Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/145bce58-8daf-35c3-9139-3fd6022a2dcf.roa
File:                     145bce58-8daf-35c3-9139-3fd6022a2dcf.roa (raw, json)
Hash identifier:          O1ZZSyu/0VFxZTNNP+Ip4Ivktmza3ZyJTmiqchg8wpo=
Subject key identifier:   64:EF:6C:61:E9:36:18:18:E6:95:02:3B:FC:A8:26:8F:8E:79:63:07
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DF0AB4A3F6A51DB661768C980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/145bce58-8daf-35c3-9139-3fd6022a2dcf.roa
Signing time:             Sun 24 May 2026 13:00:30 +0000
ROA not before:           Sun 24 May 2026 13:00:30 +0000
ROA not after:            Sat 22 Aug 2026 13:00:30 +0000
asID:                     56971
IP address blocks:        2001:470:578::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f0:ab:4a:3f:6a:51:db:66:17:68:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 24 13:00:30 2026 GMT
            Not After : Aug 22 13:00:30 2026 GMT
        Subject: CN=f8284090-a6ba-4e26-8fd4-124fe058b6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e4:ea:e8:90:2f:03:c6:19:8e:ca:a7:23:21:
                    88:be:4a:eb:b4:58:c0:a8:3a:f6:9b:0a:be:90:52:
                    81:b2:86:57:1f:e4:e2:a2:bf:58:8d:56:28:51:8a:
                    e8:b7:0b:0e:68:d8:1f:4b:5c:65:8f:1c:1e:89:75:
                    69:d3:31:20:d8:49:f5:dd:73:87:5b:03:16:4f:5d:
                    f6:aa:3f:ee:a8:a0:31:8d:3b:84:54:8a:78:4c:45:
                    58:3a:bf:eb:34:30:b5:7a:3e:be:51:19:99:e1:c0:
                    28:87:12:74:a3:eb:c0:83:81:83:6d:8f:d7:0f:b0:
                    ab:1d:87:aa:a0:0d:9a:71:90:0f:6c:61:b9:02:ec:
                    4b:17:be:de:69:b0:1a:07:82:7a:2a:2e:cd:aa:18:
                    5c:cc:5d:3a:87:33:31:12:46:91:7e:c1:51:3e:f7:
                    fa:18:58:32:43:26:d9:43:2b:91:77:74:1e:bf:58:
                    fc:ab:32:e3:91:87:f3:d9:d8:76:bc:66:0a:4e:62:
                    1c:61:22:3c:2f:1f:a3:30:4f:c6:41:cd:04:11:05:
                    f8:23:ab:61:7f:2f:e7:34:fd:70:6e:9a:d8:e3:0d:
                    79:e7:38:d4:2a:60:ce:64:1c:0c:b9:fd:7b:07:71:
                    86:9b:ff:d2:38:86:67:13:48:6d:05:15:36:2c:b0:
                    b6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:EF:6C:61:E9:36:18:18:E6:95:02:3B:FC:A8:26:8F:8E:79:63:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/145bce58-8daf-35c3-9139-3fd6022a2dcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:578::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:e6:0e:94:17:d7:5d:a9:52:bf:81:d0:d3:fe:d1:9d:b0:76:
         79:18:5e:32:c2:4d:0a:d6:f2:f7:29:a1:f9:86:02:70:35:9a:
         ae:f8:55:8a:45:4e:d9:c3:80:73:e2:c9:9c:7a:a4:46:53:b4:
         8d:f2:ea:54:d4:fb:77:11:b3:fa:3c:ab:66:18:f0:ff:30:b2:
         69:7e:93:55:43:58:05:cd:73:e2:d8:3e:c6:83:02:36:3f:c2:
         e6:32:02:aa:a3:e4:ef:52:5a:3d:d5:d1:0b:00:a1:a2:64:83:
         93:51:47:a2:fb:04:6c:1b:09:a4:da:77:fd:55:4a:f6:59:fd:
         88:da:27:28:5c:9d:3a:33:99:95:ae:af:58:0b:be:55:84:f5:
         03:2d:69:10:4c:09:9b:39:5a:23:5a:43:9b:cf:b4:9c:96:a2:
         f3:6a:3e:30:89:1a:2a:73:28:d2:5d:0b:f7:b0:42:2a:44:c6:
         97:14:84:11:06:7c:b9:fd:21:77:1c:ff:5b:6e:6f:ce:f0:82:
         58:dc:5c:2b:4f:88:0a:a4:fa:f9:6b:4d:83:37:a1:99:be:9f:
         ff:ad:bc:d6:29:2a:3f:b0:e3:28:92:75:d8:b8:97:40:9d:a6:
         12:ff:da:ee:6c:88:c2:53:48:65:d0:03:3b:36:fc:e0:31:73:
         51:9e:4c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:41:49 2026 by rpki-client