Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d765ace-235e-3c6a-83b2-e5dfc49119d2.roa
File:                     4d765ace-235e-3c6a-83b2-e5dfc49119d2.roa (raw, json)
Hash identifier:          xuw/PGPEU4J4PwwegQQT3RQUdTcHldaXo/+B7JlWTfU=
Subject key identifier:   01:B9:6F:B5:40:98:A5:FD:55:CC:C4:B2:44:07:18:E2:67:69:4F:75
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E0D8439C2B262DB8283944280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d765ace-235e-3c6a-83b2-e5dfc49119d2.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     56347
IP address blocks:        2001:470:542::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:39:c2:b2:62:db:82:83:94:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=c0700393-5d13-4a40-bda7-494c1c7eeb1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bc:b6:8e:18:03:76:e0:5d:be:97:b4:5b:32:
                    b2:75:e8:43:0a:e6:9f:6f:b7:cc:d3:dd:7a:9a:b4:
                    0d:4c:2d:fd:3e:46:65:d5:14:17:01:53:bd:69:78:
                    2b:c5:41:ae:d0:ca:16:85:9b:91:7a:6a:e3:cb:7d:
                    8c:13:1d:fd:c2:8b:f9:87:92:99:7f:67:26:2e:b1:
                    7f:27:91:6f:e7:d6:49:64:8c:31:52:d9:d5:8e:dd:
                    77:a2:0d:ac:0b:9d:40:4b:5d:35:19:a6:c8:af:93:
                    3d:c2:1c:0e:5c:7c:d0:e3:a3:72:8e:42:a8:4e:b7:
                    26:54:76:fa:c6:67:6e:ca:6a:5e:4e:69:91:8a:34:
                    95:5f:c1:ea:03:4d:4e:ef:30:2b:a4:89:e7:57:ff:
                    4b:05:d0:79:38:4f:ae:b1:f3:89:01:ea:38:df:d9:
                    1a:99:78:35:c6:a3:6e:53:56:8e:59:89:ad:6f:fb:
                    82:45:1a:36:1d:ff:7a:d5:f7:5d:f6:63:68:d9:5b:
                    4a:d8:a7:e7:a8:c1:59:2d:eb:86:ba:83:90:15:3d:
                    0a:97:84:b8:6a:01:b5:e3:23:33:d4:2c:48:e3:62:
                    a4:de:db:92:a0:da:26:e6:7f:45:a9:df:f9:9e:57:
                    09:c5:f7:b8:5f:35:e2:c6:77:14:8c:c7:c2:28:c2:
                    03:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B9:6F:B5:40:98:A5:FD:55:CC:C4:B2:44:07:18:E2:67:69:4F:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d765ace-235e-3c6a-83b2-e5dfc49119d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:542::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:02:55:07:52:a0:42:f2:8a:e3:84:3c:fb:64:59:dd:b8:ca:
         73:04:d1:a7:08:b4:94:d4:df:92:e8:ad:b7:d7:84:1b:8b:b5:
         34:64:8d:12:6f:89:c2:2b:06:88:27:17:84:29:fe:dd:e5:3e:
         19:4c:bd:0c:52:ac:a3:a9:c9:1c:4d:3a:a6:11:e6:f4:f5:97:
         13:88:36:b8:e3:13:e2:65:46:2b:59:8a:fc:05:3e:4d:2d:51:
         66:54:20:c8:31:0c:b2:3d:e0:88:f9:6c:72:47:c4:91:17:5d:
         b5:c6:cc:03:be:31:7d:83:d6:1c:73:5e:d3:57:28:b3:57:24:
         8c:85:67:4e:c8:6d:df:83:6b:72:b0:e9:f3:59:61:41:27:8b:
         02:5e:42:66:d1:2c:37:ca:0d:05:68:4a:7c:3e:73:ea:a3:2e:
         ba:1e:11:60:4f:8c:21:fd:8b:25:d9:06:45:a6:dc:c2:f2:1d:
         b1:68:53:c8:3a:df:16:de:5e:36:12:3a:7f:77:bf:11:f2:88:
         aa:5b:e8:a4:1e:51:97:44:b1:45:f0:9f:8e:f3:6d:46:3a:82:
         57:aa:a2:1f:6a:7d:d2:d7:fb:25:0d:d8:25:d7:bd:6e:c2:d1:
         be:24:87:37:ba:1c:41:fa:93:37:db:ca:ab:ca:29:c7:56:7c:
         67:2a:bb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 16:35:30 2026 by rpki-client