Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7d1ffc3-6d26-3c51-ba70-93c48875eda9.roa
File:                     b7d1ffc3-6d26-3c51-ba70-93c48875eda9.roa (raw, json)
Hash identifier:          CNBXIBMo55e0q3JqHKBOtQFtIA+t47yNQAVwA7juT44=
Subject key identifier:   BF:62:B2:D6:A5:DB:D5:3B:37:B5:8D:A4:86:9B:AB:1B:EA:A1:27:06
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E394FBB3A8BCC863152282700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7d1ffc3-6d26-3c51-ba70-93c48875eda9.roa
Signing time:             Fri 19 Jun 2026 13:30:14 +0000
ROA not before:           Fri 19 Jun 2026 13:30:14 +0000
ROA not after:            Thu 17 Sep 2026 13:30:14 +0000
asID:                     400194
IP address blocks:        2001:470:5d6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:39:4f:bb:3a:8b:cc:86:31:52:28:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 13:30:14 2026 GMT
            Not After : Sep 17 13:30:14 2026 GMT
        Subject: CN=03eb2f36-c9fe-43ab-8666-69ebeb5c9007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5b:43:34:8b:1c:59:79:8e:60:bc:7f:09:a3:
                    b9:9d:ec:87:05:27:60:79:4f:47:c6:cd:51:b2:91:
                    75:e7:0c:87:5c:9e:29:eb:2d:8e:bb:62:d0:c7:b6:
                    e3:50:a7:4a:93:a6:a5:4e:ea:6a:d2:fc:fe:de:61:
                    42:a0:86:2c:4d:7e:62:a6:d4:05:f2:04:6f:a7:41:
                    1f:c5:52:0f:40:81:c3:90:10:7c:a7:61:f3:a0:f8:
                    8d:cd:cd:1a:24:ca:21:c5:d1:a5:0c:67:1d:46:e0:
                    09:27:7d:45:c1:7f:2f:d6:06:74:06:58:2e:25:a2:
                    75:dd:b0:ee:72:02:be:ac:c1:c4:91:4c:7f:62:fc:
                    06:e6:c5:58:da:29:22:aa:0d:fa:b0:2e:3b:04:31:
                    d2:98:74:32:e4:1a:df:a8:ea:61:a5:8c:65:19:ea:
                    27:4b:ca:e3:fe:c2:2f:a2:1e:6c:7c:2e:35:b5:3a:
                    f4:73:97:ae:7a:8d:e5:aa:03:50:79:58:da:0d:c2:
                    b3:42:18:a7:40:be:19:a9:ba:c9:d0:c4:4b:bb:06:
                    41:da:32:fb:7f:03:b7:0f:cd:1b:32:fe:d7:90:f8:
                    b0:e9:60:93:dd:5d:5f:a1:e0:62:8a:6d:ec:b5:c2:
                    88:6e:f5:bc:f7:ed:9e:1a:a9:b2:4c:b1:cb:fa:f1:
                    a9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:62:B2:D6:A5:DB:D5:3B:37:B5:8D:A4:86:9B:AB:1B:EA:A1:27:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7d1ffc3-6d26-3c51-ba70-93c48875eda9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:5d6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:50:f2:73:ed:c7:df:b4:9e:cc:9c:c7:b3:b0:8b:20:b8:c1:
         00:f6:81:33:b9:fc:7c:7f:84:de:c1:64:cd:27:1d:91:f1:d4:
         7d:01:45:b4:ff:5b:6b:b6:4c:67:df:36:fe:d5:99:48:6b:d8:
         d4:12:c5:bf:32:78:25:eb:15:76:fd:eb:98:f5:42:3c:88:a5:
         da:53:42:cc:7e:8c:c2:53:a4:b7:9d:38:d5:75:45:3e:6e:6b:
         62:22:23:d5:e5:68:aa:3c:89:38:29:a2:1b:a4:6d:c2:15:16:
         01:f1:f1:ac:3d:39:eb:b0:1b:fd:67:ce:67:fe:b6:e6:b6:eb:
         0d:d4:82:9b:c2:a7:68:12:db:3c:60:c4:9e:3d:7b:f7:56:e6:
         a1:83:e0:83:80:9e:99:db:27:4b:d3:90:b2:72:b3:d6:f3:22:
         cf:09:d9:44:68:d5:44:bc:39:27:88:51:47:2c:94:85:39:26:
         90:44:00:50:82:1a:e6:a7:60:24:41:ef:36:6d:4f:7f:5b:cd:
         f0:4a:d2:17:b8:85:2b:52:40:6b:65:5d:36:dc:95:31:69:55:
         2f:bb:82:0c:34:22:c4:5d:2c:8f:7d:c4:39:e3:82:53:b5:5c:
         47:56:2b:94:03:42:2e:83:7d:ab:9a:d9:62:80:e5:43:32:3a:
         74:0e:1d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 18:44:37 2026 by rpki-client