d:1b:9d:0e:bb:28:35:c7:e5:8e:e0:5e:69:
         8d:f5:14:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:42:07 2026 by rpki-client