Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c145e5ea-a2e4-3a8e-8920-16ea28de3ca2.roa
File:                     c145e5ea-a2e4-3a8e-8920-16ea28de3ca2.roa (raw, json)
Hash identifier:          c8Hxt1l426GKr4Wdk4V9zzSzUs6B5dyfv3EkIAKMWwc=
Subject key identifier:   EC:4F:A2:25:E3:B4:06:A2:0D:B7:E3:31:48:6E:6D:7D:F4:19:3F:99
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DA55978F65584304D59A03F20
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c145e5ea-a2e4-3a8e-8920-16ea28de3ca2.roa
Signing time:             Mon 27 Apr 2026 13:30:14 +0000
ROA not before:           Mon 27 Apr 2026 13:30:14 +0000
ROA not after:            Sun 26 Jul 2026 13:30:14 +0000
asID:                     131091
IP address blocks:        2001:470:5a9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a5:59:78:f6:55:84:30:4d:59:a0:3f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 27 13:30:14 2026 GMT
            Not After : Jul 26 13:30:14 2026 GMT
        Subject: CN=773a4153-bd19-4661-9710-2dff1c7b5ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cb:21:66:bb:d4:5b:85:69:29:e6:a6:82:45:
                    87:3f:8a:e7:6a:d8:4c:69:ba:bc:86:0d:86:ce:7a:
                    bb:12:e2:d9:2b:3f:ea:fa:1c:dd:ed:a3:c4:f5:3a:
                    57:05:70:b6:4c:35:cd:7f:5a:c0:db:1f:4f:4d:48:
                    38:9a:a2:49:06:36:41:69:93:c5:60:75:c6:79:cd:
                    6e:de:56:cc:6f:88:cd:ee:53:75:a2:b9:ea:ed:26:
                    f1:14:06:4d:e3:e4:39:e9:f2:d3:4e:e3:26:f2:df:
                    89:41:5a:f9:f4:19:a4:dc:3f:59:28:dc:a7:ea:b9:
                    6a:34:28:0a:7a:6c:d6:e2:5f:d1:43:95:e0:6a:e2:
                    0e:6f:9e:b1:f8:b8:b4:c2:38:1e:12:68:94:9e:a7:
                    b9:ca:5a:15:6a:37:67:c6:02:53:4a:36:c8:e1:38:
                    2d:c0:83:a4:0a:7c:c6:35:6b:6e:ac:19:2a:de:50:
                    e3:07:dc:73:a6:d9:9c:f1:b8:30:f6:91:50:e4:78:
                    3c:75:18:08:aa:f6:1f:66:28:ee:d9:d3:b8:66:94:
                    78:52:9a:65:bf:1f:b2:0b:f6:33:bb:07:2a:13:63:
                    73:a0:d7:aa:f4:85:e9:68:8d:23:3e:59:45:ce:98:
                    bd:75:d3:3f:11:db:9d:dc:b9:9c:18:12:af:84:5b:
                    c5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4F:A2:25:E3:B4:06:A2:0D:B7:E3:31:48:6E:6D:7D:F4:19:3F:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c145e5ea-a2e4-3a8e-8920-16ea28de3ca2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:5a9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:64:56:eb:74:3a:60:d1:fa:61:32:24:23:12:a5:d5:14:09:
         1a:f9:f9:c3:bb:90:78:6e:ca:20:7b:21:6e:61:30:59:2c:b8:
         69:eb:80:12:e1:df:87:ae:ab:a2:b7:df:8f:56:82:db:89:aa:
         d3:38:00:39:ce:36:91:ba:9a:71:d5:e2:a5:10:3c:af:6e:7d:
         b8:e8:a3:24:99:ba:e9:6b:69:0b:86:f3:fe:41:da:e4:23:ec:
         db:85:bb:c7:8b:37:02:d9:d8:c3:7a:a8:29:a3:1f:68:61:27:
         8b:c9:6c:5d:b7:40:0a:a2:d0:6b:94:98:75:ff:3d:0c:85:ef:
         f7:bb:e2:88:f6:4e:2c:04:4b:d7:8b:97:40:06:ff:77:15:68:
         18:c3:9e:e1:b6:e3:39:75:03:73:5b:11:93:53:b3:d3:f7:68:
         7c:af:0e:dd:41:73:ca:31:53:b9:f4:84:8b:a9:e0:7c:d6:62:
         48:dd:ca:cb:85:25:2e:9a:2b:01:56:67:36:71:44:b4:bc:a2:
         5f:c9:37:81:c9:ca:06:ff:36:9c:eb:a2:37:37:e4:e6:69:25:
         7e:d2:35:4a:51:3c:dc:75:f6:82:e9:00:6b:36:2f:0f:60:ec:
         39:0d:b1:93:6e:41:cf:55:e3:17:ac:0b:c2:eb:32:66:84:c2:
         8b:78:36:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:07:42 2026 by rpki-client