Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe1217cd-e105-38c8-8da5-39358e8ccdc1.roa
File:                     fe1217cd-e105-38c8-8da5-39358e8ccdc1.roa (raw, json)
Hash identifier:          nEEbLdtw8fENTgO17ws/uCuaoXtrsfyoV4lW+gIfprk=
Subject key identifier:   44:9C:06:4A:E6:BC:8B:3F:D1:A4:CE:54:00:E6:92:E7:39:CB:1C:31
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D905A9D58BF25622E08A8C240
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe1217cd-e105-38c8-8da5-39358e8ccdc1.roa
Signing time:             Mon 20 Apr 2026 01:00:24 +0000
ROA not before:           Mon 20 Apr 2026 01:00:24 +0000
ROA not after:            Sun 19 Jul 2026 01:00:24 +0000
asID:                     62206
IP address blocks:        2001:470:4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 May 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:90:5a:9d:58:bf:25:62:2e:08:a8:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 20 01:00:24 2026 GMT
            Not After : Jul 19 01:00:24 2026 GMT
        Subject: CN=96668790-b0a5-45d1-80fc-8fe081a981f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:73:43:42:06:9b:a3:6f:23:d4:13:8f:a7:a5:
                    3d:a5:db:d3:86:70:7c:2e:bd:c7:8a:ad:9f:a9:e0:
                    72:9d:f3:84:e7:a6:53:ea:30:16:34:86:30:4e:59:
                    4d:b2:d5:d2:ce:89:27:18:ad:a5:3b:1b:d7:82:3f:
                    f1:5c:1f:ed:42:6e:ea:16:f5:89:f9:14:07:e8:6c:
                    d7:9f:9d:40:bf:6e:94:dd:ba:a8:52:a1:18:33:8d:
                    dc:59:6f:05:d9:8c:81:1a:37:2f:2d:ac:fc:52:06:
                    23:9f:80:fa:45:57:d9:1e:33:e1:b9:ea:8d:86:a7:
                    59:d5:a6:b9:d0:4b:eb:80:41:37:a2:b0:9c:1a:ca:
                    77:48:e8:d2:6e:b0:b9:61:ab:4e:6b:8d:fc:3e:67:
                    31:61:7a:d6:a8:ba:8d:16:96:ee:e7:b8:b1:76:31:
                    53:12:d1:18:de:fa:bc:66:1a:13:38:f2:9b:3a:7b:
                    fc:c9:2d:f6:46:c3:54:9c:c6:8e:d1:b2:7b:54:59:
                    d6:e7:5c:f6:15:87:7b:07:db:0c:aa:48:e3:41:26:
                    02:b7:9a:b3:9f:96:20:02:12:8a:cd:1a:be:5b:22:
                    d0:c8:ac:8a:ec:8f:60:60:2d:5e:1a:65:17:4f:07:
                    ae:9a:f8:01:d6:66:cd:36:71:46:11:95:28:d2:13:
                    34:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9C:06:4A:E6:BC:8B:3F:D1:A4:CE:54:00:E6:92:E7:39:CB:1C:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe1217cd-e105-38c8-8da5-39358e8ccdc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:14:e8:7a:3f:a1:13:bf:50:7a:7a:63:91:63:e6:84:cc:a4:
         14:41:f2:d4:13:40:b8:b6:fd:f0:a4:c6:0d:b1:e8:0d:ac:0e:
         d4:bc:10:99:3a:77:4d:a8:94:8f:17:f0:1f:79:35:39:8b:10:
         5e:31:fd:ca:85:30:90:83:f6:c1:39:01:5f:17:77:9d:ee:13:
         4f:e5:5b:e4:26:8e:88:06:69:c6:9c:0a:dd:cb:49:b9:56:cc:
         d9:3e:fd:d2:ef:4a:0e:ba:47:0e:c6:f3:d1:1f:d3:d3:eb:f5:
         91:59:04:f1:65:e5:40:52:6e:5c:8d:93:a1:45:02:4b:a7:25:
         8e:67:f0:42:1e:78:4a:56:82:eb:b7:57:2c:d3:0c:c3:38:e7:
         8a:4b:91:8f:f0:0b:62:4d:d5:da:92:81:00:d1:d4:53:34:1b:
         f8:5b:d4:66:a7:51:19:0f:14:4f:2d:72:9b:7c:b8:19:48:75:
         84:41:a7:6b:6d:ae:b5:52:39:e6:3f:9e:e4:11:94:85:0b:52:
         d6:b7:81:95:01:41:1f:e4:e2:16:ee:c5:2b:82:cd:8c:76:df:
         bf:53:1d:02:e9:cd:42:f5:0d:b5:1b:04:b7:ba:f9:fb:0c:43:
         a0:95:17:09:7f:03:78:81:9c:32:13:79:ee:4b:85:26:8b:ae:
         db:55:0c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:42:38 2026 by rpki-client