Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6fa416f-c041-3446-8288-068130bcb4fb.roa
File:                     d6fa416f-c041-3446-8288-068130bcb4fb.roa (raw, json)
Hash identifier:          RARpaUDKdY0lXRfpWCqGG3wIHFCECbE9XCEbhvhZyBo=
Subject key identifier:   DB:F5:FC:41:CC:65:9C:A8:CD:6D:EA:09:16:F3:04:E1:E6:37:50:F8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA8AA36963D4A081AB3380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6fa416f-c041-3446-8288-068130bcb4fb.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     23089
IP address blocks:        2001:470:199::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:8a:a3:69:63:d4:a0:81:ab:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=343d13d4-1a8a-4ce0-9766-95f0d0e4e157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:d7:87:5b:58:6e:6a:a3:90:40:2a:af:96:
                    2c:4e:c1:22:6b:09:1b:a0:9a:2f:37:e3:e4:74:d6:
                    95:19:e3:88:90:60:e1:24:6d:79:57:73:0d:40:70:
                    b4:ec:08:65:ff:df:1c:99:23:08:ab:2b:15:0e:9f:
                    ba:55:70:50:24:af:b3:bd:97:2d:8e:94:56:f5:3e:
                    40:87:55:9d:fb:3c:f1:47:30:0d:73:8d:3e:ad:f3:
                    fb:23:5b:31:13:24:69:89:36:a3:d2:75:63:d0:0f:
                    d9:f3:15:c2:21:1b:fc:d5:79:87:da:29:55:8c:3e:
                    01:5f:35:87:75:2b:1d:95:12:88:15:56:3b:48:97:
                    02:aa:d9:c4:6e:f3:6f:41:7f:63:ac:b1:5a:be:fd:
                    cc:ce:74:50:88:f0:92:91:62:a3:e1:24:bd:22:9e:
                    b8:1e:93:fd:17:c9:0a:17:68:2e:48:7a:11:a6:c3:
                    8c:33:42:8b:f2:73:06:55:15:97:1f:42:e2:d7:00:
                    65:e7:de:23:84:89:93:b3:9b:ac:2a:11:1c:a9:7e:
                    a8:58:c4:92:e6:e6:d4:d3:77:19:c2:18:22:94:b7:
                    53:69:3f:50:4c:ac:59:35:cc:05:cc:5a:8a:0d:7d:
                    dd:6b:a4:99:58:4e:72:3d:4c:1b:fa:03:22:6b:cc:
                    f9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F5:FC:41:CC:65:9C:A8:CD:6D:EA:09:16:F3:04:E1:E6:37:50:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6fa416f-c041-3446-8288-068130bcb4fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:199::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:d0:1d:a1:6f:2d:50:09:50:38:fa:a9:ab:38:91:6a:b8:3c:
         6c:88:eb:95:36:18:0f:97:dc:bf:84:e2:64:08:55:fa:a0:35:
         5f:03:34:39:11:a7:82:25:53:7f:30:b3:67:fa:05:c8:5b:a1:
         99:23:68:c7:65:c3:a5:20:aa:82:78:b4:0d:17:9d:a1:56:b1:
         ad:ce:a3:b5:48:0a:5c:e0:b9:f0:9f:1c:38:d4:b7:8e:29:54:
         d8:87:b6:b1:1c:7f:12:1f:77:07:f6:93:c2:62:ef:93:1c:7a:
         a4:3c:46:d8:5e:f3:68:0e:20:75:4c:79:26:a5:e2:77:af:fa:
         84:20:29:ac:8b:f7:8e:c5:e5:43:59:1a:ff:fb:fc:95:11:a3:
         18:b5:d9:5b:da:86:af:d2:c4:68:a0:12:9d:26:c0:81:dc:c0:
         5f:be:56:88:a2:73:46:28:12:a0:c3:65:9e:ff:d3:fa:b2:9a:
         a8:e2:45:4b:fd:75:1f:37:60:b9:c2:c6:19:ad:7d:d4:28:7d:
         3a:3b:f2:e7:09:34:06:57:0a:0b:2d:46:e6:22:8d:f2:05:fd:
         73:3b:6d:7b:4c:46:79:24:13:47:c3:ab:86:73:27:2f:89:ba:
         74:89:e0:3c:8b:ce:38:f7:0c:36:06:40:03:a4:a8:a0:0e:17:
         92:ca:76:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 19:12:00 2026 by rpki-client