Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ce481bec-8989-3cb3-bdac-73e08684659d.roa
File:                     ce481bec-8989-3cb3-bdac-73e08684659d.roa (raw, json)
Hash identifier:          HfMKCveseLQshThkvs3jRWoJfsHNYinypnNOLPXfgr8=
Subject key identifier:   EB:5D:51:D2:FC:57:48:EF:8B:30:03:BC:5C:E6:E4:33:A0:3F:3C:49
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D9E5EC4DF0476019B393564C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ce481bec-8989-3cb3-bdac-73e08684659d.roa
Signing time:             Sat 25 Apr 2026 01:30:15 +0000
ROA not before:           Sat 25 Apr 2026 01:30:15 +0000
ROA not after:            Fri 24 Jul 2026 01:30:15 +0000
asID:                     208459
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:5e:c4:df:04:76:01:9b:39:35:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 25 01:30:15 2026 GMT
            Not After : Jul 24 01:30:15 2026 GMT
        Subject: CN=f4160697-b6da-4c0e-a7f6-6897b46af8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:eb:4b:16:70:99:be:4e:2b:ed:55:2c:29:fd:
                    a8:c9:58:aa:7b:bd:a0:38:1d:ef:e7:dd:8f:ac:ee:
                    65:50:b4:e5:40:9a:91:51:55:10:de:cd:1e:28:2c:
                    9d:fa:29:03:40:87:17:c0:4e:8c:16:f7:26:d0:ff:
                    69:25:9f:f8:05:12:d6:0c:4c:cc:79:45:db:ea:9e:
                    44:e0:c6:47:c6:be:21:d8:8b:a2:36:01:b9:da:77:
                    73:d0:ee:ca:9f:0b:cc:98:28:80:c8:9a:70:29:e0:
                    e0:f6:b3:a4:fb:40:d3:38:0f:02:06:34:47:c6:c1:
                    00:9e:69:fc:55:18:73:79:e8:7c:7e:be:59:7c:59:
                    ef:58:3b:09:f5:c3:02:ad:fd:7e:82:4c:44:e7:68:
                    f7:c5:49:17:e7:0a:f6:cf:af:cc:c6:78:e8:60:d8:
                    29:13:a4:34:b4:38:f0:2a:1e:fa:60:2c:eb:bc:de:
                    e4:4e:a0:1e:48:2f:bf:06:9d:b1:f1:90:f9:e3:bc:
                    cc:37:64:2f:63:10:7c:76:e1:2c:20:13:8c:4a:b6:
                    b4:fe:95:f1:98:1c:9f:66:62:04:3f:f4:95:32:a4:
                    fc:77:00:da:9e:11:ed:67:dd:2c:88:04:95:f6:9b:
                    71:e8:6c:2f:17:75:f7:42:43:07:48:2c:0c:fe:2d:
                    c5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5D:51:D2:FC:57:48:EF:8B:30:03:BC:5C:E6:E4:33:A0:3F:3C:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ce481bec-8989-3cb3-bdac-73e08684659d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:cd:a4:7c:8a:fa:bb:5a:68:45:4d:b3:5f:fa:9c:2e:73:b2:
         4f:4f:1c:04:72:f6:84:ef:3b:e1:5f:c2:9c:5a:60:5c:f0:34:
         26:91:3f:14:91:3a:7c:fe:6f:da:fe:57:8c:3d:5d:00:9e:41:
         f3:bb:40:da:fe:f7:6c:61:4a:f4:fd:05:cb:23:e1:76:91:72:
         0d:02:c5:43:a7:62:c3:94:d9:d9:9d:5d:e6:66:d0:f6:81:85:
         30:07:3d:99:e0:7c:76:78:a8:e6:1b:40:f1:86:14:b6:d2:31:
         fd:fa:b6:50:bd:31:fc:01:73:a8:96:e9:78:81:61:42:70:35:
         ae:d7:71:83:cf:4b:4f:58:13:9b:be:9f:dd:cb:ae:9e:05:d0:
         cc:b6:d2:b6:2e:6e:8b:4d:fa:59:87:37:bd:90:ee:ef:45:f0:
         a1:22:8a:56:fe:1d:1f:87:e5:aa:8f:1f:79:b4:f0:1b:2f:f7:
         4a:ee:d1:ae:77:5a:00:ea:30:a4:7c:b6:9a:1e:ce:eb:e7:b1:
         22:69:73:ba:64:62:88:4b:6c:97:31:fe:0e:0d:43:80:b3:ee:
         fc:b4:5f:82:29:1d:a8:93:23:67:ca:ce:5e:be:78:51:89:f5:
         44:02:24:e4:b1:7d:50:35:b1:a0:a5:86:65:ec:7e:70:7e:ba:
         b7:54:0b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:07:39 2026 by rpki-client