Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f2a078c-c1cb-31bc-befc-fe0d707c0bd8.roa
File:                     5f2a078c-c1cb-31bc-befc-fe0d707c0bd8.roa (raw, json)
Hash identifier:          QXQjhcf/wAmSg9RJg+X34mTVa3e1CNCq9cImVqwoYdQ=
Subject key identifier:   60:FF:75:66:F4:B9:81:36:3F:5B:7E:3B:89:D4:DB:DD:20:3E:92:EA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F570ED6D1D0EAC66E9F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f2a078c-c1cb-31bc-befc-fe0d707c0bd8.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     25820
IP address blocks:        2001:470:2f5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:57:0e:d6:d1:d0:ea:c6:6e:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=1984d5d6-3a22-491f-ad9b-06d7c4c536ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:36:5b:7e:83:17:0a:65:9a:fb:c5:b1:04:10:
                    ae:72:7f:45:cb:98:4e:ae:09:60:af:de:b9:04:a9:
                    77:da:78:d8:2b:a9:00:bf:38:5b:d5:a3:3c:2d:12:
                    bd:62:19:80:1e:0d:90:f2:e5:9f:44:cf:8a:6f:e5:
                    42:06:d3:bb:c8:38:c8:eb:a4:52:4b:50:ad:1d:f5:
                    16:6b:7f:7b:b9:af:a5:2c:90:6d:ef:32:83:5d:a6:
                    3d:d0:a9:29:03:da:f3:74:22:8f:47:2b:79:11:9a:
                    05:10:52:af:31:f2:01:bf:32:05:70:28:aa:67:0e:
                    e2:ba:15:59:a3:f5:2a:70:5d:67:4a:b0:57:db:0b:
                    f4:d1:c0:9f:c5:1f:61:78:b6:66:58:e9:a2:e2:96:
                    26:e0:8a:83:99:14:60:69:5e:1f:d7:1e:76:f2:d5:
                    24:45:9e:2c:07:8d:f3:33:7f:61:56:55:de:db:9d:
                    9e:08:75:33:57:64:d6:38:4f:44:88:d1:ba:44:0f:
                    69:45:5d:6c:12:ec:62:9d:58:c5:1f:9f:90:e9:9d:
                    72:f6:9c:90:9d:de:02:3e:e8:98:04:e3:a0:6b:16:
                    0e:2f:6f:5c:ec:17:0c:30:31:ee:3e:d2:dc:e1:f1:
                    31:ff:f0:47:e4:cb:38:4f:1d:f2:fa:a8:e9:24:2a:
                    43:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FF:75:66:F4:B9:81:36:3F:5B:7E:3B:89:D4:DB:DD:20:3E:92:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f2a078c-c1cb-31bc-befc-fe0d707c0bd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2f5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:09:b7:5f:01:b7:ec:46:87:96:f9:67:6f:39:39:46:0a:b8:
         df:6b:6c:32:02:47:15:39:51:33:2b:7a:50:d0:2f:87:58:06:
         f7:d0:27:42:74:5d:c2:a4:5f:a8:c5:8c:9a:4c:39:46:74:ee:
         36:1b:d6:78:9d:ff:73:5e:22:6c:67:b8:3a:4c:90:55:b8:3e:
         d4:87:0b:34:38:e1:79:5a:b4:06:0c:d5:2d:a8:23:88:7c:47:
         ec:0b:32:94:27:a9:e8:78:58:86:43:27:54:85:96:58:9a:62:
         aa:f2:aa:b2:aa:59:1c:c8:6e:78:9e:59:6a:e0:08:ed:db:78:
         ee:ea:f4:e0:65:c1:8e:ff:a0:b6:93:48:04:c6:f7:ee:9f:7d:
         41:ce:e9:a7:a6:66:51:e7:f2:33:55:33:c9:13:89:1c:f6:c9:
         87:b0:a7:6a:28:52:f4:d8:3f:fa:6a:60:33:ff:b5:97:9b:e6:
         c9:e1:fd:1e:a6:12:a4:57:8f:3b:a0:e6:2b:cc:c5:3d:e3:88:
         ca:cb:09:53:d6:f1:2d:e2:d3:f8:f2:20:c4:2b:a6:97:2e:31:
         e2:f4:5f:42:94:9a:04:78:09:d9:63:15:2a:48:36:b4:a8:62:
         4f:7d:78:d2:cd:5e:3b:e6:00:85:07:f0:ab:44:37:f6:01:00:
         d9:fb:20:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 19:13:50 2026 by rpki-client