Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6791408a-1db3-3b07-bda4-28a5b1fd839c.roa
File:                     6791408a-1db3-3b07-bda4-28a5b1fd839c.roa (raw, json)
Hash identifier:          RVSq3EpHaZmvHePpT0nxyBe1fsEqkoMJLIM0WyxI4AQ=
Subject key identifier:   05:39:3B:C2:95:72:F3:41:A3:99:F6:32:3A:28:BF:27:35:36:6C:2B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E54B4EC9EE3C4BD2F68F663E4
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6791408a-1db3-3b07-bda4-28a5b1fd839c.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     401725
IP address blocks:        2001:470:2f1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:ec:9e:e3:c4:bd:2f:68:f6:63:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=1792ea27-7d11-4909-b1e1-b72fafcbdbd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:f4:d0:53:5d:09:fe:80:a5:c7:74:26:7d:
                    a0:7e:e8:6a:c6:1a:14:7e:e4:5f:42:13:9b:31:e2:
                    71:f1:58:6e:3e:e4:82:09:09:52:9a:d9:9f:f3:0f:
                    66:95:cd:a6:ec:1e:3c:a1:cd:e8:8f:8a:18:6e:9d:
                    12:4b:55:a7:98:cf:7c:9b:68:d3:56:ff:1f:92:3d:
                    50:cc:81:86:6d:d6:22:7b:e9:27:72:e3:bb:93:4a:
                    95:7e:17:99:91:1d:2d:2e:88:3c:a8:99:53:35:be:
                    92:2f:61:1c:56:0d:ec:f5:7e:84:32:4a:ab:89:17:
                    b6:ab:c8:60:0f:97:f0:7c:8f:d9:9e:d5:be:4f:ab:
                    c6:a2:1e:33:6b:31:94:8b:f5:d9:ec:e2:2e:4a:ac:
                    47:90:3b:d4:cb:82:56:ba:f4:2d:d9:9f:7c:05:00:
                    c2:2e:ec:8a:84:d4:8d:b6:a3:2b:0e:6d:e9:85:77:
                    a8:fb:5c:48:0a:62:4d:8a:26:7b:f9:b7:43:8d:4a:
                    3e:bc:ee:ee:68:24:25:8f:25:43:b9:36:4e:0f:54:
                    17:12:2e:62:95:93:62:43:db:70:15:59:c8:3a:b8:
                    23:a1:b9:93:84:0c:25:54:f2:bf:cc:76:9f:59:46:
                    c2:0a:bd:cc:c5:30:ba:4b:5a:9b:e3:50:cf:d9:06:
                    c4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:39:3B:C2:95:72:F3:41:A3:99:F6:32:3A:28:BF:27:35:36:6C:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6791408a-1db3-3b07-bda4-28a5b1fd839c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2f1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:56:b2:d8:cf:ac:4b:2b:55:86:31:4a:eb:75:82:af:9a:4f:
         64:0f:ec:8c:ef:8b:5d:b2:f8:cf:c2:1f:3c:64:87:93:f0:a2:
         19:3d:f7:46:29:05:71:c2:48:bc:27:da:4a:c2:dd:e7:b7:15:
         bd:6c:84:b1:52:91:07:9b:b7:ca:b3:bd:80:4c:fe:1a:11:94:
         03:6a:fc:7b:ec:71:ae:15:3f:3b:df:0d:b4:f1:50:01:5e:98:
         64:3a:dc:6f:7e:c9:d0:0b:34:bc:c3:a0:ad:75:3c:6c:3e:7d:
         3f:85:0b:38:3b:32:31:13:bb:8f:00:bf:1f:bb:74:9f:e7:fa:
         a4:09:a8:43:f3:a2:e1:32:1c:04:c1:e2:ab:5b:d2:af:63:55:
         15:69:b6:d0:d6:3f:5d:c8:82:41:83:f3:fb:06:ea:ba:57:ba:
         c0:87:bb:51:25:c9:f5:9b:c7:d0:67:33:46:0a:a9:01:47:46:
         83:c7:9c:e3:9b:06:8f:d1:5b:cc:cf:87:cb:48:62:3d:d0:1a:
         76:1d:df:5e:3f:88:74:7e:a6:98:34:cb:4f:c1:1c:a2:e4:df:
         06:63:55:b9:64:19:e3:24:45:55:d2:d7:d8:85:b9:bf:dd:77:
         60:1d:fb:bc:a7:b9:9b:2e:e5:cb:4d:2e:71:3b:2d:34:c4:d7:
         f4:10:13:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:20:27 2026 by rpki-client