Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae834a66-46de-379e-836e-264b2580f878.roa
File:                     ae834a66-46de-379e-836e-264b2580f878.roa (raw, json)
Hash identifier:          n4Q7FnGIY4l9bIXPtiS58GcGvUusdKFvnD6J0jT6E+k=
Subject key identifier:   03:42:CD:25:50:FC:EE:B1:68:93:4D:98:A3:BE:6B:A5:11:38:F3:8A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584CAFBC807818C09F8A68627600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae834a66-46de-379e-836e-264b2580f878.roa
Signing time:             Thu 29 Jan 2026 14:00:40 +0000
ROA not before:           Thu 29 Jan 2026 14:00:40 +0000
ROA not after:            Wed 29 Apr 2026 13:00:40 +0000
asID:                     210119
IP address blocks:        2001:470:4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:af:bc:80:78:18:c0:9f:8a:68:62:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 29 14:00:40 2026 GMT
            Not After : Apr 29 13:00:40 2026 GMT
        Subject: CN=1815e21c-10fa-4b18-a161-d02a84780da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:39:bc:94:c2:7f:28:44:70:6a:b5:9e:f8:ae:
                    4d:2d:b6:1c:1c:f4:37:d8:43:24:8a:ee:9c:df:48:
                    77:7a:f0:e6:32:c6:3f:a6:08:b5:b6:fa:34:5f:fc:
                    a1:69:64:c0:f6:97:67:38:11:b3:4f:8a:3b:73:e3:
                    d0:10:35:44:44:fc:79:7f:bc:12:bb:9c:4f:6a:c7:
                    d0:5c:5e:e6:bc:91:c5:0b:5c:6b:b0:65:3b:57:7b:
                    69:9b:86:81:ee:2d:9e:f1:ce:e9:59:8b:ff:be:12:
                    e7:28:57:23:3a:f7:d9:f1:b4:4a:23:85:bc:52:64:
                    ab:24:ac:bf:62:c2:96:f9:17:1b:0d:54:7e:f2:b5:
                    c7:da:0d:4c:e5:3b:fc:57:70:f8:35:87:6d:77:f8:
                    f4:4a:59:4a:1f:1d:53:0e:fa:a9:73:71:0a:70:4d:
                    5d:0d:fa:f9:49:35:af:62:a6:48:70:80:08:df:05:
                    84:4b:51:3d:02:9b:04:23:1c:4e:72:3d:5d:32:72:
                    dd:dd:f1:04:02:de:d5:11:b2:23:6e:27:d6:87:22:
                    eb:ba:56:fd:73:c2:27:fe:f5:bf:ca:98:78:9d:13:
                    59:14:87:57:a1:e0:f4:16:0e:6c:09:ce:63:77:4c:
                    be:5f:f9:c7:64:c3:2f:b5:53:5a:92:6a:e0:4e:5c:
                    44:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:42:CD:25:50:FC:EE:B1:68:93:4D:98:A3:BE:6B:A5:11:38:F3:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae834a66-46de-379e-836e-264b2580f878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ed:f5:12:29:0f:c5:e2:83:a3:cc:a2:71:9c:f0:d7:24:6b:
         81:6a:31:75:dc:04:6a:78:d3:24:41:76:2c:ca:75:0d:af:fe:
         42:3a:94:48:a1:03:b8:04:42:52:3a:9a:d7:63:08:86:27:76:
         e9:d7:06:e0:7a:8e:04:ec:34:4c:8e:0f:c2:44:f7:27:de:3b:
         d0:8c:1f:d1:f3:d5:5a:0f:ea:3d:4c:ec:dd:30:d8:ed:ae:67:
         86:78:c8:27:cf:9b:44:b0:69:5a:2a:fe:a1:8f:ce:01:22:48:
         80:a9:6d:93:e9:1a:0b:a8:41:fb:f0:8b:2a:38:76:f8:a5:42:
         64:52:e4:93:1b:05:64:c9:d9:a4:08:24:8f:19:89:60:83:e4:
         3a:5d:29:93:2c:d5:07:be:f4:6a:b5:eb:4d:4a:59:d7:09:53:
         b0:e3:45:8f:e5:ad:bc:d4:70:81:55:bf:f2:92:bf:db:e0:3f:
         4f:14:db:7d:a7:31:05:0f:37:4d:f0:6b:56:ff:fa:c4:9d:4e:
         70:3a:bf:5b:da:bd:a4:5b:6a:2c:d6:3a:39:d1:1c:17:5a:33:
         ff:ed:58:f5:7b:3b:8e:e3:1f:b2:d0:26:f3:ed:98:ed:83:a9:
         24:f3:51:30:03:82:10:2b:2a:de:8b:0f:eb:b0:66:f7:d5:ed:
         fd:80:07:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:59:57 2026 by rpki-client