Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/55c20cc7-7931-3245-afa2-6d3c289c1610.roa
File:                     55c20cc7-7931-3245-afa2-6d3c289c1610.roa (raw, json)
Hash identifier:          zAErBk5ZJ9Z+UKKTEGDhPuZO6yyyBzJqIPpwPysLHmU=
Subject key identifier:   B9:78:23:80:01:92:16:97:B1:7A:69:79:3D:68:B6:7B:83:13:69:06
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E0A700AC87FF6F70E87E08260
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/55c20cc7-7931-3245-afa2-6d3c289c1610.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     6698
IP address blocks:        2001:470:43a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:70:0a:c8:7f:f6:f7:0e:87:e0:82:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=a2472ec7-e05e-420a-94e8-bc3d2ad5f34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e0:b5:9f:36:e1:9d:5f:b2:03:14:da:f8:43:
                    d9:5c:e2:43:32:c2:45:af:36:fd:28:6e:53:e4:36:
                    68:7a:84:6c:f1:1b:02:15:1b:2c:3f:e7:44:3b:b3:
                    4e:0a:96:74:e6:79:f1:8a:f3:1b:3d:e7:bb:47:eb:
                    30:0b:b1:64:f6:f9:2a:87:e9:35:5f:de:26:a6:4a:
                    e1:67:06:8d:30:c7:4b:bc:f2:db:0d:e9:2f:70:4a:
                    c6:eb:3c:b6:15:41:3c:d8:56:63:b6:6f:a1:be:79:
                    29:81:03:2a:dc:43:3d:d8:da:91:07:fe:32:51:4e:
                    ad:99:99:88:d5:60:ed:9e:38:c7:ac:1a:1c:1f:86:
                    f3:f9:7e:13:fe:c1:ce:0b:91:d4:c4:d2:1b:01:9e:
                    a5:e6:02:a4:01:18:44:52:0e:8b:24:c7:4b:41:d0:
                    6c:cc:e9:49:58:ba:5b:46:46:fd:98:42:3d:8f:79:
                    be:92:e6:5f:f3:82:22:63:90:68:eb:05:49:a5:b7:
                    a3:31:7a:c8:27:e5:54:31:3e:82:12:27:89:b2:ae:
                    8e:c5:05:51:4d:ec:ce:5b:dd:ce:52:b9:59:91:00:
                    ab:6f:ff:b5:9a:01:75:c3:1b:2c:08:8c:61:a1:ff:
                    79:17:fb:5f:77:5d:e6:fe:a6:10:d8:67:fd:cb:b0:
                    27:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:78:23:80:01:92:16:97:B1:7A:69:79:3D:68:B6:7B:83:13:69:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/55c20cc7-7931-3245-afa2-6d3c289c1610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:43a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:15:e6:4d:4a:81:26:07:a3:9e:65:a6:17:46:45:c0:52:68:
         7c:fb:55:7f:5a:a7:2c:e6:69:dd:2d:5d:30:df:a4:14:69:6b:
         d8:3b:fd:eb:3d:cb:00:80:98:61:94:ae:0c:d0:8a:6e:96:2a:
         8c:a0:1a:c9:f0:c0:f8:a7:f0:34:d6:3b:d7:39:6c:87:81:5d:
         82:e2:30:de:44:ac:58:1c:0e:eb:8a:fa:ee:fc:f2:18:39:66:
         7f:39:19:af:c6:48:fa:fb:b2:90:11:f8:1b:94:06:07:4d:70:
         35:38:0d:86:ba:1b:d8:d0:70:3c:33:4e:db:44:31:cd:27:15:
         4f:dc:02:9d:aa:5d:08:8c:39:53:0e:15:c1:88:e1:31:f5:70:
         73:c2:12:44:2e:d3:34:22:a5:64:3f:2c:4e:ee:12:13:2a:0e:
         c5:50:9a:5a:4d:45:79:e0:96:63:7e:b6:5d:7f:6a:f9:36:16:
         69:bd:9b:0b:dd:07:b4:58:5a:7f:8b:11:94:f2:65:5b:50:4c:
         4d:fd:fc:84:0b:cc:76:68:96:94:1f:cd:7d:57:b6:4c:2b:bd:
         bc:f3:39:66:a8:49:98:b9:fb:8c:0e:48:1f:d0:36:e4:18:82:
         bd:98:76:7c:22:94:71:88:85:27:48:ee:92:26:2a:21:5c:b6:
         6b:e5:02:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 16:38:31 2026 by rpki-client