Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0820080f-d08d-3506-90a6-37dd73f83ddb.roa
File:                     0820080f-d08d-3506-90a6-37dd73f83ddb.roa (raw, json)
Hash identifier:          +2NqQ5IvouXYEx/Wybx28vlwPVbPkqqBN9sGsi3YPLI=
Subject key identifier:   F4:85:41:2F:1D:F9:A9:90:BE:DD:62:6D:C1:97:04:85:DA:03:41:1A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D65153479ED81B4D862DC8B90
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0820080f-d08d-3506-90a6-37dd73f83ddb.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     55201
IP address blocks:        2001:470:38a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:34:79:ed:81:b4:d8:62:dc:8b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=25c2ac4c-c3af-4dee-b8d2-2a555ab73a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d4:04:92:63:ca:4e:fd:bc:5f:8a:40:3c:a9:
                    8a:b1:68:ab:16:a1:50:b8:34:04:5e:5a:32:8b:19:
                    e8:0c:b3:42:8b:d7:cc:87:0c:5f:56:64:68:56:d5:
                    49:3a:8e:7e:3c:45:5e:8a:91:0b:82:88:ab:f0:e1:
                    93:77:0e:f9:1c:43:37:97:54:7e:ce:42:93:77:f5:
                    88:f7:18:54:87:84:e4:10:5b:bb:52:1d:4a:03:fe:
                    12:5f:6c:d8:77:e4:da:d2:c4:9b:79:74:a6:00:50:
                    cf:1d:4e:e6:f2:62:29:64:ee:1d:db:b8:5e:d0:e1:
                    4f:5c:44:74:42:55:63:94:92:0e:96:95:bb:40:6f:
                    bc:8e:32:e0:62:3a:bc:c2:62:68:ce:f0:b4:89:10:
                    2f:d0:35:59:41:08:58:b4:da:8a:8d:e2:56:44:10:
                    fb:ab:d1:28:8f:a0:c1:8a:b6:3b:a7:36:3b:86:04:
                    47:9c:c2:ae:3b:e9:97:91:64:d5:ca:ff:09:11:36:
                    29:ab:be:bd:3f:a5:15:c1:7b:60:3e:26:56:5d:7d:
                    24:d9:46:40:f9:0b:6b:d5:d5:b0:43:1e:3e:60:39:
                    a2:23:f0:44:5b:8b:70:89:1b:c8:a3:b4:67:fd:89:
                    50:de:88:93:e9:11:62:d0:c7:02:93:4d:a7:82:a8:
                    9f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:85:41:2F:1D:F9:A9:90:BE:DD:62:6D:C1:97:04:85:DA:03:41:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0820080f-d08d-3506-90a6-37dd73f83ddb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:38a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:3e:83:62:6c:47:48:15:b3:8a:81:2b:4c:c2:a6:9c:7e:cc:
         a9:3e:21:ac:73:9c:08:24:01:e9:ea:9e:95:60:0e:51:b3:47:
         53:0a:7d:6c:f0:de:c2:cd:fe:70:c5:63:40:b3:7d:7d:a9:41:
         76:b8:ba:1e:86:fd:59:97:97:ba:2b:be:d7:c6:40:38:5f:3e:
         56:f7:ad:41:e1:91:3a:97:4a:4c:c3:a7:4a:24:47:1a:7f:3d:
         5b:00:53:b0:25:c3:6e:59:96:2b:3a:1d:08:bf:d8:60:92:d2:
         4c:99:29:91:6b:2f:19:90:3b:d9:b5:e1:8f:80:5b:6d:68:d1:
         d9:26:82:ce:0e:7a:c2:e5:8e:54:4c:bc:8b:1d:e9:86:75:41:
         4a:a0:a1:bc:b3:ff:01:42:d2:e2:90:fc:f2:46:88:a5:08:13:
         6f:08:34:e2:57:97:c8:67:e5:2c:55:85:e8:08:81:15:af:3c:
         6c:aa:e0:78:ae:e8:30:91:a4:c3:2b:8f:69:e1:98:29:2d:b5:
         0d:0c:60:45:43:3c:b0:e8:e5:d4:aa:d0:f4:5a:43:e2:bc:22:
         de:08:ad:d2:10:69:09:0b:c9:e5:e0:51:4b:01:c1:40:06:a5:
         c0:ba:c4:fd:b3:a3:bb:1d:19:cc:f0:57:fb:9c:58:0a:40:fc:
         4c:79:8c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:42:50 2026 by rpki-client