Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5d86887-342c-37bc-b138-c0a0df5f3351.roa
File:                     c5d86887-342c-37bc-b138-c0a0df5f3351.roa (raw, json)
Hash identifier:          1heVBzAAYouhJ/LiH/qxBUal2wmLPZL8h+Q47Y/+t30=
Subject key identifier:   D3:EC:3F:C1:09:8E:63:17:6E:55:0B:C3:6A:57:22:5E:36:2E:24:62
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DEDE0B4BD3193511ADF1A6000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5d86887-342c-37bc-b138-c0a0df5f3351.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     328323
IP address blocks:        2001:470:4fb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:b4:bd:31:93:51:1a:df:1a:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=a64e9536-db06-4c4d-abb3-6d2b208b3b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:66:6a:2d:c4:ba:a2:d7:89:95:74:e0:f2:b1:
                    c2:98:29:9a:35:4e:95:ca:5c:b6:ae:69:96:31:f0:
                    a8:43:ae:e5:b2:cc:8a:b7:1b:3c:0d:ad:82:0f:cb:
                    84:c6:bf:41:ff:ad:fa:e4:e2:a1:27:86:19:74:d6:
                    9a:94:21:72:6c:05:b4:1c:24:e4:f7:db:38:94:bd:
                    80:73:df:3c:2e:a7:8e:bd:47:48:2e:71:48:32:44:
                    59:7f:5a:2b:8d:21:9e:1c:7b:9d:d3:3b:27:9c:a0:
                    ee:29:cd:b6:5b:d9:18:70:db:5f:dd:1e:af:96:8e:
                    ba:af:6f:c9:ea:49:9d:b5:6d:70:c4:10:da:60:0b:
                    dc:36:70:29:0c:ad:8f:31:c5:35:75:6a:83:1e:b9:
                    50:75:ff:60:25:56:23:b8:be:b1:9f:9a:8b:9e:44:
                    ba:88:33:d4:ac:e5:96:4c:95:bd:20:45:c5:cb:61:
                    6f:24:60:f5:74:ac:4d:e4:b7:35:d6:18:de:a9:51:
                    13:a0:b3:0c:94:77:79:c5:f0:38:8a:5f:1d:74:e1:
                    27:53:2f:be:5d:d3:8f:f6:b9:36:a8:76:9f:d7:7e:
                    17:27:5b:54:b0:cd:7c:e1:eb:a9:03:36:dc:13:f8:
                    26:ea:4f:31:ea:df:e4:33:77:33:bb:47:27:7c:fc:
                    c7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EC:3F:C1:09:8E:63:17:6E:55:0B:C3:6A:57:22:5E:36:2E:24:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5d86887-342c-37bc-b138-c0a0df5f3351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4fb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:8c:6d:90:73:ed:da:2b:97:d8:5d:c9:27:24:45:07:b0:dc:
         b8:67:61:94:a2:de:be:40:4a:67:b2:e2:54:39:e5:31:8f:a4:
         e8:af:81:bf:0f:ee:54:0b:f6:4b:44:ad:4f:79:43:50:b2:c6:
         b7:ce:de:31:98:3f:38:e8:6c:3c:9b:15:9f:06:31:02:e6:0b:
         de:19:81:29:da:e0:92:39:01:93:5d:63:79:0b:10:71:70:9b:
         ba:af:aa:07:85:6e:c2:77:22:c0:51:d1:de:e9:ab:31:17:72:
         2f:83:4b:fe:18:c2:e0:a5:9c:3e:d4:30:db:19:11:75:c2:d2:
         11:bc:60:70:3d:8b:14:41:2c:56:c3:d3:8f:03:20:b4:21:7a:
         74:bf:ab:03:10:0d:1a:18:a1:af:0d:77:66:72:96:d5:9c:b9:
         62:23:74:4d:0d:0b:81:cc:e1:3c:2c:1e:d0:67:13:89:89:dd:
         37:2e:e4:13:c7:a2:cd:a1:fd:e0:cc:85:c0:ed:48:40:69:46:
         0f:81:20:4a:f7:d7:4d:0f:59:38:61:d3:d7:c3:1b:3b:95:77:
         78:d3:86:1d:50:a1:3c:50:0a:85:66:63:9b:7e:b5:99:dd:68:
         8b:09:f9:6b:e6:d6:3e:72:66:be:25:71:cc:c4:ce:e7:52:28:
         54:e5:de:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 16:37:48 2026 by rpki-client