Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e1a1198b-b36c-3594-b84b-b2a8541a9abc.roa
File:                     e1a1198b-b36c-3594-b84b-b2a8541a9abc.roa (raw, json)
Hash identifier:          GOrHN4EsZLpxft3yGpy9M6qkxf1DXiQOmpK3Yt9StMg=
Subject key identifier:   0D:A7:A2:61:2F:64:A1:9F:AE:38:C9:22:9A:AB:6F:40:9F:0A:90:02
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA8D1A6C269E591E793C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e1a1198b-b36c-3594-b84b-b2a8541a9abc.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     32526
IP address blocks:        2001:470:210::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:8d:1a:6c:26:9e:59:1e:79:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=7be0e70c-1b76-4cbf-a9e2-1bdafc9c998c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:14:67:82:52:42:ea:4f:f3:1c:a7:36:12:bd:
                    e0:95:41:3c:f5:88:ab:11:49:c2:7f:8e:8f:cb:23:
                    c6:89:c1:1f:35:e1:a6:5c:64:f9:cf:2e:51:42:a5:
                    2b:58:e7:4d:52:96:bb:5d:16:d2:c5:41:6a:ad:eb:
                    1b:a5:98:c1:28:b9:b2:80:84:cd:19:d1:66:6a:c5:
                    87:d0:8f:5b:de:ea:73:b9:e9:51:bf:3c:7d:21:2c:
                    86:12:2b:e6:c1:18:cf:38:2d:2e:56:c5:cc:44:09:
                    be:72:ab:21:a9:83:11:11:e0:11:76:62:69:a9:0b:
                    90:b7:c4:d4:91:e2:dd:e9:fd:bd:c4:ab:cf:f2:f5:
                    3f:45:0d:75:b8:61:ae:9b:b2:f0:ed:af:3b:73:c8:
                    52:5e:25:12:38:c6:b6:22:69:b7:8d:7f:1c:bf:9e:
                    9b:23:25:75:1e:17:8f:f6:47:8a:5c:87:ff:04:9e:
                    47:a4:aa:a8:4c:68:8c:33:9f:80:cc:50:21:97:7a:
                    43:8b:74:7e:d1:9f:92:7d:28:36:58:79:e0:a7:cd:
                    b7:a3:6c:11:7a:db:a0:96:22:e2:b3:8c:42:e6:f5:
                    5e:9f:ff:6a:80:50:40:d3:87:f5:9c:2a:18:7b:b7:
                    a9:98:f1:28:ea:64:9a:e0:4c:2f:96:3b:78:24:80:
                    5e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A7:A2:61:2F:64:A1:9F:AE:38:C9:22:9A:AB:6F:40:9F:0A:90:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e1a1198b-b36c-3594-b84b-b2a8541a9abc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:210::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:30:cb:fd:c5:c3:e8:e0:f4:54:84:ad:fa:91:88:b5:70:44:
         3f:2e:67:04:b3:26:6b:80:ae:be:eb:45:d4:ea:b3:6a:d1:89:
         2b:77:8d:c5:11:10:fe:63:f9:4e:c6:db:e1:cd:c9:3d:02:a9:
         12:34:82:15:ed:2f:9f:96:fb:c5:2f:86:94:87:6f:1d:50:f7:
         e1:3c:f1:b5:cf:4f:3c:0d:b7:b4:50:e2:9d:91:62:ed:18:e5:
         6f:20:74:c2:86:9f:f1:76:03:14:4f:36:21:2b:ca:13:63:90:
         d1:15:66:aa:bf:8c:0d:45:ff:a1:e4:c3:65:cc:14:b3:3b:a6:
         e6:9e:a5:b3:a8:0a:49:c0:15:1e:e8:d2:13:cc:e2:d4:38:4d:
         50:4e:f9:08:df:c6:fc:82:7f:87:dc:71:96:8c:50:d5:72:65:
         34:47:bc:a0:07:c9:ac:07:62:32:72:f3:4d:d9:19:72:e6:b1:
         4a:b1:49:68:bd:f9:08:91:71:f0:7e:af:51:3c:82:b9:c2:4b:
         fc:1e:25:dc:61:ad:48:4b:9e:af:4f:da:ba:25:a7:5e:e3:97:
         88:b2:c5:38:9c:26:4c:10:e3:f3:5b:42:d1:90:07:18:38:0e:
         35:39:5d:52:b7:62:3f:f1:57:7a:66:b4:f7:94:37:b7:28:42:
         1a:d4:42:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 20:27:30 2026 by rpki-client