Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e095c3c-157c-3a77-af99-2101d8759075.roa
File:                     3e095c3c-157c-3a77-af99-2101d8759075.roa (raw, json)
Hash identifier:          mau2QSwg8nABqTBSuGOyalLMgCaTP6Bbwmz47UkneFs=
Subject key identifier:   8E:BF:69:10:67:7C:C8:33:A1:1A:E3:ED:EC:03:16:23:E3:72:91:DE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DE84B5D409D3B7660B0927080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e095c3c-157c-3a77-af99-2101d8759075.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     398362
IP address blocks:        2001:470:1b4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:5d:40:9d:3b:76:60:b0:92:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=a84eca0a-1059-449f-8226-c96086b85eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:4c:69:a3:bf:5b:8d:f8:16:05:6d:79:fa:
                    92:8f:69:00:f0:dd:3e:c7:85:d1:73:08:a3:aa:9b:
                    fe:d3:d5:f5:86:a9:1a:d4:7c:0a:8e:70:7a:03:db:
                    90:cb:6c:44:a3:9e:27:87:ab:e4:51:66:1c:1c:54:
                    d9:fa:4c:fa:a0:c5:4f:a2:d3:6f:61:ff:e3:ac:ad:
                    7f:8d:f5:b9:ad:b4:1f:a7:88:1f:54:4c:82:76:64:
                    39:fb:8f:d0:91:7a:b9:00:93:e1:2a:19:f9:9f:5e:
                    ae:73:0f:89:8b:09:e9:bd:97:78:d5:48:2f:cd:7e:
                    67:85:96:10:32:0a:27:46:26:06:bd:a6:77:bd:77:
                    ea:ff:f7:2a:8e:71:69:04:31:4a:b5:6a:54:99:ad:
                    80:76:f3:9c:01:48:9a:dd:9d:28:cd:2a:8c:6a:7b:
                    be:2a:89:62:b4:80:6e:7f:3a:a4:b3:7c:61:0c:0d:
                    58:cf:19:52:04:92:d7:52:2a:60:05:d2:56:15:1e:
                    1a:59:62:39:28:50:a8:7e:28:51:ee:e4:7f:0c:96:
                    dc:15:46:c3:02:7b:56:9d:13:ca:c5:9e:3c:90:91:
                    b9:7a:a3:60:74:6b:75:7a:6b:7c:05:21:7e:60:de:
                    7b:d2:c5:25:2b:da:a0:d7:e6:4b:bd:6e:dc:34:cb:
                    62:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BF:69:10:67:7C:C8:33:A1:1A:E3:ED:EC:03:16:23:E3:72:91:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e095c3c-157c-3a77-af99-2101d8759075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1b4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:f4:dd:e9:88:53:eb:12:99:bc:22:24:92:41:c5:44:c3:e5:
         a8:6f:7c:18:a7:af:c3:45:38:b0:d7:4e:fd:e1:0d:f0:8e:27:
         99:61:34:5a:e4:f2:a2:49:0d:2e:c3:19:90:33:32:f1:92:53:
         03:5b:d4:ad:6f:eb:1d:53:00:b5:ec:de:cd:a3:09:ae:ac:88:
         c9:88:cc:d1:85:82:6e:8b:7a:f6:cd:bf:85:0f:1a:2d:e7:4e:
         2a:5e:35:9a:f7:47:79:30:87:c5:cd:78:22:32:3f:28:5a:76:
         18:4c:f7:36:0a:ce:c7:3e:2d:38:42:e9:6c:ef:35:12:03:de:
         5d:09:ab:b5:cf:62:0b:3c:42:36:00:94:2a:91:3c:9b:12:f3:
         cb:13:5e:8f:0d:0e:b6:ef:af:89:07:aa:4a:4d:aa:19:9d:b2:
         df:58:21:a8:fa:3b:e5:2b:63:15:5f:e7:40:a9:b7:02:03:ab:
         56:0e:16:54:39:89:84:03:7f:cf:8b:81:74:ef:c6:a2:3e:29:
         bc:97:82:cf:e6:5b:5a:ac:24:23:05:92:81:39:e7:1c:3a:3e:
         7c:51:f5:d0:c1:e7:fc:ed:8f:40:d2:f5:a1:a3:6c:71:9d:06:
         3d:a2:86:da:1c:d6:81:91:c6:ff:a1:c4:48:78:63:f1:77:38:
         73:f9:00:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 16:37:25 2026 by rpki-client