Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5bfa35b-7fbc-3bef-a059-bbd5f4d86699.roa
File:                     d5bfa35b-7fbc-3bef-a059-bbd5f4d86699.roa (raw, json)
Hash identifier:          zyBu17QZqDpjBcDietfVtBYcNYiOz4dY4YDgNTGFvbA=
Subject key identifier:   26:AB:B0:A1:5A:8D:FF:7F:A3:25:29:F1:A8:55:5E:90:64:19:02:0F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E0D843A151CE74441B58B1B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5bfa35b-7fbc-3bef-a059-bbd5f4d86699.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     48438
IP address blocks:        2001:470:542::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:3a:15:1c:e7:44:41:b5:8b:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=27bdb352-ae6d-49e5-b69d-7a1c25e44621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b8:3e:22:ba:a7:7f:6b:f8:d5:58:58:87:20:
                    f4:67:db:f4:e5:c8:3b:d6:b0:1d:e8:54:b0:68:2c:
                    a2:72:05:7d:87:3b:ce:da:2b:4b:72:6e:ff:b4:61:
                    c9:a4:96:65:8f:e2:80:c8:44:ee:2b:bf:df:b8:19:
                    64:ef:65:4e:2d:74:d4:65:10:56:b7:6a:7c:62:c5:
                    30:54:65:aa:7b:54:2d:f1:d0:40:8f:85:e4:0d:40:
                    04:10:6c:4a:08:b2:cd:52:17:b8:89:d2:a4:78:8a:
                    20:67:9a:9c:49:df:36:43:e1:06:60:8e:ef:7c:66:
                    b8:7d:d1:c9:00:41:12:27:2e:9e:3d:78:52:b1:87:
                    79:ef:a7:7c:1a:68:04:f3:ec:ab:f1:36:95:45:26:
                    c0:23:20:26:05:5e:89:aa:7b:bd:fe:31:5e:39:f2:
                    53:ca:9c:f5:8d:80:b0:2d:19:3c:32:12:ee:1a:d4:
                    f6:06:d0:91:41:53:fd:ab:4a:46:d5:79:b1:57:6e:
                    e2:9a:8d:53:fa:5a:8a:5a:8a:7f:75:16:3d:84:c5:
                    fd:bd:56:ae:af:30:5b:87:5d:08:a0:3f:be:ca:93:
                    52:24:4e:90:34:b1:73:32:d7:71:84:67:fb:e4:10:
                    1a:11:f1:55:f6:fb:44:00:68:8b:6a:bb:80:73:92:
                    d9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AB:B0:A1:5A:8D:FF:7F:A3:25:29:F1:A8:55:5E:90:64:19:02:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5bfa35b-7fbc-3bef-a059-bbd5f4d86699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:542::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:ff:86:71:6e:c2:40:8f:29:9f:77:c2:69:91:db:47:d6:f4:
         f1:a0:56:85:94:e5:3a:b8:f0:2c:13:76:97:2a:30:1e:44:1d:
         a3:51:b4:4b:8d:01:8d:12:49:6b:43:5f:c2:00:16:33:f8:c4:
         26:6d:57:47:49:5c:a6:70:f1:e3:89:a4:72:56:65:cd:d4:22:
         73:ed:3d:a0:f8:64:ac:7c:4c:23:90:69:8b:0e:a6:ff:8c:e1:
         fd:a8:ff:24:b6:b7:4a:b0:de:d9:2e:98:d3:5c:26:01:2e:73:
         19:3a:12:ce:eb:23:a8:46:7e:f1:8c:be:98:2b:87:e1:fa:77:
         0f:66:f5:3b:1b:56:e3:7f:7f:76:04:ea:d2:a9:89:c0:18:00:
         cb:94:02:49:20:38:40:94:d0:26:8d:21:f6:af:b9:7c:e7:c4:
         02:0f:b1:c5:a8:c7:ee:75:e4:c6:20:f6:cf:43:97:22:f4:b5:
         24:46:96:e6:5a:b7:96:b5:0e:f8:7e:1f:53:c8:31:f5:d6:7e:
         de:d8:37:82:35:03:da:a3:4b:53:6a:ff:ea:09:00:de:e5:a2:
         dd:4e:34:4d:87:32:52:88:74:fe:92:20:da:b4:1e:61:17:cd:
         6a:83:9b:6d:99:5b:6b:10:4a:a3:12:b2:b2:cb:5c:50:53:f3:
         bb:3f:08:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 16:35:19 2026 by rpki-client