Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8beb645f-4fc4-3963-85b3-c9b3cdfc965d.roa
File:                     8beb645f-4fc4-3963-85b3-c9b3cdfc965d.roa (raw, json)
Hash identifier:          p+g2yqqQnN2eyG7qywMAWrB4B1NftgYPaxKh6zrCAaI=
Subject key identifier:   C6:07:25:01:91:A1:DD:82:29:6D:15:BF:09:93:E6:C1:BB:B2:FA:1B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DE9BF3DFD4FA6BCF82C551200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8beb645f-4fc4-3963-85b3-c9b3cdfc965d.roa
Signing time:             Fri 22 May 2026 01:30:15 +0000
ROA not before:           Fri 22 May 2026 01:30:15 +0000
ROA not after:            Thu 20 Aug 2026 01:30:15 +0000
asID:                     35168
IP address blocks:        2001:470:598::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:bf:3d:fd:4f:a6:bc:f8:2c:55:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 22 01:30:15 2026 GMT
            Not After : Aug 20 01:30:15 2026 GMT
        Subject: CN=a63722b7-0d91-4696-b463-2f3e3e057c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:78:ab:98:f1:f0:e4:de:90:92:48:a8:9c:71:
                    31:88:bb:98:02:b1:7c:62:b9:48:a3:cb:8f:f0:50:
                    29:0c:98:28:a7:3e:d9:a2:0b:de:dd:d6:c1:1a:a9:
                    c1:b1:2c:52:95:24:b0:49:45:3a:12:10:fb:c6:f5:
                    06:91:cb:a9:82:33:64:fe:24:9b:7f:01:09:14:d9:
                    cc:46:b6:f4:a5:9b:62:ca:fe:3c:2a:9f:63:3b:27:
                    24:bb:75:3f:ee:9d:63:c2:c0:c7:27:61:08:84:9b:
                    1b:89:2d:d4:f0:0c:0f:df:56:e2:1e:40:51:28:64:
                    7d:19:88:79:aa:14:a7:33:d9:fa:e6:38:f6:dc:1a:
                    eb:08:34:5a:1a:12:a4:af:a5:f2:51:bf:c4:39:6b:
                    3e:c4:e9:da:7a:de:73:c4:ca:84:9e:10:6e:fa:72:
                    1c:81:2b:42:0d:99:ac:35:a7:d5:48:0d:a2:49:8b:
                    2e:94:fa:cb:93:13:80:db:ba:a1:91:e3:f7:09:20:
                    15:20:3c:a9:fd:c0:b5:0b:05:75:ff:f6:66:ef:86:
                    70:c9:46:e1:f7:b3:d9:c9:b8:5f:b5:99:ba:2c:c8:
                    41:f7:69:77:07:bd:73:43:43:c8:74:bc:8b:70:19:
                    2c:ce:ef:7d:f0:56:9f:9a:d8:47:d3:58:80:ef:82:
                    32:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:07:25:01:91:A1:DD:82:29:6D:15:BF:09:93:E6:C1:BB:B2:FA:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8beb645f-4fc4-3963-85b3-c9b3cdfc965d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:598::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:fc:10:4a:18:f4:36:98:c7:fa:41:39:54:7c:37:bf:28:d2:
         cf:d4:99:a8:eb:16:03:32:bb:b7:ca:9e:50:da:ed:d3:ef:9c:
         a7:72:c3:a9:44:f0:b8:53:67:25:09:ba:c0:9c:e8:88:1d:41:
         db:71:13:d0:a2:22:94:ff:4c:5c:a0:5a:39:b7:8e:5f:27:42:
         d4:db:f1:8f:bd:98:7e:2d:27:5b:62:ed:48:c8:01:a0:a2:a2:
         61:cc:38:92:5e:5e:c5:11:58:49:6e:77:3f:8c:1b:bc:56:db:
         c6:54:77:74:94:d7:fc:29:87:a1:f0:16:60:ec:cc:40:9c:ae:
         49:71:67:e7:f1:43:11:fb:2f:13:c1:97:93:f8:cb:ae:95:60:
         78:c7:8c:2a:32:8e:bc:b2:70:81:b9:1f:6c:1a:ca:47:91:ca:
         19:fb:29:ea:bb:1f:f5:bc:f9:77:03:92:60:62:27:0a:27:91:
         bd:43:d5:dc:20:05:55:cb:25:5c:b3:14:5d:ee:e2:60:66:63:
         b4:8f:36:24:47:0e:e8:c2:ca:d8:c1:a9:32:d5:b9:a8:c4:07:
         3a:d5:90:81:08:e3:ec:20:05:44:e7:49:29:49:59:62:b0:50:
         f3:4e:ec:75:12:37:f4:71:2b:d5:57:33:b0:98:16:6a:94:f0:
         ba:c9:c2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 15:04:46 2026 by rpki-client