Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3c4cf9ff-3427-3470-ae82-ab12ef7aa278.roa
File:                     3c4cf9ff-3427-3470-ae82-ab12ef7aa278.roa (raw, json)
Hash identifier:          YYhAYjARDrf2bvIz/FEa0390rVY75LaFxEFe44MwIUI=
Subject key identifier:   E5:9B:02:93:6C:E5:84:C7:BD:8F:13:DF:8F:40:D7:44:16:00:47:EE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DD634732F2FF7E6E283C8B880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3c4cf9ff-3427-3470-ae82-ab12ef7aa278.roa
Signing time:             Fri 15 May 2026 01:30:15 +0000
ROA not before:           Fri 15 May 2026 01:30:15 +0000
ROA not after:            Thu 13 Aug 2026 01:30:15 +0000
asID:                     16851
IP address blocks:        2001:470:5a4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 16 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:34:73:2f:2f:f7:e6:e2:83:c8:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 15 01:30:15 2026 GMT
            Not After : Aug 13 01:30:15 2026 GMT
        Subject: CN=b163d9d7-2159-4d47-bec3-e8451616d1a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:44:08:d0:1d:1e:43:12:1a:f1:cb:9b:97:ee:
                    63:9d:bb:56:ef:99:2a:7c:f7:eb:b0:fa:7d:d5:5a:
                    0e:b9:20:4e:1d:cc:e5:88:86:78:55:d7:75:7b:d9:
                    91:b2:62:17:c0:e2:26:12:b5:5c:b3:63:45:c8:2f:
                    6a:63:b9:7c:0f:20:90:18:9a:a8:a4:d7:8a:24:36:
                    19:ff:39:7c:90:b4:4e:fe:cf:c7:12:08:ba:72:78:
                    32:48:70:7b:92:37:c6:d7:18:06:b7:66:e9:19:c9:
                    6d:ed:bd:5d:81:2e:21:53:5c:92:1b:9e:b8:80:2e:
                    20:d3:8f:b9:a7:cd:be:69:34:9f:87:e4:51:ce:2e:
                    85:8e:d7:c3:9e:a8:3b:6c:a2:b3:cc:45:d3:dd:19:
                    b9:57:64:f4:97:73:3a:ef:2f:f9:d0:02:51:b2:43:
                    1a:ff:62:11:c2:4f:48:8c:56:77:e2:a3:55:2a:b1:
                    fc:d7:9c:df:46:5e:da:52:3f:2c:e2:84:df:a0:34:
                    ec:a6:76:86:e9:7e:f7:83:09:b7:ac:81:a6:68:19:
                    23:d1:ef:cb:eb:9f:fb:b7:1a:a5:ca:d3:ae:5e:97:
                    b2:84:7d:11:a1:3d:43:d7:c1:e2:2a:21:ad:9a:85:
                    96:ab:ed:0d:d7:4e:9e:e8:f3:b4:4e:35:8a:63:53:
                    c0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9B:02:93:6C:E5:84:C7:BD:8F:13:DF:8F:40:D7:44:16:00:47:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3c4cf9ff-3427-3470-ae82-ab12ef7aa278.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:5a4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:75:84:75:b5:19:8d:ab:f6:22:60:c3:61:02:3a:ce:64:04:
         c6:cc:78:ed:e6:e8:5f:1d:6f:68:09:89:f2:b3:4b:db:3a:25:
         0c:e6:7b:f8:33:7e:bc:80:78:0f:e5:9f:e7:8c:f4:2d:e2:53:
         58:9c:47:02:0a:bd:b7:a3:92:f7:24:37:78:22:dc:fa:c3:2f:
         7e:6c:5d:78:ea:16:59:53:ff:38:5c:f6:c1:c4:9e:04:e4:ec:
         6e:41:f4:78:aa:3c:32:be:8b:d5:da:7f:63:da:6f:1f:03:cc:
         ce:c6:a6:89:fe:cb:52:06:26:4c:8f:3a:16:73:22:ba:11:b0:
         e3:6b:ef:d5:3b:55:47:0d:ea:34:66:11:71:d1:4d:4f:22:8e:
         27:43:3c:32:47:52:7f:44:37:b0:69:6d:a7:6e:77:46:47:c5:
         e3:8c:a0:66:64:57:63:3c:88:fd:96:4b:7f:c1:7e:ce:af:31:
         43:45:dc:ee:41:3b:37:25:ae:78:d9:bc:f2:77:b1:0c:2b:9b:
         26:45:aa:05:db:46:d6:2f:a9:05:c3:c1:8c:3d:61:bb:84:c5:
         a0:38:ce:74:df:5c:89:a0:92:c5:45:95:b3:9d:2c:c1:26:e9:
         8c:13:63:72:74:00:9a:08:63:7a:ff:03:4d:3b:40:fe:4a:3b:
         0b:62:f0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 15:22:51 2026 by rpki-client