Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9a48928-2461-3b39-a10f-1672d3db066b.roa
File:                     a9a48928-2461-3b39-a10f-1672d3db066b.roa (raw, json)
Hash identifier:          LmpPdRKqB8ftMxyxQxG6tgJqEvq0sr9pglhk2V8iixk=
Subject key identifier:   AA:A9:36:3B:BA:28:D2:7C:50:DE:12:CF:B7:F1:C0:BC:73:65:E2:31
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DA11AE083667C3A7015BB1140
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9a48928-2461-3b39-a10f-1672d3db066b.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     396354
IP address blocks:        2001:470:33f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:e0:83:66:7c:3a:70:15:bb:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=d132f71e-66b6-41f9-a6f1-60fe2701d938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:59:cb:f2:8a:61:c8:7f:53:18:56:74:14:17:
                    97:8c:23:b3:86:a3:a8:1a:37:49:97:62:54:da:84:
                    03:d3:23:8b:d2:d0:5a:4a:08:66:ca:85:c5:2a:f5:
                    bd:b7:72:0a:3a:a5:62:39:ad:b2:da:5d:32:33:41:
                    98:ce:3b:6d:d3:cb:32:52:8f:c6:58:73:f0:25:92:
                    38:ca:c3:a9:d8:9e:94:46:1a:51:16:e8:8b:8b:46:
                    3c:92:33:22:3a:33:4e:b0:aa:5c:fe:08:50:fa:22:
                    b1:7a:72:c3:3c:8b:49:9d:20:7a:89:f5:c7:94:8a:
                    d2:88:92:18:d2:1b:f1:8a:b7:8c:eb:26:63:fd:c2:
                    9b:45:5c:1f:6b:90:0e:34:6f:0c:c6:fe:d8:f9:73:
                    01:a8:61:e3:72:09:36:ba:4c:e7:a8:28:cb:06:6d:
                    98:b7:fb:d1:e2:b5:55:81:e8:41:6e:be:ca:fe:8a:
                    ef:dc:7d:f7:c4:4a:83:f0:96:19:73:a1:fb:53:42:
                    18:4e:b4:6a:81:97:16:ba:da:b4:ef:bc:86:e7:a7:
                    6b:ed:2d:b6:d8:6d:fb:22:4f:ca:3b:ea:07:05:e0:
                    10:89:06:9b:05:22:74:e7:17:dc:7a:3a:82:20:da:
                    bf:56:d1:43:52:f4:75:5f:85:8d:7d:5e:f7:94:6c:
                    f6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A9:36:3B:BA:28:D2:7C:50:DE:12:CF:B7:F1:C0:BC:73:65:E2:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9a48928-2461-3b39-a10f-1672d3db066b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:33f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:a1:8c:4c:83:5f:f5:89:cd:73:95:98:a2:1e:8b:37:5e:0e:
         4a:2f:de:b5:5a:d9:35:69:63:3b:ef:6a:a9:bb:d8:84:43:21:
         f9:1f:53:5a:06:c5:21:b4:6e:7d:91:d6:ee:b7:02:0e:9d:f9:
         5b:f2:26:90:58:75:8d:5e:6e:0b:b5:45:f6:fa:4d:6d:61:3e:
         44:7e:04:17:68:ba:43:71:9b:89:2f:98:d4:bf:1a:b5:7c:ed:
         59:00:9c:ed:fd:f0:63:e5:fd:f9:ab:49:c3:cb:2a:23:aa:0f:
         3c:ea:34:c1:29:c8:7d:08:16:35:52:94:79:59:9f:d4:12:3f:
         43:54:76:e7:59:a5:77:5e:88:09:49:9f:8e:32:29:19:ce:a6:
         ce:7e:83:d0:8d:45:41:76:2f:b2:e6:ac:15:63:73:9f:35:2f:
         3e:11:58:c5:03:dc:be:63:79:eb:ff:46:69:f4:b5:3b:f1:09:
         a0:16:35:1b:07:c3:c3:ac:51:fe:92:c9:b3:5c:f1:53:02:72:
         bc:de:be:df:85:b3:8c:8a:95:0b:b2:45:1f:c5:fb:e1:d8:6e:
         a2:e4:2e:a4:08:f8:07:ea:82:7a:fc:fd:56:fb:7c:51:42:af:
         c6:c7:45:96:32:71:26:70:ec:ea:06:53:1b:29:7f:fd:64:ac:
         82:01:6c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 01:36:48 2026 by rpki-client