Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d63e6218-406c-37f2-b76e-d912ad9a70f5.roa
File:                     d63e6218-406c-37f2-b76e-d912ad9a70f5.roa (raw, json)
Hash identifier:          NhXSSCYvJEvgCrIvI1+djFJLglhClPnjPV7xG6q2Gys=
Subject key identifier:   EA:85:72:16:21:65:D3:AF:A9:A1:5C:56:44:E4:DD:57:38:27:4F:B4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DE84B2ADB1C4437F7A69BECB8
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d63e6218-406c-37f2-b76e-d912ad9a70f5.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     9416
IP address blocks:        2001:470:3fd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:2a:db:1c:44:37:f7:a6:9b:ec:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=4cf2701f-4569-434f-8d4f-e6c1486bfa76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bf:4a:ac:20:83:ea:04:37:b7:ae:ef:70:12:
                    03:3b:8a:dd:3d:0b:00:b1:6f:c3:3f:04:d7:9b:3e:
                    26:ba:69:86:ee:b1:35:0c:23:82:03:b5:1e:d3:ca:
                    e0:df:5e:0c:86:b2:99:45:59:a7:1a:d7:6a:d0:d0:
                    0b:3f:8a:78:07:fd:17:b2:ca:f2:23:18:e4:65:dd:
                    db:02:35:08:b9:94:11:34:8f:1e:b8:1a:54:0f:15:
                    9f:b5:0c:19:38:a4:6f:4d:d8:66:fd:3e:96:74:8d:
                    03:f9:e4:04:b5:09:4c:a2:4e:19:34:e8:e2:7b:91:
                    45:64:54:ab:29:ba:ad:15:f3:bc:95:95:ac:c0:bf:
                    c8:cf:fd:25:a0:ca:9d:de:fd:f4:11:14:dc:f0:cc:
                    3c:0d:bd:97:dd:c9:20:02:02:ac:d0:64:56:20:63:
                    d8:49:49:dc:3b:38:9d:9a:46:0b:01:91:c1:ca:88:
                    c3:a5:02:4b:31:54:3f:5b:6b:11:eb:f5:8c:86:49:
                    0b:e7:e9:5e:ea:15:3f:20:17:82:55:c2:c7:62:35:
                    b5:6f:8b:55:56:ff:81:be:2c:89:b7:69:2c:5c:70:
                    be:9b:ee:df:b7:ce:da:9a:57:93:81:b3:8b:5d:0c:
                    3e:c6:20:9d:35:13:ba:03:30:ce:ea:ef:c9:c8:8e:
                    e0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:85:72:16:21:65:D3:AF:A9:A1:5C:56:44:E4:DD:57:38:27:4F:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d63e6218-406c-37f2-b76e-d912ad9a70f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:7e:5b:83:95:d7:61:8c:19:37:ae:91:e4:5a:b1:99:b2:83:
         97:8b:d6:53:8d:93:5f:d3:ab:ed:57:bd:d4:42:ef:67:5a:68:
         94:43:5c:27:d6:61:16:32:b0:f0:92:83:a2:bd:8c:3b:74:6f:
         29:f0:ff:b4:a6:a2:fd:a5:cd:98:b9:bd:95:38:d7:f1:74:e5:
         25:1d:d4:ca:02:f1:ad:c7:74:48:b5:c4:25:f8:6a:65:59:26:
         aa:ca:93:55:e2:54:aa:46:2e:87:ee:8d:c0:d6:9b:3f:be:24:
         ca:d8:a5:f7:f6:6f:28:a8:27:10:01:6f:e4:f6:a0:1c:bd:4a:
         68:40:6e:15:31:36:d0:fa:3d:64:c7:3f:1f:a5:0e:97:0f:9d:
         79:f9:65:96:12:27:7d:df:3c:0a:07:1f:2e:94:af:6c:0a:1a:
         10:fe:c3:ec:1b:5f:2a:2a:2e:ed:a5:ea:1a:23:3d:02:34:bc:
         c5:b6:5f:aa:5d:95:9e:95:30:6f:bc:e7:32:81:82:d9:a4:de:
         b0:39:c7:35:54:bb:ee:8d:f5:1f:5e:86:4d:8f:cc:98:67:ec:
         58:df:20:c3:35:40:e7:c8:b4:90:88:7a:c9:1f:8c:d5:8e:10:
         45:1e:46:35:70:f8:da:c5:26:fe:48:cb:73:f7:32:25:e1:68:
         32:db:14:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 16:36:25 2026 by rpki-client