Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9c012a43-a7f3-3901-85c6-fe671914ce92.roa
File:                     9c012a43-a7f3-3901-85c6-fe671914ce92.roa (raw, json)
Hash identifier:          d0m0HKy/1kRickAlrG9gP04PCMeFRsh/zJqSx90+6JU=
Subject key identifier:   12:9E:41:63:46:68:E4:7D:1B:65:D2:B5:53:99:67:6D:48:9E:7E:1E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F55701B1C6B1B7C1D09C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9c012a43-a7f3-3901-85c6-fe671914ce92.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     396003
IP address blocks:        2001:470:289::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Jun 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:55:70:1b:1c:6b:1b:7c:1d:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=50957cfb-2c5f-447a-8485-3876befa1455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:77:9e:9f:9a:5b:c2:37:ea:40:eb:41:26:48:
                    8b:d1:c7:26:3e:e4:1c:36:3f:4c:a2:de:3a:8e:9b:
                    9c:9e:32:8c:6d:47:5f:36:82:95:01:0a:54:4a:da:
                    52:de:a7:23:d9:2b:98:1e:62:22:e0:f4:4c:0c:85:
                    aa:a3:0b:41:4a:e4:49:f3:97:3d:32:16:10:bf:b0:
                    f7:a4:ee:0f:d4:92:94:99:80:ed:e0:7d:c1:81:21:
                    71:8c:71:bc:d5:75:88:71:75:7a:61:65:02:59:e9:
                    8b:ab:86:0f:b9:45:34:6f:c3:3f:73:8e:d9:1e:19:
                    a2:09:73:07:51:5a:1a:fe:2d:bf:8f:d7:c3:d5:59:
                    80:92:eb:dc:5d:a3:17:fc:1d:bf:cb:68:5e:04:c5:
                    67:ba:6b:71:24:53:ec:c4:18:70:91:39:29:6e:13:
                    fa:4b:70:78:fe:c5:5c:f6:34:53:84:8c:a1:6e:0c:
                    a3:2a:1e:b7:a5:f1:90:4b:72:26:ff:d8:0e:fb:77:
                    07:ac:65:c7:6a:0c:d0:a4:a4:eb:cf:df:88:cc:ea:
                    a3:7e:c1:e2:74:0d:dc:e4:38:ac:b8:87:74:12:fb:
                    6c:e5:24:cf:ea:55:a9:91:3e:26:14:6a:9a:6c:33:
                    d3:e3:74:d2:ee:11:45:95:c9:34:b7:67:7e:1c:50:
                    15:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9E:41:63:46:68:E4:7D:1B:65:D2:B5:53:99:67:6D:48:9E:7E:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9c012a43-a7f3-3901-85c6-fe671914ce92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:289::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:8b:55:08:5b:90:4c:ba:b6:62:e9:a3:39:95:47:ad:fe:f7:
         57:0a:a1:0d:6b:80:b4:72:b7:69:32:c2:6d:ee:6c:72:64:ae:
         74:1f:71:98:04:11:c5:f4:ec:ec:62:1d:d0:29:ea:17:66:3d:
         1f:ed:b6:db:54:c9:fb:36:9c:2b:7e:22:0f:e8:d9:bd:9d:3f:
         db:3e:2d:40:20:4c:72:f9:9e:f6:9e:0d:fb:16:e2:ee:76:6a:
         d5:b5:0a:c8:c9:fe:0d:4b:a9:a4:05:b3:10:ab:64:5d:ce:c4:
         50:e0:71:26:6b:04:0c:3c:4e:5b:ce:35:e6:46:ef:b7:e0:24:
         d1:28:f5:5a:b7:5d:cf:56:79:01:db:96:05:e5:01:fd:e7:8a:
         30:b2:d1:6f:78:cd:74:e4:79:58:74:bb:f8:d8:25:a7:26:46:
         83:e5:23:2c:09:ec:fe:ee:ac:d1:69:e6:5d:c6:06:fb:16:de:
         86:aa:0b:e2:d1:d3:e5:a9:26:3a:6d:40:67:57:3a:63:ba:a1:
         24:5a:04:ca:bd:be:00:3b:38:02:da:78:cf:f6:6e:76:e3:c6:
         06:59:29:0f:04:0c:cb:17:2f:64:e1:70:6e:6e:bd:2f:77:15:
         e9:53:fa:dc:05:13:ce:4d:d0:b1:ee:c4:fb:a6:bf:96:4c:b3:
         03:e9:19:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 10:54:27 2026 by rpki-client