Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e0ef29a-9032-32ce-bb82-4792d0881629.roa
File:                     0e0ef29a-9032-32ce-bb82-4792d0881629.roa (raw, json)
Hash identifier:          GWZq0XxWUaQz6iynFYilphOq4ws9GsU8w45oUfXIr7s=
Subject key identifier:   6E:E9:37:BE:FD:31:8D:5B:62:45:1D:82:4B:22:65:CD:C7:90:68:1E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EA5AA93EDAF23B09B9C131C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e0ef29a-9032-32ce-bb82-4792d0881629.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     266809
IP address blocks:        2001:470:3b3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:93:ed:af:23:b0:9b:9c:13:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=cc9a505d-940c-4dbe-85bd-c038f2707795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:14:91:e6:bd:92:ab:06:1d:b4:1c:e2:1e:c9:
                    d9:3e:b9:3f:3b:ff:85:1e:17:eb:33:8d:3f:f0:48:
                    0c:f0:9d:3f:1d:6f:4c:87:48:cf:05:ce:34:e2:77:
                    37:32:9b:20:56:c4:6a:d8:29:d2:b9:38:f3:44:fb:
                    22:5d:f2:e7:df:39:66:5c:14:71:d2:7e:b5:15:ba:
                    cc:52:30:be:08:7e:72:54:fb:db:d7:2d:53:16:53:
                    35:b7:d6:98:61:3d:20:57:6a:37:e5:58:0e:39:8a:
                    db:b9:fb:ab:06:ea:d9:10:99:75:07:63:f6:1b:da:
                    13:8b:2b:44:5f:07:8e:f5:da:12:c1:ec:06:c0:b0:
                    67:fc:92:b9:e6:87:ef:18:40:03:ac:32:1b:9e:88:
                    93:3f:c5:0d:9f:eb:c9:0d:dc:95:fc:10:33:06:4b:
                    2b:b7:b9:4b:78:b0:cd:9e:ed:e4:66:42:c8:5f:3f:
                    a1:2d:27:f8:44:33:fa:f7:43:9a:a0:cb:1c:b2:95:
                    a1:77:b0:13:7e:92:eb:a1:98:e3:db:1f:40:19:b3:
                    4e:73:66:db:43:cf:d5:c0:33:4e:ef:18:02:79:39:
                    96:7a:cb:d7:ad:02:9c:7c:81:e0:39:8d:a2:1a:14:
                    e4:61:ce:29:b9:98:53:0f:bb:5f:f7:16:e2:02:25:
                    30:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E9:37:BE:FD:31:8D:5B:62:45:1D:82:4B:22:65:CD:C7:90:68:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e0ef29a-9032-32ce-bb82-4792d0881629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3b3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d0:3e:cb:e9:2b:d9:a6:43:a5:69:ee:85:66:6c:71:1f:c6:
         b7:af:9f:8b:8a:57:9a:b7:6f:af:f1:9a:7d:f2:4c:c9:a0:2b:
         f7:d7:a9:0d:1b:a6:00:ac:bc:36:28:20:51:ad:e5:48:fb:a5:
         04:37:15:c3:85:5b:2e:fb:94:f8:2b:d3:b9:96:97:f1:be:54:
         6a:84:d4:46:47:22:e7:27:b0:34:76:78:21:4b:07:31:7c:72:
         cc:c4:60:98:f3:7f:94:42:8d:c1:e8:75:c2:62:4d:35:fc:b2:
         34:7e:56:c3:b8:c0:57:00:ce:c7:e5:69:6f:6c:b3:1c:ed:11:
         ca:26:50:be:45:69:3f:55:78:5c:54:fc:7f:7f:2e:c3:37:c0:
         57:21:35:d7:01:a6:14:ce:81:77:d3:0a:98:f9:0b:e9:a2:c8:
         db:9f:44:58:88:a4:03:b4:f6:02:53:48:e2:64:01:78:fd:a0:
         83:2e:fa:14:01:67:0c:ab:6f:b0:38:f5:64:c4:09:dc:64:7b:
         06:d9:a6:55:41:74:3a:15:de:36:32:78:2b:6d:d9:92:99:ee:
         fc:fb:52:d4:fd:2f:53:1d:9c:08:06:63:7e:1e:bf:f9:47:95:
         80:f1:57:f3:7a:0f:87:12:c1:d7:1f:f0:d0:6c:44:22:52:7a:
         91:23:8e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:10:51 2026 by rpki-client