Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5d5c6d1-724c-3ed8-b1c2-999ec1e05c56.roa
File:                     c5d5c6d1-724c-3ed8-b1c2-999ec1e05c56.roa (raw, json)
Hash identifier:          wvJ0j9ejlw6UI+fps0S2GkmmqaWpN+wS21HmKvg8SBY=
Subject key identifier:   7A:71:AE:37:65:D0:67:B8:05:D0:1D:15:C5:E7:9F:AC:BE:35:3E:B5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D27AA18D4611B220AB9767E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5d5c6d1-724c-3ed8-b1c2-999ec1e05c56.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     401754
IP address blocks:        2001:470:3dc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:18:d4:61:1b:22:0a:b9:76:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=7051da0e-a79c-4cfd-9058-ed032436b408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:71:5a:22:30:c6:55:12:c2:d6:37:0d:73:3c:
                    f2:10:d1:1d:c3:07:56:1f:53:64:cb:fe:34:eb:be:
                    6b:55:0d:ed:26:89:6d:74:f5:a3:b1:16:1c:34:12:
                    cb:75:27:e5:c3:7e:38:8f:6b:57:8e:fb:81:b7:89:
                    b8:d3:1b:b3:b5:0b:60:3d:83:07:98:a5:3d:ea:2a:
                    e5:87:4a:2f:4b:75:c5:2f:58:f8:4a:42:ca:12:65:
                    62:37:9b:44:eb:8d:64:f6:d7:2e:aa:11:e2:8b:08:
                    ff:97:79:bd:d2:f0:6b:35:f5:ae:97:42:4d:b9:03:
                    42:55:d1:a1:db:1c:ad:15:b0:b0:b4:e4:88:c5:c4:
                    41:8d:16:30:a5:4d:e2:05:a5:37:c1:19:8d:fa:fc:
                    bf:fc:04:09:36:23:c0:83:8a:99:eb:0f:9b:8c:8b:
                    37:23:7f:81:11:3d:e7:04:cb:3f:f5:37:6c:cf:d6:
                    28:c8:55:fc:b8:2c:34:5d:0c:f9:db:56:49:3f:06:
                    52:86:28:bf:ea:9f:23:e3:4d:6a:3c:9b:17:d7:e7:
                    ba:19:37:d8:66:c7:af:60:e0:f0:55:b8:45:d5:4d:
                    51:cf:40:f4:14:d5:d7:62:39:ea:93:a9:99:21:58:
                    58:dd:e3:6f:64:46:63:f5:d9:65:b0:cc:b9:b6:6f:
                    97:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:71:AE:37:65:D0:67:B8:05:D0:1D:15:C5:E7:9F:AC:BE:35:3E:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5d5c6d1-724c-3ed8-b1c2-999ec1e05c56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3dc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:7a:7c:27:ce:8f:e7:7a:58:70:9d:cd:c9:e1:dc:51:38:0e:
         ec:70:87:d6:74:b8:c3:35:8b:f1:8e:6b:f3:c1:1e:76:f0:ea:
         74:9c:e0:eb:69:7f:4a:4c:e0:fc:c1:bb:c0:3d:a3:c9:dc:d1:
         11:a8:85:62:f7:a7:8e:1b:0c:41:c4:8a:44:fb:54:d8:92:e0:
         e3:e4:82:18:71:74:99:8e:0a:5b:a8:2c:1e:f5:6a:d7:bd:48:
         ee:0f:64:89:35:87:5d:12:ab:7b:95:47:d0:f8:4f:d2:ad:f5:
         8e:91:13:33:f0:30:98:43:0f:e0:6b:23:fb:54:25:8f:35:db:
         2e:5a:89:63:73:86:41:97:2e:46:66:07:cc:fa:ae:aa:74:e0:
         77:50:8d:83:07:61:30:f4:fc:90:88:c4:01:f6:3d:1f:d4:62:
         1d:12:2b:e3:b2:44:4c:5a:95:26:f8:17:79:e2:09:28:9b:b6:
         c2:6a:d1:2b:09:3f:38:09:b8:51:84:2b:54:73:cd:c4:dd:14:
         5a:70:fa:89:92:d1:f3:1b:4c:2d:b7:ee:e9:8b:9b:a5:4b:dd:
         14:97:3e:e7:18:e0:0b:f5:bf:3e:66:b7:c7:47:d8:3b:ff:32:
         36:3c:c1:2c:bb:fd:f1:2d:6b:e6:04:e3:ee:a5:4b:27:72:12:
         2d:7c:03:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 18:18:51 2026 by rpki-client