Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/963de827-0eb3-39c8-8bee-3f01a20ec876.roa
File:                     963de827-0eb3-39c8-8bee-3f01a20ec876.roa (raw, json)
Hash identifier:          VnVeOzyvkV43rlu/fOyghHvFDhlmFePhxkXzKfW9EqU=
Subject key identifier:   41:34:72:51:0A:C1:4E:5D:4A:C5:7D:69:7E:E8:47:E7:E2:8E:B4:92
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EAAA3E4015DA31AA0CA1E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/963de827-0eb3-39c8-8bee-3f01a20ec876.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     212955
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:aa:3e:40:15:da:31:aa:0c:a1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=54be699a-89c7-4750-ba09-ee4fdd4d777a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:47:d7:16:70:11:2f:75:cd:73:be:68:54:fc:
                    9e:33:8d:06:b3:d3:34:b4:e1:74:71:8b:c0:1f:ab:
                    2f:38:a9:ea:6e:5a:70:c2:f2:b7:46:a8:0a:53:2c:
                    08:8b:17:24:eb:a3:ed:5f:9f:d2:25:06:6d:83:ca:
                    40:71:75:99:dd:fe:7b:e1:c1:f2:86:50:5e:92:ab:
                    bf:dc:25:7c:53:7a:48:95:9b:7a:aa:05:4b:94:88:
                    ea:da:d9:88:d5:70:24:06:16:d9:77:e6:6e:b1:2a:
                    25:ae:37:88:66:d6:30:88:95:29:d7:65:5b:42:39:
                    53:c6:51:0d:93:df:fc:ee:8b:ea:15:cf:86:1c:d1:
                    98:92:7f:60:17:be:57:dc:08:ff:a1:b0:1c:4f:47:
                    3d:8f:42:f3:81:bc:70:d6:21:6d:2d:c6:86:38:ba:
                    a2:df:69:44:65:b3:d6:de:b9:c5:db:3e:96:f8:51:
                    d1:d4:92:2e:20:75:04:c9:02:be:b3:cc:d3:99:73:
                    a2:cb:42:ac:3f:1c:c4:40:7f:ba:98:c4:11:cc:e8:
                    57:e7:c7:b7:9b:6f:ea:8a:ac:f1:dd:f4:f1:83:14:
                    17:4d:fa:ce:f0:bf:2d:36:18:c8:c7:23:ea:10:64:
                    0c:aa:49:43:46:b6:89:d4:3d:98:5a:b1:00:a8:c9:
                    3f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:34:72:51:0A:C1:4E:5D:4A:C5:7D:69:7E:E8:47:E7:E2:8E:B4:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/963de827-0eb3-39c8-8bee-3f01a20ec876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:b8:05:da:34:46:33:0c:e4:2a:73:1c:c5:70:fd:0b:1d:f4:
         27:02:9c:ef:24:3e:1a:18:6c:c1:2c:8d:97:46:e4:83:ca:b3:
         c0:39:20:a8:8f:3e:ec:53:bf:fa:01:ff:cb:4a:2e:58:14:97:
         0a:da:24:07:23:3f:aa:0d:a9:25:61:fb:f4:80:fb:88:8f:4f:
         3c:86:b8:42:27:0e:ba:9d:04:6a:1b:8d:82:da:71:ac:3a:f4:
         c7:69:a7:ab:ea:90:3d:ce:34:28:31:8e:7d:b6:ea:4f:ad:04:
         d5:e9:e2:25:7d:fc:73:bb:b7:14:72:f7:89:57:db:bb:8d:c9:
         d2:d7:78:dc:47:76:30:0b:90:ac:d2:cd:3c:70:93:fd:bf:32:
         48:d6:81:62:8a:87:d9:89:ee:8e:93:3f:a1:e7:1e:bf:55:50:
         cd:b1:57:29:ed:e2:f8:fc:11:10:de:ee:73:18:1b:32:4a:f0:
         b0:66:71:0c:e6:ab:ed:85:74:72:36:cc:59:7c:ca:6c:e2:ca:
         71:8f:1c:19:2a:8e:75:0d:fb:d7:17:f7:c0:d0:cb:3c:33:94:
         4e:b6:54:49:bb:6f:90:d9:39:37:33:d2:cc:04:40:fa:a9:e0:
         44:8c:24:ac:a4:6d:2b:55:e9:cb:04:1b:5f:b2:df:28:49:1a:
         8a:07:67:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 13:57:05 2026 by rpki-client