Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/027cf848-fcad-3012-88d4-4337f8574c11.roa
File:                     027cf848-fcad-3012-88d4-4337f8574c11.roa (raw, json)
Hash identifier:          IFg50A0zjh2Fpmq7z7lN2ICDOSLoqZbL3AMHh62Tkaw=
Subject key identifier:   37:46:4B:B2:BD:84:3C:E7:B9:74:E5:61:26:3F:07:9A:C1:E1:6E:49
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EAAC577CB231D03E2BE880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/027cf848-fcad-3012-88d4-4337f8574c11.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     4927
IP address blocks:        2001:470:2e5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:ac:57:7c:b2:31:d0:3e:2b:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=2854e394-a9bf-4775-bb32-86941489ce12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f7:6f:1f:15:bf:72:2c:60:d6:bd:54:48:13:
                    32:10:38:2c:66:db:32:00:32:5a:d3:0b:fb:a0:e0:
                    dd:ae:8b:4a:50:fb:2d:bc:bb:e8:3a:cc:86:71:b7:
                    27:74:c2:1d:f3:85:2c:44:6d:d9:68:73:12:e8:dc:
                    76:39:c8:74:f2:5c:da:99:1e:f0:c5:7e:c3:de:2f:
                    b0:cb:95:76:3c:5a:8e:d7:19:1f:a5:74:ff:e8:87:
                    85:81:3e:87:4c:03:d9:92:8c:72:24:b8:7b:e9:03:
                    89:9e:6b:2e:9e:47:56:0e:de:67:0c:ca:09:8a:bf:
                    98:02:b8:6e:13:18:74:2e:8a:aa:9f:a8:f5:04:4d:
                    5c:73:14:3a:c9:4f:bd:78:f3:4d:6d:4f:52:74:8a:
                    ad:aa:cc:e1:06:f9:84:e4:22:97:ea:51:56:20:24:
                    a5:3b:52:2e:8e:3b:55:36:e3:2e:ef:d9:c7:96:4a:
                    72:28:31:99:b6:ed:60:23:a2:1a:b9:d6:25:90:2f:
                    93:dc:f4:69:97:3f:b6:c1:ad:4d:07:e0:14:66:39:
                    66:73:7a:17:52:52:e9:ba:db:5f:39:06:b8:df:44:
                    c5:a6:26:b2:69:f4:0f:37:ea:78:69:e5:28:87:ca:
                    39:c4:17:91:fa:86:41:ee:19:a5:4f:4c:c8:5b:01:
                    2e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:46:4B:B2:BD:84:3C:E7:B9:74:E5:61:26:3F:07:9A:C1:E1:6E:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/027cf848-fcad-3012-88d4-4337f8574c11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2e5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:71:ab:26:64:03:e6:3c:92:90:2d:4b:18:b4:a2:ea:a7:35:
         79:62:8b:1d:39:3e:03:15:66:11:00:49:a7:1c:c5:ec:39:c1:
         a4:2b:2a:f2:da:71:63:4c:df:81:f7:a3:41:ba:49:83:a9:db:
         ee:50:17:d0:51:50:20:84:92:1d:d8:f6:c3:41:a1:66:6f:ae:
         dc:30:94:d4:b1:67:05:d9:24:f6:44:ac:cd:c6:64:cc:7f:1d:
         1e:cd:8a:47:9e:d3:9f:31:dc:ef:54:63:b9:1e:e7:c9:91:dd:
         74:33:c1:cb:dd:58:b4:8e:77:73:15:05:77:b1:b8:97:04:ef:
         63:c0:0a:20:66:c2:1c:90:39:94:ca:ea:1a:98:b8:1e:b4:92:
         25:06:8e:3e:8d:39:21:90:17:eb:86:19:87:a5:4b:91:73:7c:
         75:5f:a3:28:54:94:fd:c6:67:9a:bc:9d:1f:36:d0:51:1e:8e:
         e3:ae:39:da:01:f2:ee:1f:da:d2:9c:cd:2d:f9:22:76:62:3a:
         ef:66:ac:ae:2c:f1:b6:6f:05:a9:5d:fe:50:50:46:5e:fa:29:
         62:4c:3e:70:c6:20:71:5a:93:d3:b6:10:55:04:41:2e:ef:b2:
         39:32:37:66:e5:17:5a:74:9d:b7:df:fd:23:26:42:2b:1a:8a:
         fa:92:30:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:07:12 2026 by rpki-client