Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/37a56de3-b477-3b97-adae-6b9bf48deb9f.roa
File:                     37a56de3-b477-3b97-adae-6b9bf48deb9f.roa (raw, json)
Hash identifier:          FlzzeCVcYAZ0kaSA7/5FZa1Qj0xQMFQByu2L0xLpSlA=
Subject key identifier:   9F:F7:C5:FC:93:E2:0E:C2:6A:1B:E9:E1:24:F1:C6:1D:08:6B:60:09
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E0D841D465779FCE93B7687F0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/37a56de3-b477-3b97-adae-6b9bf48deb9f.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     43633
IP address blocks:        2001:470:542::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:1d:46:57:79:fc:e9:3b:76:87:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=16a633d6-edd4-4699-bfde-738d82c2362e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:4a:ad:90:43:12:7c:78:38:a7:9c:a5:fe:
                    5e:bd:c8:0f:e6:55:e5:cc:86:10:20:3f:9c:ba:fc:
                    7d:a4:ca:40:ed:f4:8b:d8:b0:2b:ce:cb:de:12:0f:
                    b1:da:b1:e3:b5:03:e7:55:53:23:b8:a8:2f:9c:ef:
                    61:78:12:54:27:72:81:e1:41:ab:a1:70:a3:7c:d5:
                    2c:2b:70:20:e2:30:44:1f:d3:ea:9f:1f:c7:aa:32:
                    28:f9:4a:3b:40:b3:c8:c6:a1:b6:01:6d:d3:8b:5d:
                    4c:67:5e:c2:40:01:05:37:b6:0b:ef:d1:b5:26:15:
                    78:07:75:19:6c:78:f9:58:ac:cc:c0:4e:93:93:76:
                    91:e0:5e:d8:13:89:69:54:93:62:cd:d0:8d:f2:06:
                    cc:d8:69:4d:de:ce:08:39:34:21:63:71:a7:ae:72:
                    aa:d9:c1:a5:a3:e4:32:ab:85:2e:35:45:e4:bf:ca:
                    20:58:60:c6:8b:41:8e:b9:7e:3f:7f:e9:eb:02:8c:
                    47:81:c7:f1:d0:00:39:60:8f:37:d7:cb:3e:82:7a:
                    dd:81:23:e7:8b:a7:04:32:92:e7:93:9d:e4:2d:13:
                    a1:37:db:b0:ef:d7:59:05:62:b1:77:0f:e5:3b:60:
                    02:75:02:25:e0:a8:d9:13:89:1c:fc:08:dc:f1:2e:
                    5d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F7:C5:FC:93:E2:0E:C2:6A:1B:E9:E1:24:F1:C6:1D:08:6B:60:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/37a56de3-b477-3b97-adae-6b9bf48deb9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:542::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:df:8c:d6:a3:7d:bd:c2:0f:23:10:a8:33:99:03:14:69:77:
         69:24:b1:37:92:a9:70:02:0e:12:01:3d:81:d4:c4:fd:4f:73:
         15:06:34:21:e8:a9:d5:08:40:5a:7e:bf:83:bd:cd:14:1f:af:
         0f:f2:64:b5:1a:cc:27:e3:9a:f5:bc:2e:a8:f4:60:62:7f:3b:
         c5:ad:c6:5f:3c:23:df:30:7b:ec:d0:eb:8d:23:ca:31:f8:b8:
         20:2d:84:58:b5:95:ea:49:8b:75:31:cc:d7:66:fc:a8:86:cf:
         0a:fb:fa:38:2e:a6:3a:fa:79:5a:8b:c4:49:66:d9:f2:9b:ce:
         f6:6c:e3:cd:46:06:07:e1:a2:33:e9:cb:ae:f7:52:f3:4c:e2:
         91:0c:9a:22:80:24:9f:54:86:ea:4b:a1:8b:f4:25:32:21:d9:
         59:b4:62:d4:b5:32:65:3f:3c:e5:c9:87:a7:0b:85:bd:dc:ec:
         ed:3e:52:d7:f0:5e:33:c3:a5:c8:99:96:fa:5b:64:b1:31:59:
         8f:15:ff:00:ea:47:ff:eb:c7:8a:f9:44:ca:ae:50:71:91:99:
         89:30:a2:c8:5d:4e:ba:1c:03:39:fb:da:80:f0:09:09:cd:0e:
         cb:5e:9f:5f:64:9d:4c:85:a3:33:38:b4:e6:33:aa:d1:58:a8:
         b7:4f:ba:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 16:36:31 2026 by rpki-client