Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/065ec9fc-5ca1-3fc3-bc69-bca580184a83.roa
File:                     065ec9fc-5ca1-3fc3-bc69-bca580184a83.roa (raw, json)
Hash identifier:          T3cNqBxejJmmG47sOWUPzm03fT8wjwSW6fB44X/NWdo=
Subject key identifier:   B7:5A:8F:FC:C3:77:D6:37:D1:A6:3B:29:77:14:37:99:9E:43:59:EC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584C794C8480ED0C1292FCCDAE00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/065ec9fc-5ca1-3fc3-bc69-bca580184a83.roa
Signing time:             Sat 10 Jan 2026 02:00:31 +0000
ROA not before:           Sat 10 Jan 2026 02:00:31 +0000
ROA not after:            Fri 10 Apr 2026 01:00:31 +0000
asID:                     18779
IP address blocks:        2001:470:1f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:4c:84:80:ed:0c:12:92:fc:cd:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 10 02:00:31 2026 GMT
            Not After : Apr 10 01:00:31 2026 GMT
        Subject: CN=3f4511c6-e4c0-4ee3-9c3c-e9b6f5e16f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ee:50:53:f7:05:6b:b6:26:b1:e0:84:26:22:
                    00:63:b7:a7:3e:a4:64:60:8a:d5:f7:24:b3:70:89:
                    e2:a1:9f:5f:99:8b:13:dc:eb:35:ac:7b:ce:54:64:
                    76:10:84:39:80:63:3b:68:26:55:13:6e:8d:01:47:
                    d5:1b:97:2f:1d:c0:d8:87:f3:fe:7c:f9:c8:58:80:
                    2a:fe:b9:50:b2:9e:84:a6:d8:89:aa:d6:7a:0d:64:
                    c8:a9:54:04:b0:0c:49:f5:33:fb:69:9f:6a:5f:6d:
                    2c:3e:80:25:59:96:1d:67:ce:b1:ea:72:c9:51:a4:
                    84:37:52:fd:1a:2f:9a:40:ee:20:1b:97:c0:a5:c9:
                    77:32:2d:91:53:b0:ff:40:95:98:51:03:69:49:67:
                    09:fa:0a:7a:b6:39:5f:66:a0:af:25:0e:dd:ba:32:
                    2e:05:18:dd:3b:9b:90:27:c6:70:c5:fd:5a:ab:96:
                    6a:ca:6e:c1:d8:f7:12:76:18:c6:24:4d:cf:90:03:
                    0b:09:12:90:39:dd:5a:d6:90:c2:34:79:dc:3a:fb:
                    95:67:0d:67:71:59:ea:e1:9e:a9:06:2c:ce:cf:2e:
                    43:a0:9d:c2:84:21:02:e5:20:f6:bb:0a:32:b8:29:
                    a2:9b:29:ed:75:9c:46:58:7b:0c:87:58:e5:a5:d4:
                    8f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5A:8F:FC:C3:77:D6:37:D1:A6:3B:29:77:14:37:99:9E:43:59:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/065ec9fc-5ca1-3fc3-bc69-bca580184a83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:59:0b:a2:cf:f1:3e:ee:22:3f:16:64:d9:c6:71:dc:38:b1:
         dd:3a:83:b8:10:c2:3e:56:00:01:9e:25:5e:26:99:84:cb:b3:
         4b:00:dd:03:b6:13:8a:22:68:b1:d1:98:9d:d0:16:9f:7e:05:
         4b:87:21:51:a8:eb:fb:96:ec:cb:98:0f:5a:bf:67:e4:5a:0e:
         d2:2a:5d:22:a3:b5:8a:fc:48:74:f1:f7:12:3d:6c:8f:90:ae:
         eb:b8:f0:89:fa:5e:87:c8:f4:46:a1:03:ab:12:02:f0:6e:25:
         3a:a5:31:61:24:c9:71:83:ea:d5:d1:e6:72:ed:a5:8e:17:2c:
         96:ca:a4:ba:02:46:d7:0f:c3:3c:b9:09:4a:d3:bc:ea:53:e2:
         ba:d3:d4:92:54:ee:d7:5d:d3:a5:f2:89:ec:b3:16:48:bc:6c:
         3e:20:63:72:59:1e:f0:b3:98:c6:12:f3:82:55:f5:e1:d6:e8:
         f7:2c:7f:16:18:d5:25:ea:48:e6:b3:45:17:ec:0d:56:70:3b:
         98:b3:9f:9c:7d:a0:54:1e:54:77:ff:4d:c0:a4:2e:2b:64:64:
         93:6f:f6:1f:d7:af:53:8f:a0:6a:11:db:ce:fc:b6:f7:6a:73:
         e7:d3:95:62:41:66:75:8e:44:6c:d2:a7:f9:cd:71:d1:d9:f6:
         eb:ce:0c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:05:24 2026 by rpki-client