Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6791408a-1db3-3b07-bda4-28a5b1fd839c.roa
File:                     6791408a-1db3-3b07-bda4-28a5b1fd839c.roa (raw, json)
Hash identifier:          u1HpFaRboYXkoeUtkzWWwPaMNbGngYwkx6kVGcmkxrY=
Subject key identifier:   71:BE:3C:ED:E4:1E:BB:BC:B4:58:1C:23:90:16:4A:66:8D:EB:9B:9B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D74701D97A41768A3149E0980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6791408a-1db3-3b07-bda4-28a5b1fd839c.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     401725
IP address blocks:        2001:470:2f1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:70:1d:97:a4:17:68:a3:14:9e:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=b198317c-03d5-4c40-bdb1-b336f2aea41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:83:11:ff:5f:4a:74:42:19:16:b0:c2:c1:68:
                    97:f2:0f:dd:bd:cd:7f:02:42:05:81:24:0b:23:f7:
                    93:54:5b:da:d6:78:31:76:0f:7b:70:ad:da:60:f7:
                    06:6f:e3:a1:fc:43:82:eb:89:7a:f0:d8:70:fe:e3:
                    e3:f1:81:f6:6a:d1:a6:15:e9:19:75:07:51:ac:22:
                    7f:33:23:b8:1f:a0:d2:fb:48:bd:57:14:1b:04:08:
                    fc:aa:b7:c9:84:50:89:ff:2c:1e:8e:b7:8b:9f:f2:
                    55:7b:f9:07:47:08:3e:bb:79:a2:9f:d7:b8:72:e6:
                    bf:5d:02:cc:8b:86:89:e6:d9:0f:48:6d:09:ab:0e:
                    92:a8:45:eb:16:3a:7d:02:06:22:cc:5b:8c:6a:5c:
                    07:d7:45:6a:af:fe:0f:77:e7:da:bc:0b:38:75:ee:
                    f0:56:60:47:c5:97:33:23:3e:f6:c2:e6:d4:c2:7e:
                    fc:d0:57:00:0d:69:32:65:7b:f8:96:d5:74:30:dd:
                    f1:6d:67:62:3d:44:e9:cd:d5:83:02:da:70:4c:07:
                    8c:64:1e:4d:e8:d6:43:51:3b:6a:a0:d7:91:d1:ae:
                    13:24:ed:c6:b4:4e:9f:a9:4f:fa:a4:90:c3:64:2d:
                    b6:18:56:78:41:9e:e4:bd:c6:1e:79:b9:75:60:f2:
                    56:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BE:3C:ED:E4:1E:BB:BC:B4:58:1C:23:90:16:4A:66:8D:EB:9B:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6791408a-1db3-3b07-bda4-28a5b1fd839c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2f1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ae:76:59:4b:f9:d7:76:8c:51:83:be:8f:05:cf:15:32:e8:
         32:f5:a0:df:68:b0:8f:88:26:99:25:e6:1f:e1:38:fc:a4:f9:
         ed:eb:ef:b9:4f:06:b1:06:e7:19:aa:09:d3:29:e9:63:67:91:
         c6:98:fe:3d:0a:2e:ae:97:54:2d:1e:a1:de:cc:cd:ae:28:43:
         3f:50:20:3c:34:29:52:88:d1:86:d7:b6:92:d1:cc:59:7c:d0:
         e9:46:b9:ec:1e:70:82:5c:7d:c6:65:c5:c4:83:31:86:2d:bd:
         ce:3b:d0:21:f8:0f:12:f2:a8:60:3c:87:78:23:cb:c4:01:ab:
         28:ae:1d:37:20:82:40:ad:25:bb:43:47:c2:69:ff:d9:cf:15:
         c3:6d:3c:8e:99:03:f3:67:61:a9:6c:93:f1:24:6f:fd:9b:d9:
         9d:db:4a:0c:d6:53:ab:bc:ca:73:08:a4:71:69:ab:c4:e9:31:
         0c:fa:28:7d:10:f6:a1:fd:10:e0:75:03:79:da:42:35:94:97:
         82:01:dc:cf:4c:63:45:d8:49:15:e6:ca:e7:53:f7:48:51:cd:
         fe:7d:05:8f:ea:d0:61:98:90:d3:50:d8:f3:d2:a1:3e:13:85:
         13:11:82:90:45:be:29:b6:73:fc:e6:51:74:77:6e:d6:a5:23:
         7f:3c:a7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 19:23:24 2026 by rpki-client