Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/13f13a32-c280-396e-ad36-5c4adf692cea.roa
File:                     13f13a32-c280-396e-ad36-5c4adf692cea.roa (raw, json)
Hash identifier:          9KqYmGrqw/VdbDPa68tZFfSkBsqYvBNOLWEHyVkChW4=
Subject key identifier:   21:D5:F2:23:52:17:F7:39:6D:BA:68:C5:DA:C8:A0:70:E5:AC:41:2B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA901F6C74F8052E2B4C30
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/13f13a32-c280-396e-ad36-5c4adf692cea.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     983
IP address blocks:        2001:470:294::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:90:1f:6c:74:f8:05:2e:2b:4c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=5cc50ddd-a316-485c-923a-dfcc552f9cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:33:29:e8:2a:db:ed:8a:07:75:8c:59:2d:5f:
                    5e:9b:74:a0:2a:cc:de:79:67:d1:9e:24:a9:a9:d0:
                    9c:9d:f0:a9:e9:43:c5:75:16:34:55:00:9f:c8:a3:
                    d9:ed:8e:27:b8:67:07:0d:5c:5e:8a:51:a7:a1:13:
                    08:5d:b7:d1:d8:30:47:79:10:f1:5d:10:17:fa:45:
                    23:25:61:f9:f6:da:31:5b:94:c2:77:a3:21:d7:0e:
                    f7:10:46:c7:9e:1e:26:fd:8e:ff:25:b4:db:25:04:
                    39:3d:5a:62:84:bb:a0:9d:fe:21:55:c4:56:2c:e7:
                    eb:8f:d3:2d:8f:7d:1d:8c:a8:4e:20:0e:ab:31:54:
                    79:65:de:9e:1f:24:c4:00:64:4f:bc:28:64:f2:bd:
                    71:e7:43:71:19:76:61:a5:c2:82:85:e7:24:27:94:
                    6f:1d:a6:61:25:a6:af:14:bd:79:5c:44:08:2b:de:
                    9c:f8:91:03:2b:6f:99:4c:3f:7b:2a:97:31:15:a9:
                    98:9a:33:6a:35:97:fb:57:fa:29:00:06:2a:9b:0a:
                    aa:c5:13:c1:2e:2c:1c:aa:ac:bb:e9:d4:05:1a:ba:
                    8a:03:b4:66:88:24:e1:f2:33:43:01:57:53:b9:41:
                    7b:c3:8d:74:c2:0e:a9:68:e4:10:18:07:3b:49:4f:
                    da:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D5:F2:23:52:17:F7:39:6D:BA:68:C5:DA:C8:A0:70:E5:AC:41:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/13f13a32-c280-396e-ad36-5c4adf692cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:294::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:71:df:e3:d7:02:b3:ca:ec:9b:71:dd:9d:57:68:51:44:f8:
         09:7d:a4:20:c2:45:f9:04:68:15:54:57:7f:56:70:3e:d6:dd:
         77:ef:1d:1c:da:89:86:95:16:6c:41:3a:cb:c7:85:7e:ae:dd:
         a8:91:a4:87:bd:6a:66:9c:37:9c:51:0c:c5:f4:cb:f7:d3:85:
         96:de:d5:d2:76:48:06:1c:bc:66:4f:33:1a:da:bc:b9:14:28:
         18:a4:c4:54:1f:3d:98:4b:b3:1a:1e:64:1f:1a:4f:e6:0a:23:
         08:1e:76:ff:93:29:30:69:09:e5:84:63:35:db:51:72:b2:2a:
         6a:ee:1f:97:d1:66:bc:ca:df:ef:34:00:09:e6:7c:47:03:90:
         88:02:b8:98:72:11:8c:1e:80:5a:ad:b0:9a:d8:74:4d:6b:6d:
         6a:25:f9:d2:c4:8b:64:32:d8:da:cd:0a:77:c0:2b:39:d8:4e:
         e0:ad:0d:5e:2a:35:47:2f:53:01:bd:59:e0:0a:e0:b3:1b:f6:
         66:eb:25:59:e7:66:93:74:78:6a:ad:63:31:ce:1d:96:f4:3c:
         c9:8a:6e:38:7a:e8:5b:b5:cf:45:bc:66:49:4e:f3:13:0a:3d:
         7c:1a:a6:6c:6d:4c:5e:4a:0e:4f:b4:26:9d:1e:95:14:42:5c:
         36:85:2a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:01:05 2026 by rpki-client