Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/79dccb1b-7463-3753-9de5-d4cf6769fe1e.roa
File:                     79dccb1b-7463-3753-9de5-d4cf6769fe1e.roa (raw, json)
Hash identifier:          TIbj9Jx2oZuYb7oAhhPtWo94EF3CL7ILVtWoIiQJLv4=
Subject key identifier:   E9:2F:97:D5:C2:1F:17:E1:A6:31:1F:0D:AB:46:F7:7A:A8:62:5F:C8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DE41B49853862375EDB570F40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/79dccb1b-7463-3753-9de5-d4cf6769fe1e.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     12129
IP address blocks:        2001:470:36a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:49:85:38:62:37:5e:db:57:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=42b7165f-f436-4793-96b1-5cc0aabddfe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e7:7c:c7:49:26:c0:c0:a1:c2:03:9a:f2:93:
                    15:b5:17:8f:4a:e4:de:91:fb:0f:8e:c6:ac:fd:48:
                    35:f0:b6:ba:dc:3f:74:df:ee:43:16:96:fa:3a:dd:
                    1f:b0:e5:84:f4:c2:91:95:41:6d:c8:94:fd:48:41:
                    4b:07:73:35:4f:cf:51:1f:41:42:20:b2:73:7f:17:
                    4f:c2:79:07:11:45:32:60:5b:fe:f4:de:f2:19:3e:
                    ae:d4:f9:49:be:68:72:76:61:25:44:2c:10:db:e6:
                    73:61:ab:bc:b0:fa:3e:90:0d:f9:2c:e2:27:95:81:
                    29:49:ea:48:d2:ff:94:51:55:3d:95:e5:b3:d9:0f:
                    45:37:c4:90:60:cd:b4:c8:b0:c8:05:b2:49:20:8d:
                    7a:36:09:e9:e0:43:07:16:95:b9:f4:df:e5:e8:70:
                    0d:bb:5a:4c:0a:57:e7:38:0e:d5:9e:c8:88:a7:6b:
                    6c:35:63:be:54:bf:b9:19:28:47:16:ef:73:14:ae:
                    18:73:fe:15:1e:9f:5d:34:1d:c0:b7:f2:84:3e:e2:
                    3a:80:2e:c1:dd:64:c1:51:8c:fc:ed:23:af:8f:dd:
                    c6:f5:f8:55:30:93:d6:75:42:37:bb:a5:11:ea:2d:
                    a9:74:4a:75:49:ff:94:b8:0c:c1:b0:43:71:27:fd:
                    bb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2F:97:D5:C2:1F:17:E1:A6:31:1F:0D:AB:46:F7:7A:A8:62:5F:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/79dccb1b-7463-3753-9de5-d4cf6769fe1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:36a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:72:08:9e:a4:d0:84:e3:78:de:0f:55:69:ac:57:5e:c5:db:
         fd:9b:e8:59:80:3f:3d:1c:18:8a:43:0d:a4:8b:27:f3:83:fc:
         cb:ea:0d:f5:fc:1f:84:aa:07:cf:e4:c7:2a:ea:74:73:02:f2:
         64:fd:90:1e:b3:ee:44:51:4a:9e:df:30:ed:97:df:7c:3d:b3:
         ea:cd:39:f7:9f:2f:c3:bc:cc:cf:d9:80:6f:dd:63:65:c7:fe:
         24:45:aa:af:d0:a2:1a:da:a9:43:ed:50:8f:01:61:68:ee:fa:
         15:d2:c4:a0:6e:67:93:15:35:fe:5b:69:61:15:43:04:d0:0e:
         0e:1f:71:9e:9f:74:66:48:89:c5:11:4a:b6:e8:98:3f:de:a4:
         c1:62:27:2b:c7:64:9c:de:30:69:a6:03:05:d5:ef:04:15:0c:
         50:9a:70:e6:6e:64:e3:31:06:2d:39:e7:24:ac:85:64:96:76:
         b7:5e:89:63:0a:ff:08:15:d5:9e:30:b7:59:65:ac:ab:70:52:
         91:9c:33:36:2d:8b:3e:d1:27:c6:82:b8:7b:a8:da:3f:49:51:
         67:78:03:dd:ff:ca:a8:a0:06:5e:f0:37:e7:ed:50:e3:ca:34:
         7f:f6:3c:12:e4:d2:7b:65:53:49:27:18:5e:fd:85:d2:ce:11:
         0a:35:d0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 16:36:03 2026 by rpki-client