Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/19056f2d-ebb0-3bb3-9a36-5493bb71731c.roa
File:                     19056f2d-ebb0-3bb3-9a36-5493bb71731c.roa (raw, json)
Hash identifier:          CEDzOrjZXfQE1BTO5707dc+21hGmLdLCDveP+Z9Mj4w=
Subject key identifier:   23:A0:0F:43:A8:36:B1:29:11:A2:E9:0C:0A:8F:FA:32:C2:84:02:24
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DDE87F6A0F1275EA298442480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/19056f2d-ebb0-3bb3-9a36-5493bb71731c.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     397945
IP address blocks:        2001:470:3bf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:f6:a0:f1:27:5e:a2:98:44:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=1c3624ef-ae00-49d7-8868-04ae800dd4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f0:8f:f2:80:02:99:10:41:2b:7e:b8:60:c3:
                    54:c0:e7:59:f5:2c:05:24:61:4e:95:cf:21:91:b9:
                    82:a6:d3:21:b7:d6:6c:e4:bc:50:23:81:de:28:ae:
                    0e:a0:6e:d5:73:a6:60:ba:ef:8e:37:92:a8:db:bc:
                    29:5f:1b:ef:27:8f:ca:09:da:44:c1:e5:3c:ad:4e:
                    b0:cc:fc:01:d5:7d:dc:5e:c7:18:43:9e:50:fd:2b:
                    2a:55:6d:7c:0e:31:d6:58:e8:a0:56:93:8b:61:ec:
                    1c:5c:96:6b:77:ef:a5:09:6d:8f:26:a6:ac:85:ba:
                    13:bc:74:b0:c6:0f:51:65:16:74:89:cc:7f:ae:ef:
                    b5:10:b5:05:e5:ca:57:d6:93:42:4c:f6:43:3a:7a:
                    40:86:1e:6d:6d:c6:a5:97:11:f1:e0:e2:31:09:8c:
                    71:dc:fc:2f:db:28:68:ba:cf:14:a8:01:bd:12:85:
                    37:a5:75:b6:3e:5b:6f:73:f4:0a:5a:cf:89:a3:4f:
                    f7:a1:88:a2:00:fa:7f:69:f8:de:3d:dc:97:6d:c9:
                    7e:8a:c6:fd:91:ff:e0:53:af:97:e3:6a:61:9e:44:
                    9e:9f:35:84:3c:ef:f9:b3:5d:9a:80:fb:8a:7a:88:
                    c0:02:d7:37:db:9b:9d:15:79:2e:1d:69:99:3f:fa:
                    e1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A0:0F:43:A8:36:B1:29:11:A2:E9:0C:0A:8F:FA:32:C2:84:02:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/19056f2d-ebb0-3bb3-9a36-5493bb71731c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3bf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d3:d1:7d:20:11:c2:8d:a8:51:41:ff:7c:34:35:02:02:4a:
         1f:a7:13:5a:fd:59:4f:bc:02:91:b0:4b:5e:eb:e2:f6:4a:07:
         c0:1a:2e:f1:2d:96:75:b3:8a:f6:18:79:2b:c1:3f:8c:dd:d8:
         45:8f:3b:22:80:90:04:da:2f:cf:65:a4:17:cc:88:86:80:15:
         48:de:d5:0f:3e:a5:f1:fc:79:2e:54:8e:8b:a9:cd:2f:f5:5c:
         07:5b:80:aa:d4:e2:4d:dd:cb:db:46:3f:f8:78:2e:4d:cb:71:
         2c:4b:f2:a3:bc:3e:22:ba:44:e4:e2:93:3b:86:af:00:f7:c5:
         48:e7:f0:f0:12:42:76:1c:c7:dd:db:9e:78:52:30:1b:a8:37:
         44:59:a4:e9:b7:8d:2b:0a:02:b8:ce:03:e2:f8:e7:55:22:4b:
         2e:ea:8f:c5:35:e3:62:5b:c0:32:c3:12:66:25:1a:cc:ee:df:
         ee:96:7f:44:84:9d:94:75:e5:52:fb:60:e9:db:ce:74:2d:fd:
         67:7b:8e:cf:b5:22:53:d8:15:1a:da:d5:47:5e:c6:2d:69:33:
         a0:4d:1a:4b:65:6d:f2:d3:cc:72:76:73:66:56:ae:b5:b2:16:
         ed:27:6f:58:16:cf:c6:d3:c3:24:e4:ca:31:35:97:c3:47:84:
         57:86:1f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 16:36:27 2026 by rpki-client