Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/27da4372-28cc-3f9f-a428-100dbb240185.roa
File:                     27da4372-28cc-3f9f-a428-100dbb240185.roa (raw, json)
Hash identifier:          h7dZWDZ4NwlKfxDlfkmbQ1ED4C8qzZ0Eux4P05rYUcc=
Subject key identifier:   3B:07:E6:EF:06:D6:9C:37:F3:1B:80:5B:F4:48:5C:DC:55:2E:43:27
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DE84B5BF814F4A1526F23B340
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/27da4372-28cc-3f9f-a428-100dbb240185.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     134346
IP address blocks:        2001:470:3fd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:5b:f8:14:f4:a1:52:6f:23:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=630d51c8-7a1f-40dc-b51f-551295274885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b9:6f:09:4f:68:54:ea:5f:16:92:68:ba:3d:
                    f5:7c:ba:de:74:3d:09:ba:8c:66:71:71:f2:b7:a7:
                    66:38:c6:f8:92:4a:75:c0:e4:2f:1f:ee:a4:b0:16:
                    8b:7d:41:48:09:e9:ec:1d:37:eb:f1:48:93:50:d4:
                    7b:bb:f2:4d:49:ed:52:f2:6c:9f:49:51:bb:8e:7b:
                    f3:7e:1d:3f:1f:44:35:10:d0:f1:ac:72:d6:c4:db:
                    85:3b:ea:b7:28:bb:34:bc:cc:31:ea:b1:1c:17:43:
                    bb:7a:4b:6a:cb:3f:db:cd:96:19:cc:39:39:c4:d7:
                    7a:61:bb:47:16:05:26:03:df:72:99:da:99:37:4b:
                    f2:4d:67:57:79:7a:4e:9e:0e:10:f0:8c:50:26:e9:
                    d5:9d:e8:00:ef:07:6a:2d:c4:6e:a9:0a:40:e8:99:
                    20:66:7c:29:d1:ba:d4:29:97:c2:10:5c:e0:4d:95:
                    f1:bf:6d:86:c0:11:26:ed:72:49:28:82:6e:09:0b:
                    da:42:d4:b5:d7:c7:e5:f1:4f:19:5b:20:19:47:08:
                    73:28:86:b7:ef:c1:ed:85:9b:75:0b:54:c4:9d:69:
                    54:0e:f0:a2:69:f7:1a:d2:38:10:0f:38:08:6f:3b:
                    27:29:7b:24:9c:d8:96:69:ee:2e:7d:3e:2a:b7:d2:
                    9b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:07:E6:EF:06:D6:9C:37:F3:1B:80:5B:F4:48:5C:DC:55:2E:43:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/27da4372-28cc-3f9f-a428-100dbb240185.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:00:70:35:4c:44:27:50:91:ed:fc:73:c9:a4:7d:f1:d3:bc:
         ee:39:d6:2c:e0:5d:ce:b5:db:6d:fc:44:93:f0:e3:e1:b0:1d:
         2d:9b:4b:75:39:7b:6b:3e:78:58:70:e2:2a:c6:e5:dd:c1:bc:
         68:5a:6f:ed:99:40:c5:93:4a:45:22:c8:29:f6:c4:57:5b:dc:
         79:cc:50:74:9e:a0:0d:d9:4c:8a:55:4a:ee:21:0e:96:f8:0c:
         63:a2:c8:0e:ca:b6:57:de:71:95:a7:67:08:16:7e:a8:ab:c6:
         ab:22:56:98:1b:1b:72:24:70:1e:98:65:cd:bf:32:80:8e:0d:
         f3:7b:74:36:3a:c8:97:1d:3a:fb:f4:aa:46:df:3d:e6:6c:20:
         a9:e6:31:82:27:12:77:d5:1c:de:45:a5:e4:34:45:15:e3:94:
         5a:f5:60:d8:ca:0c:69:52:76:2b:52:1f:73:a2:41:e7:97:01:
         1c:29:f9:64:1a:f6:60:2b:b8:02:69:e5:d4:d7:db:11:d5:bb:
         95:d3:fc:0f:a4:14:27:4b:52:55:90:4c:d1:59:ea:64:9a:c9:
         84:2a:53:37:d4:b4:96:e5:c6:4c:a7:5b:50:98:5a:48:9e:c5:
         f5:42:07:fb:67:91:32:96:08:d4:68:9b:20:a7:3a:91:56:82:
         a6:0f:dc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 15:06:04 2026 by rpki-client