Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1fbca072-4efa-3db3-9fe8-b4e4d1268817.roa
File:                     1fbca072-4efa-3db3-9fe8-b4e4d1268817.roa (raw, json)
Hash identifier:          ccx+JtWzUJt2xULKPb6SlnUAkhD+e6+Tf+ZNZz+lI1Q=
Subject key identifier:   9B:0A:10:19:D2:DC:AC:A4:6F:E5:77:FE:C4:C1:C0:E6:2F:66:A7:C8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA895942D74748AE93A340
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1fbca072-4efa-3db3-9fe8-b4e4d1268817.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     23089
IP address blocks:        2001:470:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:89:59:42:d7:47:48:ae:93:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=f7e5a955-eec8-4182-bb32-f9a9bff7fcec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1e:71:6b:3b:6d:7b:6d:bf:bf:04:62:95:92:
                    a3:4d:fc:0d:69:ac:b0:5b:24:af:5f:60:13:6c:b2:
                    c3:a2:2f:20:ff:d1:12:1b:bc:87:ed:58:12:50:ca:
                    45:2f:0d:bf:ca:5c:20:b0:9e:0a:a5:f7:4b:b1:f6:
                    b4:e7:22:49:d6:67:55:49:e4:ec:55:23:9c:ee:ad:
                    ac:1f:0d:23:d1:e3:4a:33:5a:4f:4a:97:31:bf:5d:
                    a7:35:5d:bd:a8:1a:be:44:97:d5:ac:63:c2:7a:9c:
                    ed:c8:77:5f:38:a6:9f:00:e8:5e:8e:ba:57:bf:a6:
                    43:95:6f:6a:05:7d:ca:b8:5c:b6:5c:74:80:3c:a9:
                    e0:09:f2:48:bc:6b:67:6f:98:fb:1d:77:a2:9d:85:
                    39:92:38:e1:a9:79:0d:39:1e:fd:32:f8:fe:9b:e5:
                    36:80:8f:30:2f:65:34:86:83:07:83:d0:fd:4c:6a:
                    5a:f7:8a:e8:a7:28:27:ac:dc:18:48:5f:ee:a5:15:
                    81:17:9f:67:f3:41:7f:53:e3:fa:b9:74:18:47:25:
                    8f:59:9a:24:b3:f6:0b:49:c1:61:f0:ff:a8:ec:a9:
                    ba:1f:10:1e:3b:64:ff:d0:c6:21:62:0a:e5:8d:04:
                    2b:f9:f3:bd:5f:06:93:02:84:07:3e:0b:d0:dc:99:
                    98:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0A:10:19:D2:DC:AC:A4:6F:E5:77:FE:C4:C1:C0:E6:2F:66:A7:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1fbca072-4efa-3db3-9fe8-b4e4d1268817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:6f:91:ba:11:ac:d9:bd:8a:64:50:8e:dd:b9:3e:5e:f4:26:
         73:6a:45:45:4a:9b:94:ac:f0:20:96:64:39:61:ac:2f:12:9d:
         6c:b4:1f:81:5a:d8:78:63:d5:00:af:45:14:f9:57:d4:29:92:
         aa:57:a1:f9:df:62:cc:b6:6a:82:0d:00:bf:29:79:f8:d6:3b:
         af:75:8a:a2:59:44:5d:1c:d5:94:26:9b:d0:28:64:f3:8f:2f:
         9c:4e:d9:bd:d9:50:3e:ca:af:7b:94:9a:a8:d1:a1:50:89:a5:
         c3:18:66:a1:5b:b4:09:ac:9b:cd:e0:0f:36:3d:5c:a6:8f:fd:
         57:4d:a3:85:34:6b:57:c6:b5:07:9d:74:93:a3:62:62:03:84:
         49:37:ab:6c:05:54:85:4f:b8:c3:2b:b2:09:4d:a2:b9:a0:eb:
         58:9d:e9:ca:3e:5a:e3:f4:2e:8b:47:5a:27:e8:99:9c:d7:8d:
         bf:f3:af:90:c1:f9:9a:92:15:6d:92:82:a8:4d:bc:88:95:55:
         97:0c:55:07:db:52:30:b8:fa:c3:3b:d7:86:91:53:09:d8:5e:
         d3:d3:e0:7a:fa:df:a6:16:4b:b0:af:e4:bb:eb:79:df:46:95:
         26:d9:89:6a:c2:95:88:a6:b6:09:a8:47:f9:44:d2:8d:c3:65:
         6b:ba:e7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 19:09:41 2026 by rpki-client