Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b020f5f-93ea-3d3b-9cc9-3697965e305f.roa
File:                     3b020f5f-93ea-3d3b-9cc9-3697965e305f.roa (raw, json)
Hash identifier:          Hk7RVXu6XaMcjDPnu39bLPJkzLGlaKO7neEoRiSxavM=
Subject key identifier:   B6:5D:A7:1C:F0:B7:7A:8E:9B:1D:8F:02:E3:71:6E:EA:01:B5:E7:50
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D8EF963FE285670F84B184480
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b020f5f-93ea-3d3b-9cc9-3697965e305f.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     23948
IP address blocks:        2001:470:337::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:63:fe:28:56:70:f8:4b:18:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=ce1dd6c6-283f-4c1b-93c3-912dba62051d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6c:fd:a9:2e:0c:56:0c:22:f0:66:3c:4c:22:
                    f1:d6:af:69:2f:62:1e:ce:e3:e8:c1:89:88:81:3f:
                    90:72:a0:37:44:46:9a:78:e7:6f:9a:67:62:fd:71:
                    46:9b:17:bd:2b:2d:1a:13:ff:c6:ed:ac:93:35:f0:
                    25:2a:53:e5:da:86:49:cd:13:98:32:dd:73:23:9a:
                    cd:06:04:53:3a:d1:55:99:11:da:99:79:08:6f:cc:
                    14:eb:b9:0d:d2:10:6e:25:57:41:18:bb:db:ce:00:
                    50:ef:aa:d6:2d:90:0c:fa:d5:8c:3d:f9:fc:78:b5:
                    f0:4b:a7:3b:06:06:e2:15:2f:b5:84:05:a7:e0:ae:
                    b9:0e:0a:62:30:c4:91:e3:b1:97:5c:c8:14:98:00:
                    43:71:c3:25:fa:17:b3:59:a8:e7:55:37:ee:a2:f5:
                    6c:2f:9c:30:c9:7e:82:54:7c:de:f5:b9:1d:08:c4:
                    35:c6:6d:18:7e:6d:c1:ca:ad:04:f6:6e:cc:f8:90:
                    7e:f4:08:32:d3:76:9e:9d:75:46:4a:0f:3a:76:70:
                    22:64:e7:34:0b:58:68:2a:7e:6a:5a:2d:21:de:ae:
                    d6:70:5d:f9:22:8b:84:a3:24:7a:2f:53:10:54:30:
                    b4:8b:91:bf:f5:5d:b5:f7:3e:37:5e:50:73:14:45:
                    3f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5D:A7:1C:F0:B7:7A:8E:9B:1D:8F:02:E3:71:6E:EA:01:B5:E7:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b020f5f-93ea-3d3b-9cc9-3697965e305f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:337::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ed:ad:75:9b:ba:6f:f2:f3:c5:1f:32:62:8c:6d:dc:d9:37:
         d9:68:96:a9:86:f3:95:89:3c:33:88:35:77:3a:1c:b6:f8:8f:
         40:91:6e:57:1a:b6:41:34:b6:6e:e3:c7:4f:00:9c:f2:17:14:
         d1:4c:2c:ad:c6:37:66:e3:8d:35:04:c7:9f:df:e8:d2:eb:46:
         91:e2:cf:40:78:71:0d:d6:14:43:cd:4f:89:8a:59:24:1f:ed:
         1c:30:da:2c:91:96:65:75:e3:0b:93:b7:c6:e7:8f:69:20:c3:
         e7:51:b8:a7:f0:b8:fc:f0:ce:24:fc:6c:16:81:9e:af:ea:b4:
         86:89:5f:56:55:95:e4:21:6d:e4:94:62:b5:c7:4d:e0:1c:e6:
         9f:75:5d:20:c9:0d:be:23:9e:f7:e6:c3:80:01:53:f5:84:d5:
         17:28:60:ce:c6:4a:21:b2:01:b9:43:42:a7:7c:ee:88:bd:6e:
         92:1d:43:11:6c:55:4f:5c:07:e1:18:32:ca:9c:02:0c:a8:c7:
         37:5e:28:bf:a1:ac:8c:9c:e8:b8:7b:e4:a8:2f:8f:c7:d4:cc:
         c4:3a:9f:8c:5e:bd:cb:a8:20:7b:ef:e6:8c:d3:f5:10:7a:31:
         93:70:b4:a0:70:33:30:2e:7a:91:5c:d0:43:40:05:cd:06:7f:
         2c:34:dd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 01:34:44 2026 by rpki-client