Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b85b7a23-153a-3df6-aa0e-230c34a7b3c1.roa
File:                     b85b7a23-153a-3df6-aa0e-230c34a7b3c1.roa (raw, json)
Hash identifier:          7dEc0DRnzNAK+m+Whu2xwq/pxoyC7bbyoF8hDRm6HJA=
Subject key identifier:   97:8F:3B:82:05:B5:70:50:DF:06:03:CD:89:77:62:7B:00:D3:9D:D0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F6B26D302B6EB0304F280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b85b7a23-153a-3df6-aa0e-230c34a7b3c1.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     50023
IP address blocks:        2001:470:23f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:6b:26:d3:02:b6:eb:03:04:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=e7361766-3f5c-4ac5-b303-89d02ef86eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:90:2f:e7:2c:0d:ac:7e:c9:73:05:09:16:cf:
                    29:1e:f6:76:8b:d8:39:79:12:77:4f:cc:cb:4a:6b:
                    a0:e6:d7:44:fd:a9:4e:49:65:11:1c:dd:69:92:0b:
                    93:62:cd:b4:0a:31:cb:7a:05:26:75:dd:02:d1:66:
                    1c:0b:95:3d:a1:27:5d:31:91:77:63:3c:c1:db:8d:
                    1f:fb:43:c2:8e:6a:4b:3c:cf:48:21:f6:4f:8e:97:
                    31:03:9f:38:64:9b:df:7a:d1:5b:41:85:cd:c2:04:
                    d9:a5:ed:18:87:a7:f9:1e:cb:d7:5c:7c:3c:a1:b5:
                    33:57:fb:54:8d:53:1d:6e:ae:d6:6d:de:95:eb:76:
                    1c:ab:d1:d1:5e:e8:0c:c8:b8:6f:31:74:7e:89:cc:
                    83:72:0f:78:64:fd:72:c0:08:84:59:04:7c:fa:8d:
                    e1:2d:1f:ae:fa:2e:ba:9e:43:9e:60:8a:3b:47:80:
                    aa:c9:22:1b:cf:47:88:cd:92:e9:9c:6f:56:bd:54:
                    86:66:8d:98:bc:1a:d6:a5:22:93:09:7c:1a:a9:21:
                    11:a6:aa:78:24:49:87:6d:4d:8a:e3:2a:52:59:3d:
                    f2:d9:f2:d5:97:02:9d:ce:3a:a9:f2:d4:78:52:a0:
                    d6:c6:6d:e2:92:1e:54:95:98:2d:63:ba:76:94:6b:
                    a4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8F:3B:82:05:B5:70:50:DF:06:03:CD:89:77:62:7B:00:D3:9D:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b85b7a23-153a-3df6-aa0e-230c34a7b3c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:1d:a9:c9:26:c2:f5:b4:05:00:ae:4b:95:1d:b2:9a:0e:7a:
         46:bd:5c:cf:91:4a:bc:32:b6:6a:d3:8b:89:90:9a:46:e0:03:
         7f:78:51:af:d3:97:37:de:45:a2:76:05:1f:f4:e6:38:c5:16:
         ff:72:e8:ed:86:ab:74:a8:4f:fb:13:69:47:75:85:2a:f9:f9:
         54:13:22:14:10:9f:29:95:72:f3:f9:80:03:90:9f:11:f4:97:
         ba:c0:da:c6:c2:db:fa:25:57:01:49:6e:d6:40:50:02:0e:e8:
         e8:4d:07:df:9b:36:ea:0c:02:22:f5:24:73:60:7f:fd:e1:1f:
         8f:72:11:8d:46:76:9c:45:27:0e:61:85:41:1b:88:4b:c5:2b:
         47:45:09:3c:68:5e:fb:7c:00:0e:cd:4d:df:86:e5:ef:3a:89:
         01:1f:c6:32:fd:38:28:7d:ad:84:c6:29:31:a1:04:05:63:a0:
         ba:d6:ce:23:3c:bc:37:34:93:83:74:01:39:12:e5:64:29:54:
         80:42:5d:ab:66:d4:9d:62:46:ed:7b:82:0f:f2:4a:72:17:56:
         72:12:88:d2:05:88:31:e2:f8:26:9e:95:05:ce:64:ca:a2:f2:
         45:f0:05:f2:cc:de:f1:aa:08:43:b5:ca:cd:0b:ae:70:30:f4:
         7c:fb:5c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 21:18:39 2026 by rpki-client