Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e47daa7-02ca-3b95-a725-6a3af9d16bfb.roa
File:                     0e47daa7-02ca-3b95-a725-6a3af9d16bfb.roa (raw, json)
Hash identifier:          hc+wcRDAnINLsdqw2KyyIw5EgFmXLXcXr5jMbr7rlso=
Subject key identifier:   C0:87:39:15:22:5B:AE:23:76:1A:11:5F:96:10:48:B9:B2:FC:E0:06
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EAA87D62CC49261E36AC60
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e47daa7-02ca-3b95-a725-6a3af9d16bfb.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     48422
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:a8:7d:62:cc:49:26:1e:36:ac:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=2a63141d-ea22-4d0e-996e-2bb7e4e954be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:79:c4:8c:19:cc:6f:39:99:8a:63:eb:aa:49:
                    02:82:c2:ea:71:3c:45:92:98:e0:8d:ab:1c:05:c2:
                    57:19:63:51:ca:85:f1:0b:dc:64:4c:57:78:b2:26:
                    5f:a9:4a:10:e3:fd:5e:8d:73:73:e7:8c:e8:4d:5b:
                    72:a0:32:37:4b:9a:61:da:1e:a7:53:82:34:1d:a5:
                    10:14:05:d6:88:6a:53:bb:63:b4:88:02:6a:73:b4:
                    88:b1:2c:1d:a3:1a:4c:44:65:58:c2:e4:d5:b7:a0:
                    e4:99:fb:4b:ca:ca:b5:dd:63:f0:da:82:95:53:53:
                    40:2b:ab:34:b3:5d:5d:7f:01:1a:6f:6b:bb:54:a2:
                    fd:e6:25:6b:b9:42:20:1f:15:04:1e:6c:4a:a5:df:
                    8f:54:3a:c3:f8:29:6f:0a:28:91:fb:84:88:5c:cb:
                    25:ed:87:cb:56:91:05:11:8e:16:6c:32:79:1b:4f:
                    86:4a:a8:e5:b5:05:03:fa:a0:7c:f9:48:bf:25:c1:
                    cb:38:3f:c0:af:d0:0c:be:c9:1a:3d:23:5e:10:df:
                    f1:37:1a:93:40:5a:75:7a:0b:ac:0d:34:30:0a:7b:
                    ec:65:66:3b:0e:a2:2b:e4:07:70:27:27:b7:35:66:
                    63:df:98:df:4c:34:22:1e:80:a1:48:93:33:79:53:
                    aa:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:87:39:15:22:5B:AE:23:76:1A:11:5F:96:10:48:B9:B2:FC:E0:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e47daa7-02ca-3b95-a725-6a3af9d16bfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:d6:23:b2:87:c5:bb:a7:fd:01:42:4f:79:4e:c9:b9:33:6c:
         65:60:79:02:7d:14:80:f1:e5:03:30:da:45:cf:f3:f8:dc:1a:
         b4:05:d7:89:82:96:09:3b:5d:f9:bf:da:49:66:ed:b2:39:4f:
         01:fa:de:05:8a:34:e9:22:49:6d:cd:d0:a4:3c:9a:ab:f2:b5:
         58:1b:ed:c6:4d:08:a3:7d:45:b8:a8:9d:bf:52:14:1e:fa:27:
         54:4c:06:f9:b7:80:c4:df:fc:95:1f:09:64:f5:d1:ec:cd:6d:
         5e:7e:65:8f:5a:15:17:fc:1c:c9:f0:03:24:84:9b:c4:39:c7:
         41:ea:a3:06:18:0a:76:b8:1a:fc:57:a5:7b:0f:53:4d:cb:f7:
         3c:04:a2:c0:2e:a6:30:10:92:9b:7e:52:e6:e0:e4:30:31:10:
         5d:a8:a6:8e:9a:32:d6:bd:06:cd:09:f7:00:98:c1:74:46:cd:
         5a:cc:2c:18:eb:b4:42:cc:ee:ed:57:13:f2:c9:61:3d:1c:14:
         5b:6c:d8:dc:4e:dd:02:6f:c2:2a:e7:79:17:bf:a1:46:56:3d:
         13:78:25:c9:cf:24:b9:07:5c:7b:fb:f1:d8:3e:f1:0b:ee:85:
         38:e1:67:79:d3:27:06:e4:c8:30:fe:35:b9:50:69:e9:0c:ff:
         82:2d:70:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:57:24 2026 by rpki-client