Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3d9e0365-11d8-3d87-9fe1-e76e21fac978.roa
File:                     3d9e0365-11d8-3d87-9fe1-e76e21fac978.roa (raw, json)
Hash identifier:          TiWWJHmauMNeJ3jyQOI/16eUej1Sam/BEJbDNKfx2ps=
Subject key identifier:   D3:E0:64:C2:88:32:42:B9:5F:FE:17:E0:E3:6C:EE:79:99:91:EB:0F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F51639CE65C0FBD940940
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3d9e0365-11d8-3d87-9fe1-e76e21fac978.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     32578
IP address blocks:        2001:470:23e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:51:63:9c:e6:5c:0f:bd:94:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=00b63a7f-220f-4246-9700-11629e50a9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:94:b5:bc:11:37:ff:36:e9:00:20:67:2a:4e:
                    82:1c:e3:11:9a:bc:99:1a:63:53:ff:5e:44:5c:e2:
                    09:c7:c4:f8:84:ac:7b:15:9f:5e:c1:12:88:e3:da:
                    68:0f:9b:50:a2:ed:9b:0a:39:29:f0:6e:48:9a:91:
                    27:f1:f0:1c:b1:f5:70:e9:19:a7:58:9a:cc:27:89:
                    cf:d3:c1:a2:49:ed:63:e8:2e:df:98:99:b0:88:45:
                    22:9d:87:a9:e6:02:f1:55:22:96:6d:83:28:75:af:
                    56:de:86:4e:7b:ed:52:bc:f9:64:66:3b:66:25:cb:
                    f6:8f:d3:89:a1:b7:90:86:e9:cc:dd:7a:04:e6:95:
                    e9:5e:ef:7f:57:8f:01:d6:fa:45:37:04:95:79:37:
                    bb:87:c6:c1:3f:f5:ab:5f:f2:3a:ad:78:2f:59:04:
                    23:24:c0:ad:f9:65:f7:cd:a7:18:0d:7e:20:73:42:
                    2b:e2:73:fb:87:07:ef:b0:4b:9e:b2:bc:56:9f:b1:
                    15:f8:88:2d:38:21:18:12:93:14:7e:84:53:73:3c:
                    90:19:92:4f:d0:d2:a1:63:f9:55:76:53:a5:12:6e:
                    0c:31:24:9b:57:b5:06:bc:6f:be:f8:df:6e:fd:70:
                    6e:f9:8f:5c:c7:60:51:ca:28:33:42:48:3c:b8:fd:
                    65:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E0:64:C2:88:32:42:B9:5F:FE:17:E0:E3:6C:EE:79:99:91:EB:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3d9e0365-11d8-3d87-9fe1-e76e21fac978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:70:63:06:b6:7a:7e:42:a7:04:4b:cd:ad:e3:83:e3:57:79:
         7b:31:f3:4a:58:25:68:19:2d:18:cf:ce:6d:62:42:77:7b:9a:
         f3:90:d4:a5:54:54:06:6a:44:70:76:ee:d7:ac:5e:ab:01:d8:
         88:d7:31:33:a7:6e:37:cc:5f:0f:d7:71:bf:91:fd:51:7d:f9:
         15:e9:d4:07:af:ba:73:84:2c:f1:34:0f:79:1b:3b:3e:15:ec:
         68:2d:9a:57:8d:9d:59:a0:0b:27:ba:4e:88:8d:5d:8d:f9:48:
         4f:67:ba:a9:e0:27:6f:27:f1:02:3c:cb:e9:ec:9e:13:7d:34:
         b2:80:b6:4e:01:14:62:bf:9c:ae:b3:2c:10:78:a3:86:47:64:
         7f:a7:67:f9:c5:13:73:e3:2d:47:75:53:da:48:1c:7d:90:14:
         13:12:ac:b7:04:32:4f:a8:93:02:26:04:53:23:20:cf:c9:0c:
         58:fe:d3:f1:8e:31:3a:cb:3b:84:14:1a:1e:54:1d:6c:46:8a:
         71:d5:ad:2e:f3:1a:d0:3e:e3:27:0b:b7:f2:d6:3c:5d:23:68:
         7d:53:a4:ff:30:e0:cb:2d:34:8f:57:81:d1:cf:ae:b1:9f:e0:
         af:29:8a:67:ae:02:ce:5c:7d:47:13:0a:07:83:19:08:5e:ab:
         f3:c2:00:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 00:51:59 2026 by rpki-client