Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/0120092f-ba8d-3fc9-ab61-5e385d8f6267.roa
File:                     0120092f-ba8d-3fc9-ab61-5e385d8f6267.roa (raw, json)
Hash identifier:          dIzUYFvMNh9OCwWdJuybvSV3g4zXRLD9D7qE2nzjq94=
Subject key identifier:   70:F1:EF:8C:77:D5:E0:5A:26:61:E9:70:F3:25:FE:D6:B5:67:FB:D2
Certificate issuer:       /CN=cb49febe-7885-4a3a-8290-3710b3f34905
Certificate serial:       010D0C9F4328584E09D1140BED931A760414DCA0
Authority key identifier: BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/0120092f-ba8d-3fc9-ab61-5e385d8f6267.roa
Signing time:             Tue 02 Jun 2026 13:12:03 +0000
ROA not before:           Tue 02 Jun 2026 13:12:03 +0000
ROA not after:            Mon 31 Aug 2026 13:12:03 +0000
asID:                     376
IP address blocks:        2001:510::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:d1:14:0b:ed:93:1a:76:04:14:dc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb49febe-7885-4a3a-8290-3710b3f34905
        Validity
            Not Before: Jun  2 13:12:03 2026 GMT
            Not After : Aug 31 13:12:03 2026 GMT
        Subject: CN=66b3c888-398e-4406-937c-863cf4139cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:36:cd:c1:2b:d1:3b:74:cf:bb:a7:d8:bb:3a:
                    cc:d0:e8:af:31:31:72:c7:96:35:78:1b:85:d2:ab:
                    3b:2d:62:53:0e:bd:ae:61:0f:db:a2:d6:80:c6:8b:
                    d8:97:64:84:19:e9:d5:d4:a3:5d:a8:dc:b9:06:48:
                    b5:9e:ec:48:ef:64:f1:e5:0a:77:09:ac:9e:a9:71:
                    fe:16:91:36:7c:bc:23:a9:a7:72:0a:37:d2:81:3b:
                    ce:b9:4a:7f:39:3b:43:28:3c:bd:53:f2:05:c2:96:
                    70:4e:98:79:c5:1e:c5:0b:00:c9:3d:14:d9:20:a7:
                    65:2e:b9:c3:0c:12:03:91:dc:5a:ed:76:76:53:ca:
                    c1:64:56:ee:dc:5d:0e:e5:57:77:3b:94:59:ec:e8:
                    b2:85:b8:2b:d9:ca:2d:d3:a1:29:1b:f5:c7:d2:50:
                    d5:22:73:e1:72:68:eb:19:06:8e:84:6c:18:13:f7:
                    bb:95:d5:af:20:d0:17:a1:24:4f:cb:bb:cf:f2:28:
                    6a:4e:77:aa:69:bd:07:67:53:b0:77:60:a2:60:16:
                    82:fe:a4:a1:8d:13:df:26:54:b9:ab:c6:1d:20:e3:
                    95:fa:f0:03:bb:2e:db:e4:3e:6d:37:4f:a9:f6:f0:
                    c1:1f:97:75:72:57:b4:22:3d:bc:71:81:af:a8:a1:
                    90:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F1:EF:8C:77:D5:E0:5A:26:61:E9:70:F3:25:FE:D6:B5:67:FB:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/0120092f-ba8d-3fc9-ab61-5e385d8f6267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905/cb49febe-7885-4a3a-8290-3710b3f34905.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E1:B3:66:4C:39:9B:46:8C:0D:19:86:EB:B2:97:DC:97:D0:19:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cb49febe-7885-4a3a-8290-3710b3f34905.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:510::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:dc:1c:6c:85:29:d0:0f:9f:31:71:c0:72:38:a7:9b:09:15:
         4e:be:d8:a0:47:6e:e4:e9:8b:df:ef:86:1a:ec:07:dd:1c:87:
         12:72:21:2d:49:00:62:e9:36:f5:a9:b3:94:bb:ca:84:4c:5d:
         0d:db:8f:51:47:b8:f6:51:ef:1d:07:26:df:e3:ca:a4:a7:48:
         1f:07:ba:d0:c8:5a:21:f6:bf:35:70:5c:b8:71:dd:5a:df:c7:
         f7:92:ce:79:58:73:90:f3:30:11:82:9e:5a:91:1b:5a:78:e6:
         d9:38:a6:32:39:9f:f2:a8:48:e4:29:de:5f:2d:ab:a6:d4:17:
         4f:d6:2a:6c:15:2d:b1:8a:36:16:45:47:ef:bc:1f:28:d9:76:
         c0:97:49:5f:d0:96:d9:e0:8c:9d:b8:9b:be:7f:af:08:4c:64:
         64:16:ac:42:f7:54:80:c1:32:18:29:8b:c2:49:91:5d:54:7b:
         dd:b1:2c:db:18:4c:95:e0:37:e4:15:a0:73:22:9a:ca:05:5c:
         13:5e:0e:8e:42:e6:f8:a0:96:d2:c6:42:dd:82:d2:b4:0a:fb:
         71:30:5b:94:48:3e:8c:e4:42:4b:b2:87:f8:1f:3c:d7:e0:f2:
         54:78:00:da:01:5e:65:a0:59:55:99:50:8d:33:62:db:92:ae:
         1d:6f:2a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:29:36 2026 by rpki-client