Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1eb18087-0ad7-3176-a2f7-125ca5600767.roa
File:                     1eb18087-0ad7-3176-a2f7-125ca5600767.roa (raw, json)
Hash identifier:          97pkVRdN+Z2K+6IDiSwRayQyVanBD4hwrALuwTomH/Q=
Subject key identifier:   E7:0A:A1:2E:10:9C:20:99:82:3C:ED:D2:0C:5A:8D:5B:B7:E2:DD:9C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E0005DBBC5F8EEAB93B2E9F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1eb18087-0ad7-3176-a2f7-125ca5600767.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     45499
IP address blocks:        2001:470:48d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:db:bc:5f:8e:ea:b9:3b:2e:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=1a3e15bc-a11b-4475-b4ab-980046207a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e9:0c:f6:fe:09:d1:65:30:9a:35:12:ea:76:
                    2e:ab:3f:67:7f:ee:e0:83:c1:97:af:bb:ca:d2:97:
                    73:34:a7:ee:6f:a3:50:6d:79:98:ef:b8:19:47:c4:
                    3c:57:e4:33:35:c4:93:4c:42:bf:e4:05:8a:ac:e1:
                    2d:81:2b:f6:6f:70:b5:52:25:f2:d2:ac:28:0e:a4:
                    fa:f4:71:d2:59:ec:1f:d8:f7:c5:fd:91:93:b9:8a:
                    cc:89:d9:4d:d7:1c:da:0f:30:66:19:bd:83:bf:4d:
                    13:41:80:4d:c3:a6:b1:90:5e:67:a6:cd:07:90:b4:
                    24:70:85:12:37:35:54:f7:c5:89:7a:54:37:62:61:
                    e4:15:02:32:33:8e:da:ae:24:51:f3:49:fc:00:e3:
                    11:30:16:2b:55:cb:1f:fd:88:e2:d8:9c:ae:3f:62:
                    e3:45:d1:56:3f:43:57:2e:6b:e6:5b:1f:15:e3:20:
                    65:2b:58:3a:df:cd:0c:42:2a:88:5f:1b:48:1e:f0:
                    14:54:c7:f1:e4:e3:2a:c2:77:7f:4e:5e:50:93:01:
                    a8:96:92:c3:a4:ca:1c:a4:ea:cf:1c:f7:e4:96:65:
                    e3:4f:c1:5a:4e:43:3c:e6:a9:6e:a7:25:1a:c4:4b:
                    5e:b8:8a:05:30:12:50:4c:be:58:cd:78:f7:48:f6:
                    0a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0A:A1:2E:10:9C:20:99:82:3C:ED:D2:0C:5A:8D:5B:B7:E2:DD:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1eb18087-0ad7-3176-a2f7-125ca5600767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:48d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:96:58:10:af:0f:2d:7f:c4:07:1d:c1:35:65:d1:d5:d4:4e:
         ff:40:12:99:bc:21:e8:30:b3:0b:4a:46:d7:9d:46:d2:e0:9e:
         81:a4:c3:db:12:87:7c:66:da:76:40:38:be:a0:a2:28:39:52:
         ae:e6:88:20:25:85:f4:66:0b:3a:0c:c5:dd:00:7b:c4:45:80:
         99:87:23:4d:eb:2e:1e:97:4c:48:ad:b2:83:e6:c3:dc:ac:d5:
         3c:77:0f:a3:53:dd:22:49:47:2f:90:81:e1:dc:2a:69:eb:2e:
         58:86:1d:73:93:73:28:52:e8:14:92:c3:81:81:26:bf:ce:70:
         6d:78:9b:5c:92:ce:f6:3b:d2:82:8b:f9:b9:03:a8:59:13:40:
         96:c0:2a:b4:f3:85:39:ab:48:85:b4:b7:3f:f5:9f:61:a8:b8:
         93:bd:f8:16:38:85:f8:e1:23:d5:1d:3c:2e:0c:ea:b9:64:a8:
         f4:6d:30:a0:d8:76:d1:cd:36:29:b0:b7:5c:c5:aa:35:15:33:
         72:fe:6d:02:fd:ca:ea:5c:08:25:ba:b0:5c:99:5a:3d:58:58:
         7e:38:38:4b:c6:b4:10:00:78:8c:98:73:16:3d:4f:4e:50:ff:
         88:57:5f:30:12:21:68:53:53:3f:7f:58:2b:65:74:e0:df:cc:
         1e:7d:4c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:26:29 2026 by rpki-client