Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6cc32edc-e15e-3794-8b75-05c4b3dc233b.roa
File:                     6cc32edc-e15e-3794-8b75-05c4b3dc233b.roa (raw, json)
Hash identifier:          5Fdn19gjPf5CulwbzpNRZdD3X2WshwlE102hv4KK9U0=
Subject key identifier:   6B:28:80:43:24:17:0B:BA:B6:19:CE:12:C8:66:40:9A:BE:CA:AE:50
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA90EA37D0E175060CCE00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6cc32edc-e15e-3794-8b75-05c4b3dc233b.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     204875
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:90:ea:37:d0:e1:75:06:0c:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=5fcbc257-1ecc-41f0-9a7e-fd5a9bc2da68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f7:27:ed:5e:50:f0:90:5d:b1:cc:19:a5:6d:
                    24:59:55:0d:90:17:19:c8:05:b7:3d:a3:24:76:44:
                    2d:8e:d0:03:8e:5c:b8:ea:5d:2c:2e:7a:c7:46:c7:
                    44:58:c8:10:1c:dc:27:bf:f5:16:9a:e9:b5:f4:6c:
                    58:44:77:6a:d7:16:3b:02:b8:89:2b:cd:f5:92:a1:
                    3b:de:77:d7:db:10:14:65:71:38:25:83:93:f0:44:
                    07:69:90:65:46:2d:ef:f1:72:69:39:e1:17:31:96:
                    c4:ee:ac:10:df:68:55:28:2a:1e:ab:fb:dd:65:5e:
                    86:e1:aa:13:b1:34:1a:6f:cf:05:01:a9:79:c1:c5:
                    8f:a4:a8:4d:b6:f3:99:05:9f:88:09:e8:63:52:03:
                    2d:ed:0a:af:54:81:f4:53:27:53:de:f2:56:3f:14:
                    36:cc:b9:a4:a7:8c:3f:0f:77:26:01:e4:d7:9c:95:
                    0b:42:fb:0d:f8:5d:41:08:25:90:b5:ae:d2:71:bd:
                    61:da:44:05:f9:4d:98:d4:b6:ce:b4:67:25:81:07:
                    bc:33:15:3f:12:19:dc:da:88:32:80:44:12:78:11:
                    5c:2e:a4:a0:09:ef:99:d2:da:1c:f7:b6:b2:93:50:
                    de:63:d5:fc:af:04:c5:2e:18:1d:c3:2a:21:60:62:
                    da:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:28:80:43:24:17:0B:BA:B6:19:CE:12:C8:66:40:9A:BE:CA:AE:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6cc32edc-e15e-3794-8b75-05c4b3dc233b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:5d:9e:5e:b9:8f:4e:95:ff:f2:05:1e:ad:93:68:49:ef:33:
         84:81:f7:9b:3e:ad:52:35:b4:33:a8:f2:0a:c9:73:0a:fb:15:
         29:a2:e7:e0:b4:74:ab:16:1d:07:46:fe:77:6a:5a:ed:de:ae:
         a8:36:a6:67:a9:f1:11:62:07:4f:5e:90:5b:35:fa:35:d6:45:
         17:a3:d8:ee:56:df:cd:8c:a2:29:da:85:a9:a5:3e:18:dd:bd:
         58:51:83:63:e0:4c:20:84:c1:da:70:78:42:18:fb:b9:c9:b1:
         c8:8e:61:48:cf:7c:04:ae:86:2b:f1:db:d9:91:f5:dc:82:52:
         74:f7:43:92:99:59:31:f3:2b:56:f9:bd:05:67:fd:77:1a:0d:
         0a:9a:8d:98:67:c7:7f:e9:3e:c3:0b:6f:04:2a:86:f2:56:cf:
         94:0c:01:e8:e7:25:83:90:c8:97:35:9e:2f:b7:a3:83:89:4a:
         a2:dd:2a:d8:c1:90:cb:bf:b4:6a:58:9f:f9:97:95:78:8f:3a:
         ba:cc:36:e9:c7:45:b8:61:7d:09:93:6f:3c:bc:78:99:f9:58:
         ba:b5:1d:4b:3b:7d:c6:c6:68:e6:38:4a:2b:bd:0a:67:e4:ab:
         11:55:91:f0:53:df:8c:0c:b9:c5:f5:fb:d5:3a:73:3b:45:b7:
         e2:c0:8f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 17:59:21 2026 by rpki-client