Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/592afb25-9d2f-3d3c-99d5-be72df3d0d6e.roa
File:                     592afb25-9d2f-3d3c-99d5-be72df3d0d6e.roa (raw, json)
Hash identifier:          U+WpHx0306LBN5jpuXTobaj//omu9GKNaS3YHB7Xa0Y=
Subject key identifier:   B2:55:C1:D6:1C:9F:28:D5:6D:F9:6B:AE:E3:A4:26:8F:36:C9:1F:45
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E0D84399416317BE1E626EF00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/592afb25-9d2f-3d3c-99d5-be72df3d0d6e.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     16324
IP address blocks:        2001:470:542::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:39:94:16:31:7b:e1:e6:26:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=bb66cdb3-a225-4de3-a81d-90fbce05ee99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1a:44:a1:89:42:86:9a:2f:d9:35:d5:eb:3f:
                    50:a1:15:d7:1e:4e:8d:e4:29:e1:17:36:a6:5b:62:
                    b6:f7:24:e7:b4:fd:c2:28:a7:77:13:29:7a:ee:ff:
                    fa:6b:d1:f5:73:aa:24:57:ca:68:c8:80:62:c9:8d:
                    f3:18:e2:22:bb:41:73:e9:ed:e6:f3:48:b7:a0:0e:
                    1c:5c:18:a1:4f:dc:3d:35:f8:ab:90:32:10:d8:9f:
                    1a:c0:12:02:b9:e1:49:d0:ef:a7:61:04:da:5f:26:
                    86:14:45:e8:f5:f9:85:51:03:10:d7:f4:b0:a8:94:
                    1f:47:7f:cd:7d:1d:34:d8:60:cf:8a:33:2b:70:a1:
                    7c:2e:05:33:9c:cd:cb:32:e7:55:7f:9b:7c:d8:95:
                    7b:c0:b6:c9:42:98:23:f2:1d:39:31:5c:71:22:76:
                    f8:50:72:3e:43:29:a2:c1:89:b9:1b:7c:e4:9d:22:
                    2f:59:7d:1a:e9:f4:9b:e4:f5:d8:68:29:f9:4f:c5:
                    74:23:33:6b:1e:a4:fa:f3:8f:15:d9:8a:ee:70:24:
                    67:96:48:26:49:51:c8:96:f4:fb:fb:4f:18:60:60:
                    3f:9e:b4:d5:69:e7:a9:8a:b0:18:50:20:c2:97:17:
                    2c:27:78:f5:3c:84:e5:a6:39:ae:23:7b:f7:b6:00:
                    e5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:55:C1:D6:1C:9F:28:D5:6D:F9:6B:AE:E3:A4:26:8F:36:C9:1F:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/592afb25-9d2f-3d3c-99d5-be72df3d0d6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:542::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:57:d9:c3:03:52:90:f7:4e:da:8c:5b:78:cb:7f:71:5e:d9:
         9f:8d:36:4f:bf:ab:d6:3e:cf:e5:b8:36:56:5e:89:d2:f3:7f:
         49:ea:34:59:c3:39:13:ae:d9:5b:60:26:21:4f:05:e2:68:87:
         8a:ad:cd:ad:25:b7:5b:a9:24:c0:6c:c3:64:de:ae:29:76:87:
         1e:22:57:e0:e8:23:5a:68:ca:c0:95:bc:98:53:46:19:90:f1:
         3a:13:a4:8b:cf:95:c3:a5:47:18:0e:d8:d5:ee:b4:28:d5:fe:
         73:ef:cb:57:d7:ce:cc:f6:88:d7:8e:1b:2e:0c:94:e4:4c:9f:
         76:78:a3:1b:81:4f:38:08:59:3d:b0:07:47:cf:87:b6:c8:9a:
         74:24:1d:7e:d3:66:6c:36:93:5a:6e:e7:79:9d:20:3a:ea:68:
         9d:28:71:91:46:95:8b:1c:2c:d8:bd:62:a0:58:a5:3c:d4:7a:
         2b:c5:6f:97:fe:34:01:63:05:32:1d:16:7e:e0:c5:68:2d:2f:
         b4:f2:ef:68:97:c5:89:89:72:f7:1c:15:3b:7e:41:d7:7c:59:
         d4:05:cc:2a:96:2a:66:b5:e1:b0:0e:6b:48:2c:1b:33:81:c4:
         b9:8e:1c:a3:4c:9b:55:f2:a8:cf:fc:84:db:c2:fc:ac:1f:7b:
         4b:b3:57:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 16:35:26 2026 by rpki-client