Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2fb1291c-da46-357c-bf54-a29a186c6fe0.roa
File:                     2fb1291c-da46-357c-bf54-a29a186c6fe0.roa (raw, json)
Hash identifier:          nSRnGKSAON49qq1xkxg+txpwe5mS7D4t2fQmv07hYXM=
Subject key identifier:   BB:1F:54:AC:32:3C:85:5C:60:4A:07:2B:05:AE:31:16:43:39:16:7A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584CF2BD0DF7F54DF16A1F5C6F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2fb1291c-da46-357c-bf54-a29a186c6fe0.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     22961
IP address blocks:        2001:470:47b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bd:0d:f7:f5:4d:f1:6a:1f:5c:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=fd1fa6c0-3978-4dfd-aba9-61d3795d1d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ea:12:0c:c2:f8:93:98:69:26:97:3e:f9:54:
                    96:e8:e0:8b:98:d5:45:8f:b9:61:f8:99:e7:32:e7:
                    9d:e8:62:8e:f1:1a:bc:be:82:c9:76:ff:bb:05:f6:
                    18:11:db:ef:6a:1a:cc:01:2e:67:12:90:73:81:b3:
                    d6:cf:34:e4:5a:62:7f:d9:26:60:ed:7b:d1:57:f9:
                    59:ed:08:74:e8:98:2c:b8:8a:e4:19:2d:4a:f8:c6:
                    ae:3f:8c:06:a3:03:87:27:4f:ad:07:83:4f:bb:35:
                    89:1f:59:a0:17:8f:1e:ff:9a:37:08:d5:af:08:a7:
                    cc:a5:62:bc:13:51:6c:ca:52:f5:55:0c:75:0c:02:
                    8b:cd:49:87:d4:41:21:a4:5f:22:10:1a:73:dc:59:
                    67:33:b6:19:e9:18:d1:57:b1:e8:50:c6:e3:de:74:
                    fb:4f:cf:b8:fb:ee:30:5f:48:a3:8a:3e:44:7b:5d:
                    ba:14:a9:9a:18:ea:d0:e0:a9:f9:15:9e:73:68:a9:
                    89:b4:18:31:fa:92:df:62:28:25:dd:0a:85:e1:67:
                    55:71:49:6f:90:fc:3b:1d:00:d6:67:32:60:04:77:
                    0e:2a:f4:e0:b4:2a:eb:ef:c5:60:b0:ae:d5:9c:3f:
                    b7:ee:dd:f0:16:3b:21:10:ec:3e:f9:f5:e2:a5:13:
                    0b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1F:54:AC:32:3C:85:5C:60:4A:07:2B:05:AE:31:16:43:39:16:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2fb1291c-da46-357c-bf54-a29a186c6fe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:47b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:45:73:5c:69:99:9a:f4:5a:16:94:38:07:e6:b4:27:fe:c7:
         fd:41:3a:a1:2b:97:7f:3a:be:65:88:92:de:18:70:64:6d:77:
         3f:3c:49:08:86:e7:d5:51:2e:fb:b0:42:a2:bb:e0:3a:b4:8c:
         06:5a:32:66:e6:fe:df:8f:ad:20:d9:c1:db:a0:82:98:5a:5a:
         a3:90:31:57:fe:0f:02:5f:e0:bc:e0:84:3a:96:f9:08:03:65:
         85:03:77:c7:c6:89:d0:8b:44:8f:c9:28:3d:7a:4d:52:4b:7c:
         b2:58:60:62:1c:f5:c6:8b:33:cc:60:3c:7a:41:9d:42:6f:48:
         4b:98:0b:55:98:f6:09:88:83:13:28:ad:59:81:43:b4:d1:11:
         93:63:2c:2f:1a:42:0a:31:5d:ee:31:a5:dc:3f:51:67:bc:df:
         74:39:98:a8:97:1f:ae:16:b6:45:2e:96:11:af:b9:cf:6a:8a:
         a9:07:0e:16:05:5e:c2:99:98:15:9b:da:fa:e5:06:bd:05:99:
         7a:9a:41:be:a3:2d:c0:f4:b8:a6:e3:a4:28:0a:b9:dd:7b:78:
         d7:d0:1f:85:14:08:c1:d5:5c:ea:c0:ec:81:42:31:76:50:a7:
         16:68:49:68:53:b0:ef:9c:ab:89:ed:a4:9e:24:4c:ae:92:27:
         d6:1f:de:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:43:37 2026 by rpki-client