Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/37c9addf-7b8f-33a5-96eb-afba41e723d5.roa
File:                     37c9addf-7b8f-33a5-96eb-afba41e723d5.roa (raw, json)
Hash identifier:          MbS42+kltIXSdAQehIdCs9omagcbC3jWO/xP5B+FodU=
Subject key identifier:   85:3C:EB:18:69:DC:93:65:F0:42:49:D6:3D:47:90:23:06:F0:14:E7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA94B14A32759FFFA9BD00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/37c9addf-7b8f-33a5-96eb-afba41e723d5.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     23047
IP address blocks:        2001:470:313::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:94:b1:4a:32:75:9f:ff:a9:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=cbf2e722-6b3a-4d2c-9913-1289080e29a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e0:9e:05:2c:cc:ee:99:66:9f:97:4f:78:10:
                    62:48:b4:ee:e6:b9:7f:1e:9e:46:13:d3:ab:86:80:
                    87:47:dd:81:96:2a:4d:59:ea:3b:74:49:8b:cc:63:
                    88:9b:fd:52:0f:ff:39:c8:8d:5e:48:c5:bd:b4:21:
                    88:3a:a2:de:dd:38:a5:bc:1b:98:4d:8f:c0:cc:b7:
                    03:8f:d3:09:81:31:83:ca:f8:3c:6a:bd:5d:64:98:
                    db:da:78:27:0f:05:b7:d2:ec:05:00:77:2b:76:13:
                    82:11:d8:a7:c7:18:bf:de:2e:9c:05:af:79:b4:4c:
                    a9:bc:20:2d:0a:40:01:89:fd:b1:7c:27:36:0c:62:
                    f6:38:e5:98:1c:b8:94:66:6f:7a:4b:b8:a0:bd:33:
                    58:1c:a8:1b:96:2a:4b:2b:19:fd:77:5d:5e:21:26:
                    bd:62:53:57:9a:ae:af:6d:25:4e:69:1a:6f:aa:7c:
                    7d:01:69:e7:af:b1:8b:36:fb:72:e5:34:90:99:77:
                    4a:4a:2c:0d:0c:9b:9a:08:f3:ec:e4:2f:5a:d9:2d:
                    e8:4e:26:3d:76:c1:b8:6f:52:d9:e6:1c:3b:d4:28:
                    69:60:ef:99:d9:c8:0b:2c:25:3a:23:48:b0:2b:df:
                    00:b3:d3:56:b0:e6:fa:a1:e2:0d:88:d4:f4:9b:53:
                    a1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3C:EB:18:69:DC:93:65:F0:42:49:D6:3D:47:90:23:06:F0:14:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/37c9addf-7b8f-33a5-96eb-afba41e723d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:313::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:51:50:3a:ca:bd:23:a6:a1:0e:fa:9b:8e:e2:02:3b:00:03:
         03:fa:30:c4:9f:46:9e:26:2a:a1:18:68:b1:c9:0f:92:68:e1:
         29:95:b8:4c:08:29:ef:58:54:87:37:c9:cc:99:da:6d:6e:b0:
         b5:2c:37:7a:59:bc:85:0d:23:79:38:6a:5b:53:06:12:83:5d:
         29:bf:7b:22:b8:1e:81:a0:19:a6:eb:ba:ca:c1:60:23:e6:86:
         9b:86:18:71:3b:88:34:3c:f4:1b:97:af:3f:15:9b:3f:6f:f8:
         73:fa:c1:ac:cb:9a:c5:60:23:be:17:1f:7e:63:f6:9d:d5:da:
         66:10:b3:86:9c:fa:0d:97:b9:dc:1e:ca:f0:25:1a:ac:1f:f7:
         0a:3b:c7:78:52:0c:ba:0f:52:b5:db:a1:8b:64:89:c2:52:23:
         7b:bf:25:0d:72:fb:1c:27:7d:07:54:8c:b1:f9:31:c2:9d:6d:
         79:d9:f5:fb:d6:d6:3e:24:42:10:0f:e2:ba:7b:b7:1c:8c:b5:
         fb:c4:24:10:2b:61:54:1b:f3:43:5d:6f:18:8d:00:2b:ee:d0:
         4e:40:2e:51:5c:f7:c7:00:aa:06:53:9a:92:5e:2f:a5:46:56:
         08:11:07:be:c6:8e:ff:0c:82:2b:90:09:62:ee:5b:8e:48:1c:
         32:85:be:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:35:58 2026 by rpki-client