Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0517423c-c9c8-3d12-bea3-d6d745972426.roa
File:                     0517423c-c9c8-3d12-bea3-d6d745972426.roa (raw, json)
Hash identifier:          E0QdP1VY89l4K5ufzUUaW4+118RQHveBDkFYTgP6cHA=
Subject key identifier:   77:39:ED:3A:00:D3:A5:02:AC:3D:24:C8:CA:BB:5F:F3:A3:AB:41:6D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DF4DB7216099236B39A8DC800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0517423c-c9c8-3d12-bea3-d6d745972426.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     18647
IP address blocks:        2001:470:36e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:72:16:09:92:36:b3:9a:8d:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=0d7e689a-6a26-491e-a38d-06a575b2388a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:33:37:82:ed:a0:f4:22:6a:f6:45:be:b5:de:
                    d9:22:ea:9c:34:bc:69:bb:18:39:64:6b:e3:63:27:
                    c6:46:0f:5a:93:fb:7a:43:13:f4:3e:2a:6b:4d:0f:
                    bb:5a:ac:22:54:db:5b:4e:1e:8a:45:87:95:2c:58:
                    05:bf:8e:c2:59:86:f3:f1:a5:95:72:17:a3:70:d2:
                    b0:56:a5:47:5b:88:56:2a:cf:84:9f:25:57:bf:6a:
                    4c:a2:10:67:a8:ab:5e:eb:ed:2c:59:2d:6c:98:c3:
                    28:da:3d:94:e9:21:c0:c8:4f:36:a1:12:35:03:2f:
                    e8:25:36:77:2f:60:eb:ab:8e:15:7a:e4:56:0e:19:
                    b0:69:5a:3e:2f:3c:45:74:60:03:a8:e6:91:44:0a:
                    22:b2:12:dc:26:f6:52:46:98:45:7f:7f:f5:3a:81:
                    68:80:cb:33:bd:50:a9:b0:12:fd:e6:ad:6e:dc:7f:
                    a0:ce:5d:2a:42:80:db:37:1a:5f:c1:55:fb:6d:c7:
                    3e:e5:e2:57:44:e2:14:8a:37:9b:77:f6:3d:ce:b3:
                    5b:3c:23:93:ae:4b:45:4b:19:3b:21:ca:35:0a:a6:
                    c0:37:82:c9:5d:48:6f:03:36:d7:58:6e:d2:c6:c2:
                    5f:23:46:2a:d9:3a:24:e4:36:0a:b0:81:9c:e5:ca:
                    11:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:39:ED:3A:00:D3:A5:02:AC:3D:24:C8:CA:BB:5F:F3:A3:AB:41:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0517423c-c9c8-3d12-bea3-d6d745972426.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:36e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:f1:03:63:75:13:8c:f0:1a:99:7c:83:60:b2:f3:98:f8:f5:
         5b:79:99:1d:43:f2:8d:ca:19:14:0c:38:84:06:f3:d1:ef:95:
         a8:7a:b4:e4:28:3f:ed:e9:13:03:0d:ae:13:c1:74:4e:f5:90:
         7b:6a:ef:a2:17:d6:c4:06:a3:90:60:44:15:13:f5:d3:5c:72:
         a8:9d:cf:59:20:d7:17:34:67:6e:fa:e2:b8:11:2b:ea:d5:0e:
         97:98:0e:e8:c7:db:7c:bc:b4:a3:85:59:ec:45:ed:ef:a5:92:
         81:e4:8b:06:12:56:d6:e7:17:50:a1:62:f6:73:34:48:5b:29:
         67:58:d9:ee:36:ab:ef:15:06:f7:c7:f7:6c:3a:c9:0e:00:52:
         ae:51:11:2d:41:5a:94:44:1f:6f:4c:91:7e:8e:62:04:7c:e1:
         37:30:60:06:d0:b5:5e:a7:96:f1:0b:4e:c0:f6:74:e4:5d:03:
         c3:00:22:0f:94:c0:17:c4:fa:aa:60:83:59:9d:d0:e5:3b:a6:
         ba:1f:bd:b2:33:ce:06:3c:a0:da:a3:5d:5a:ae:4d:2c:6c:b6:
         0a:1f:3b:17:4b:fc:fc:dd:48:b4:15:b7:25:09:e4:35:ee:5c:
         cd:48:52:77:19:31:e6:83:76:a9:dd:36:df:7b:0c:7b:4c:b2:
         95:d8:b8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:33:14 2026 by rpki-client