Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29bb4462-337d-360e-9818-6ef28348a104.roa
File:                     29bb4462-337d-360e-9818-6ef28348a104.roa (raw, json)
Hash identifier:          u5HDEGEstUtQXT/Tz3L+sEJ0N1FqsJxwvc8A4/dVxpk=
Subject key identifier:   D1:DD:07:C7:69:D7:92:A9:AF:59:29:C7:67:56:BB:6E:3E:DB:B7:06
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3CF9C44E166F87D9DA6D0080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29bb4462-337d-360e-9818-6ef28348a104.roa
Signing time:             Sat 20 Jun 2026 21:00:12 +0000
ROA not before:           Sat 20 Jun 2026 21:00:12 +0000
ROA not after:            Fri 18 Sep 2026 21:00:12 +0000
asID:                     206186
IP address blocks:        2001:470:44c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3c:f9:c4:4e:16:6f:87:d9:da:6d:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 20 21:00:12 2026 GMT
            Not After : Sep 18 21:00:12 2026 GMT
        Subject: CN=1c44bd80-40a0-4dc2-9236-895b46c7b362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7d:b9:c1:66:5a:ae:b8:85:bc:96:85:d4:7f:
                    32:20:10:8e:49:02:a4:6e:f2:89:ad:1a:24:5d:02:
                    3a:d5:96:f1:e9:0e:89:18:cc:2f:30:31:8c:50:b1:
                    86:1f:56:70:ae:1d:00:b4:f3:e6:1c:76:4d:72:f8:
                    aa:43:6c:cf:69:b6:ce:b5:b4:63:07:12:16:84:bb:
                    fe:99:e6:4e:f2:0b:73:31:bf:2e:ad:da:6f:2c:e6:
                    a0:68:5b:40:62:5a:2c:f7:ed:56:98:bb:a8:d9:cc:
                    2b:66:17:3b:b5:36:8f:8c:14:d8:4c:4d:61:9a:bf:
                    45:a3:3b:a3:ec:a4:55:99:e0:dc:6d:30:28:b7:4c:
                    43:f0:2b:70:3e:ce:61:3a:01:9c:33:4b:58:7f:6e:
                    f7:4e:64:1a:e7:54:fa:a5:25:f5:ee:34:15:d4:d6:
                    5e:dd:6d:57:0d:b8:8b:00:9a:24:5c:06:1b:aa:be:
                    c2:3d:91:f0:a0:4c:05:36:eb:f6:a0:2b:e6:9c:35:
                    31:77:b6:ea:b3:21:fb:0a:e0:db:8b:28:4b:bb:55:
                    ac:94:68:b8:3a:f4:cb:9e:58:70:47:15:39:79:45:
                    45:8b:ad:d6:cc:6e:18:3d:f6:26:2d:b6:ce:ed:c5:
                    82:da:24:78:bf:a3:1d:21:e8:16:1e:bf:5b:cb:8a:
                    56:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DD:07:C7:69:D7:92:A9:AF:59:29:C7:67:56:BB:6E:3E:DB:B7:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29bb4462-337d-360e-9818-6ef28348a104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:44c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:70:b7:2e:73:e8:b7:f1:ec:15:1a:bf:9c:d9:90:81:80:e2:
         15:54:c4:c4:95:a0:f2:39:02:04:56:5c:ed:50:6a:88:f3:45:
         eb:09:ef:2a:0f:5f:d2:a4:ca:7c:2a:9a:73:46:95:72:fe:c4:
         0b:ae:59:97:ea:b9:7c:25:e5:25:66:5a:97:a7:0e:2c:45:e9:
         a7:4f:3c:b8:e4:07:aa:c7:60:a7:89:eb:a2:7b:d5:c1:1c:fe:
         c3:c8:7e:f1:4c:b7:84:f4:b3:95:f9:e5:9f:33:08:d5:85:86:
         b2:e1:af:b2:3c:5a:71:1e:f8:8f:10:d4:2d:53:83:52:06:77:
         4c:7e:36:72:cc:61:64:ba:17:25:89:d3:eb:c5:30:f0:06:9e:
         e1:38:24:58:7f:7d:85:14:9b:23:a6:27:a8:ec:a1:54:9d:85:
         6b:7f:c2:8e:25:33:26:e8:37:34:c5:c0:31:42:ad:a2:fa:6b:
         1f:df:b6:9d:91:6f:90:a2:5c:01:6f:5d:36:04:6a:07:f7:3d:
         5c:7a:e9:e1:07:07:8a:c2:63:13:49:79:53:a8:f4:13:80:36:
         6a:6f:c3:bf:43:f2:ed:db:75:19:64:3d:5a:e0:6a:be:0f:e7:
         40:38:fe:c6:a2:36:74:e7:32:4e:e3:26:b9:a0:f0:86:3b:07:
         4a:68:05:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 19:45:45 2026 by rpki-client