Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1b52c0d-625c-3c7b-8491-58fe9e988c2f.roa
File:                     c1b52c0d-625c-3c7b-8491-58fe9e988c2f.roa (raw, json)
Hash identifier:          renrUC+8J7YcYew2htYRnPtVltLB1Xm8WuWP3FQUP8o=
Subject key identifier:   32:45:F6:92:58:94:F6:6F:1E:87:D9:9F:66:A2:49:FD:25:24:C9:01
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3CF9C3BB286EE04A183AE440
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1b52c0d-625c-3c7b-8491-58fe9e988c2f.roa
Signing time:             Sat 20 Jun 2026 21:00:12 +0000
ROA not before:           Sat 20 Jun 2026 21:00:12 +0000
ROA not after:            Fri 18 Sep 2026 21:00:12 +0000
asID:                     44411
IP address blocks:        2001:470:44c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3c:f9:c3:bb:28:6e:e0:4a:18:3a:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 20 21:00:12 2026 GMT
            Not After : Sep 18 21:00:12 2026 GMT
        Subject: CN=ddffe3fc-c05a-4a95-bf8c-bf650c84e594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:62:35:fa:8d:fc:52:6f:73:b9:e9:ec:a0:
                    36:c4:0f:0d:87:1d:b7:50:5f:9d:4d:66:1a:5b:ae:
                    07:ed:36:48:d9:59:34:5d:02:c4:5a:1b:c0:9f:37:
                    a8:de:dd:8f:63:42:16:1c:21:1d:38:3d:4b:f9:89:
                    ba:5e:01:09:b4:e9:34:15:8f:de:66:1c:cb:9b:2f:
                    21:3f:f8:ba:46:1a:44:3d:c4:09:64:37:5f:77:52:
                    b5:14:09:af:b4:22:4b:b1:61:57:7e:bc:bb:63:93:
                    fa:92:da:6c:45:8f:a4:d9:cd:54:58:57:bc:1f:21:
                    3e:48:1d:68:80:cd:e3:f9:54:fb:ae:9c:6c:78:44:
                    cc:6d:a2:73:50:e1:d8:a5:ac:0c:ea:f6:53:d8:7b:
                    bd:e5:2b:6d:11:2d:4b:a2:f2:c1:8f:54:69:6a:80:
                    64:71:fb:44:7b:44:69:41:da:96:65:8e:d6:e9:24:
                    50:f5:7c:f1:ee:b7:16:9b:e1:23:e3:72:37:17:58:
                    74:b0:ae:c5:71:72:d6:6f:62:88:41:9d:89:90:8d:
                    0b:7b:82:3a:a1:f6:d5:e9:2b:5b:9c:e2:9a:61:c5:
                    76:05:4a:3e:d6:2a:aa:92:9e:36:86:3d:18:ce:05:
                    dd:13:82:5c:fa:8d:5b:87:5f:3e:7c:5a:99:2c:e9:
                    49:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:45:F6:92:58:94:F6:6F:1E:87:D9:9F:66:A2:49:FD:25:24:C9:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c1b52c0d-625c-3c7b-8491-58fe9e988c2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:44c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:ce:c9:8d:7e:d9:fa:89:12:c7:9b:05:a3:5a:a3:fe:9c:60:
         af:b2:ad:97:29:5b:de:f0:e6:b1:10:e0:f0:02:5a:2c:41:e2:
         e0:49:15:96:75:94:69:59:e0:1b:50:76:4e:44:87:47:f1:37:
         11:21:0b:b9:2c:9c:f8:d6:14:61:c8:dd:8b:02:f9:ba:4a:ea:
         1d:85:11:22:53:e9:ef:ce:dc:cf:cf:4a:57:54:62:32:5c:47:
         c9:96:c0:3a:f4:e0:22:dc:1a:19:72:96:b7:56:4d:d2:32:c5:
         9e:5f:69:b4:31:98:6d:51:a7:6c:e9:da:2e:d6:af:ab:5e:33:
         4a:be:66:28:8e:bd:8a:70:58:e8:e8:15:a6:ff:5d:38:69:b5:
         04:bb:67:13:75:44:3f:a5:31:5c:b2:d5:67:59:23:60:8d:64:
         ff:5d:e0:1c:ae:5a:24:11:b9:24:55:c2:c2:fd:ae:d1:20:00:
         37:57:dc:c8:72:8e:c8:46:60:6f:c1:56:a2:39:83:5a:7d:96:
         7b:fe:b8:5d:d6:b8:07:5a:22:d7:4e:3f:74:56:74:50:8c:88:
         d0:99:7f:24:92:bc:9e:67:72:f9:28:20:86:f4:6f:52:a6:aa:
         ec:fb:89:33:c3:6b:63:3e:53:31:8d:bf:d3:e6:67:2a:69:cb:
         ae:f6:be:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 19:42:00 2026 by rpki-client