Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c1d9b1b-aae0-33de-9996-50958fe5794a.roa
File:                     1c1d9b1b-aae0-33de-9996-50958fe5794a.roa (raw, json)
Hash identifier:          Fw4PmD5DLoWv2+Drhlor7CNf71PTD+Ex8qjCVJ4K9ZY=
Subject key identifier:   FF:7B:91:71:4D:E8:27:43:1C:AA:6C:E1:C5:B8:31:59:1F:F1:AB:26
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584CF587A36F4AF197CBD9047660
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c1d9b1b-aae0-33de-9996-50958fe5794a.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     140577
IP address blocks:        2001:470:3bb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:a3:6f:4a:f1:97:cb:d9:04:76:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=1ae41bb2-2895-4c73-b5f4-4b410964409a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:60:39:ae:a1:0b:37:a2:07:36:75:a3:85:73:
                    45:7d:af:83:4f:d5:ab:cd:84:b8:9e:12:47:23:37:
                    58:36:94:c1:28:71:33:45:37:1e:ab:72:a7:da:6a:
                    6b:8e:78:7d:e4:0c:5a:d8:cb:0f:83:93:c2:23:b2:
                    2d:c8:1a:6a:a2:73:34:0b:b0:2f:10:49:00:07:8d:
                    ec:5e:60:45:5b:a1:cc:a6:eb:4c:09:fc:4b:98:d7:
                    86:19:9f:6f:7f:26:d4:db:c1:7c:96:61:b6:e6:5e:
                    5a:71:cb:25:38:6f:55:eb:24:41:73:91:1a:99:b8:
                    61:4e:a4:a3:4b:77:b7:98:10:7c:4b:ff:5e:c1:1f:
                    fb:c4:f3:4f:18:16:d7:f4:d0:e2:ac:b5:e7:29:4c:
                    3f:ed:42:15:7f:1f:e2:a5:29:df:83:c1:35:a0:7c:
                    43:39:cf:5e:ad:81:ff:86:a5:a5:38:56:48:3c:4c:
                    dc:4f:72:65:aa:12:3e:c9:1f:e7:ab:e5:2d:dd:47:
                    07:e9:5d:60:c2:3a:82:52:e0:ed:ec:82:4d:63:67:
                    73:b4:ca:37:e2:e3:41:e9:bd:b6:6b:c2:5a:3b:60:
                    63:7c:58:06:79:e5:4b:30:21:00:2e:57:1a:e8:b1:
                    ee:6c:db:09:b9:52:99:04:ed:ce:7d:b2:65:92:8e:
                    87:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7B:91:71:4D:E8:27:43:1C:AA:6C:E1:C5:B8:31:59:1F:F1:AB:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c1d9b1b-aae0-33de-9996-50958fe5794a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3bb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:3e:a5:49:da:06:52:6b:ba:15:4c:d8:a0:89:7e:08:88:94:
         31:39:46:b3:a3:cb:13:69:ba:dd:3b:6d:05:60:9e:08:8a:c0:
         be:e3:1c:97:48:a0:0b:b3:d2:31:05:da:9b:25:98:fd:9c:a7:
         03:ff:90:ec:17:dc:88:52:78:69:d6:ec:10:69:88:f5:f9:e6:
         d7:2b:76:97:59:9a:e4:b5:5e:37:b4:6c:dc:af:d5:f9:08:8e:
         77:2e:9f:72:92:ab:d3:56:82:9a:2d:a9:22:74:14:36:8e:48:
         d8:56:08:18:41:6f:ce:19:3e:17:bf:77:b0:78:dd:7d:a1:46:
         ee:71:e7:a8:ec:69:e8:0a:44:be:b6:f9:dd:63:3e:ee:e3:b2:
         ce:cb:73:c1:1b:2f:2a:fe:d5:c4:ca:3e:61:da:34:b0:52:3f:
         fe:2b:b9:bb:01:16:ec:65:57:be:0d:15:6a:d6:bc:2e:b6:f9:
         f8:3d:96:61:50:b4:59:8e:06:31:fa:92:f3:e3:ab:f9:a2:52:
         13:1f:5c:f1:00:01:b7:0d:ce:2a:ae:c8:5e:96:ee:eb:aa:8e:
         59:0c:d9:eb:a4:ad:b9:29:a4:3e:ff:79:ee:2a:67:0d:61:bd:
         17:33:62:d7:80:12:03:0e:da:f0:a7:73:cf:13:3b:c2:9c:16:
         06:f0:37:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:04:55 2026 by rpki-client