Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82945325-27be-3940-b66b-e46080d0a632.roa
File:                     82945325-27be-3940-b66b-e46080d0a632.roa (raw, json)
Hash identifier:          jHUD8zNGttLjgyB056hyvrMUnW7CyQiBc57VNYpIG6E=
Subject key identifier:   97:88:DF:EA:44:9F:2E:64:5E:15:BC:E3:F5:92:AD:77:87:44:8D:A5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D524389ECBD1C229DFCF0A540
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82945325-27be-3940-b66b-e46080d0a632.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     22612
IP address blocks:        2001:470:c5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 31 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:89:ec:bd:1c:22:9d:fc:f0:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=7042336a-d631-4bd3-9fd5-10903bc502be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:91:ef:6b:a3:6e:f0:a0:7b:90:43:79:28:29:
                    e6:23:7c:8e:0b:b8:9a:32:74:40:9a:58:ae:6f:9b:
                    a1:2b:5d:9d:9b:a2:85:d7:e4:84:7c:77:33:e6:c5:
                    d2:2f:71:7f:2b:bc:e3:fb:80:90:c1:f7:97:42:ed:
                    52:4f:c3:00:ad:c4:61:ac:4c:96:f8:aa:77:ad:98:
                    b8:b5:63:0c:22:f9:1c:bb:27:ee:bc:b7:70:ca:df:
                    18:3a:9d:75:3b:62:0e:ee:7b:4c:cb:f4:dc:48:50:
                    f6:c0:19:81:d7:b8:4b:8a:00:7a:6a:8e:31:66:ff:
                    96:b5:1b:9b:03:4c:db:2a:2e:b9:29:4b:d3:54:58:
                    61:26:c1:99:cd:9a:3d:fa:99:e8:7a:a7:7a:34:6e:
                    93:4d:c3:ea:4c:fa:db:03:da:61:a9:ee:33:0b:f1:
                    08:42:48:32:7d:46:ca:b0:27:0c:ba:4b:b9:1e:36:
                    83:de:2f:f0:8e:c9:1d:a9:ad:67:33:0e:1a:30:0a:
                    0a:6a:34:18:67:05:ab:27:c6:90:7f:aa:75:d3:50:
                    fc:0c:6c:ca:76:21:9d:27:ae:e9:18:e4:f2:df:78:
                    61:60:76:15:af:89:e0:d4:1d:61:7c:c0:6f:5e:d4:
                    7b:9a:2b:63:8e:85:ec:13:a5:c5:1d:20:5b:97:2f:
                    3c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:88:DF:EA:44:9F:2E:64:5E:15:BC:E3:F5:92:AD:77:87:44:8D:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/82945325-27be-3940-b66b-e46080d0a632.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:c5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:fb:36:c8:ea:4b:22:a9:1f:c8:86:b7:61:a8:e4:32:72:a5:
         e8:f2:05:d9:62:e8:c8:53:a0:e9:a3:9e:38:fc:97:04:d1:76:
         55:67:f1:e5:c0:fa:a5:50:18:9e:7c:32:92:bf:16:d1:2b:9b:
         79:a9:ec:15:d1:d0:6f:ae:c0:8f:a8:73:2a:d4:74:d7:4e:72:
         cb:47:a5:d4:7c:e7:3e:99:ba:1c:0a:12:8e:84:e3:35:e4:8b:
         dd:e4:70:fe:73:be:17:64:5d:87:23:39:53:32:e5:d9:25:5e:
         c6:8f:e2:6b:51:e6:5c:fc:44:4b:c7:0a:5e:c0:fe:48:03:90:
         54:3f:7b:46:80:c4:27:5a:2d:0d:b5:57:7e:52:ce:1e:12:6e:
         1b:7b:cc:0b:cc:b1:05:d7:8e:a8:83:bb:c5:ae:86:6f:af:ae:
         00:82:cd:c6:5f:5f:a2:7e:07:47:c6:b1:42:d5:6c:76:88:83:
         76:84:ff:e8:41:25:3b:5a:c7:07:5c:85:be:f0:72:e9:63:74:
         a6:8c:e0:42:80:0e:a5:da:a2:67:54:c6:69:a3:85:d4:81:aa:
         d2:8c:6e:3f:71:14:b1:80:68:f1:e6:9d:55:99:3a:65:ee:4e:
         b3:bc:6c:95:6c:2e:be:c6:cb:b9:4f:06:d7:46:7f:41:c4:5c:
         21:6b:c7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:38:41 2026 by rpki-client