Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/36f41b25-cdd3-3ac9-82b9-91dc412e4c34.roa
File:                     36f41b25-cdd3-3ac9-82b9-91dc412e4c34.roa (raw, json)
Hash identifier:          xnJgu4HaTUhFffIj6035PQGYYxwL1MtofR7/XfWPDbk=
Subject key identifier:   2F:58:6B:BC:78:01:0E:3E:D0:D6:D9:EE:3F:0B:DB:93:A1:8E:E0:C3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DEDE0B4010F05795CC2716080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/36f41b25-cdd3-3ac9-82b9-91dc412e4c34.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     401337
IP address blocks:        2001:470:bf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:b4:01:0f:05:79:5c:c2:71:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=741919e4-dadc-4b1a-af62-873ba86e0479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ae:a6:eb:a5:96:57:bb:0f:7d:ed:4a:5e:94:
                    17:d1:ae:fb:38:c1:23:ae:b7:aa:cb:4b:07:c5:df:
                    5a:d3:47:54:57:cf:2f:e9:2f:ca:8b:ca:be:0f:eb:
                    3b:46:81:84:bc:ee:2a:04:e4:87:e1:38:dd:d2:35:
                    48:d6:32:f6:dd:53:52:f0:d5:fa:94:7c:26:0c:1f:
                    58:ae:1b:17:23:fb:56:1f:3f:7c:bc:2b:85:67:59:
                    5c:b2:70:67:08:66:42:31:4a:66:e2:d6:18:78:35:
                    79:17:1a:f8:12:bd:69:d7:3f:0f:c6:12:fc:1e:62:
                    c8:91:2f:c8:f0:a5:8b:c9:0f:d8:ca:9f:4c:12:dc:
                    b4:03:62:a4:eb:dc:e2:50:fd:40:b5:07:52:d5:bc:
                    1b:7d:fc:dc:89:6f:0e:18:cf:a1:ff:55:c0:af:61:
                    5e:41:78:b4:08:5e:2a:60:17:b9:c1:4f:d0:b7:1c:
                    61:4c:66:ee:08:3a:f1:e2:6d:0a:1a:59:18:4d:bb:
                    1f:21:16:6a:d3:35:ce:e5:09:b9:26:03:12:fb:68:
                    5b:1d:5c:e3:70:c6:8e:55:b6:dc:3c:13:63:26:f6:
                    86:ae:36:ab:bb:59:4c:e0:86:9f:49:e5:24:d1:c2:
                    7b:3b:09:42:d0:d7:c3:40:19:2c:13:a6:63:af:bd:
                    11:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:58:6B:BC:78:01:0E:3E:D0:D6:D9:EE:3F:0B:DB:93:A1:8E:E0:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/36f41b25-cdd3-3ac9-82b9-91dc412e4c34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:bf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:2c:9e:90:7d:f3:e9:2c:69:d7:52:2f:36:f1:0a:89:c7:f4:
         3e:fa:01:5f:cf:d9:2a:8d:e2:da:1f:b6:11:ba:2a:6c:a1:e8:
         dc:06:3b:11:ed:77:9c:d0:19:a8:30:1a:b7:1f:eb:b9:fc:f3:
         1e:c5:7c:02:95:f4:fc:97:1a:db:a3:5c:c7:b1:16:2a:f7:ee:
         25:0f:c1:68:fb:53:3f:ed:5d:27:0d:32:27:42:6a:4e:84:c7:
         79:8c:36:aa:1d:2d:2a:41:c5:1b:a7:4b:b3:43:3a:c3:0c:95:
         2a:05:f5:89:48:ee:79:36:91:e4:7b:45:bb:31:9d:ac:24:49:
         4a:db:db:6a:c8:60:1e:78:96:d6:fe:40:c2:eb:25:eb:f8:b1:
         dc:4e:3a:cc:c9:77:d4:59:05:31:47:88:be:3e:21:2b:ff:e2:
         3a:74:3a:d5:29:9d:3c:d1:40:e9:b9:95:32:4f:5f:1a:02:87:
         39:88:7f:a7:78:7a:20:ee:85:ed:04:75:4f:06:4f:ab:35:b3:
         bd:33:80:72:bf:d9:b5:ab:85:63:6d:7e:a6:e8:7f:31:b7:8f:
         a2:6c:6e:95:42:10:c1:2b:63:0c:8f:32:38:4d:df:00:3b:4e:
         56:b1:a4:9a:c7:70:11:3c:25:f0:91:80:42:63:bc:a9:78:e9:
         7f:7f:d5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 15:06:15 2026 by rpki-client