Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/403fefd1-873d-3617-a8f7-ea3c6f6da7f1.roa
File:                     403fefd1-873d-3617-a8f7-ea3c6f6da7f1.roa (raw, json)
Hash identifier:          oPaU8kmp0B6LxeQL87QA2GveZS6V8Lswu7b4HTgIuZg=
Subject key identifier:   3A:F7:B7:0B:96:ED:D1:AB:7D:14:DA:E5:E5:8E:1B:D3:83:FF:CD:8F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA8FE1216055D0B93FBA00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/403fefd1-873d-3617-a8f7-ea3c6f6da7f1.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     133398
IP address blocks:        2001:470:288::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:8f:e1:21:60:55:d0:b9:3f:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=df4f7d68-a081-4108-91c5-9f76871ec8be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:51:49:37:2d:ec:80:51:09:17:aa:fc:6e:71:
                    23:50:f0:51:c5:c3:17:4d:ad:e9:c1:6d:bc:f0:22:
                    b4:3c:a7:24:d4:3c:2b:09:c9:52:54:fa:48:90:df:
                    37:ab:f9:12:e7:b7:a5:6f:73:7e:98:62:2d:63:79:
                    c5:c6:bf:e0:ca:15:a9:8f:39:30:29:4a:b3:75:dd:
                    07:1d:6b:08:b2:b4:6c:96:11:4c:a4:e3:71:a9:87:
                    87:a3:7b:68:87:01:ab:67:1c:4d:aa:2a:8d:c8:b5:
                    4c:f6:43:b8:cb:e7:e0:a2:7e:79:6a:7c:5d:3f:70:
                    cf:4a:c1:b4:26:d7:59:b2:6c:d0:58:d9:5e:e5:13:
                    09:76:bd:fa:66:ee:a8:13:8c:f9:4b:13:72:3f:4e:
                    0b:d1:1a:8b:14:71:59:10:67:f9:76:fc:79:9f:94:
                    09:57:85:cb:c0:68:77:d8:dc:8e:56:04:39:22:83:
                    ab:9f:71:44:31:64:7a:7d:9f:a0:e8:f4:85:56:60:
                    6a:0d:f9:1b:e4:18:00:29:c6:9c:ad:7f:23:03:a8:
                    a5:39:12:bf:bf:cb:a1:07:8b:15:f3:c7:68:97:b7:
                    ca:be:50:d7:e9:c7:e8:89:a5:62:04:28:23:a0:07:
                    93:4c:f3:6e:d5:96:e8:58:4b:d2:a2:09:f1:97:cf:
                    90:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F7:B7:0B:96:ED:D1:AB:7D:14:DA:E5:E5:8E:1B:D3:83:FF:CD:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/403fefd1-873d-3617-a8f7-ea3c6f6da7f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:288::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:c9:b2:12:77:82:f3:25:a6:25:5d:af:e3:38:5c:c3:ad:27:
         64:a0:2f:0c:58:99:fa:78:da:23:ef:43:55:8b:63:77:e5:c2:
         ab:c3:46:0e:a1:b0:0a:9b:b2:31:d1:00:b5:92:cd:b2:ac:ac:
         4a:57:8c:71:88:6a:71:3d:d4:d7:35:f8:1e:95:5d:70:e0:ec:
         c0:59:24:12:76:f4:04:52:ad:eb:d8:c6:be:9c:f4:c6:ff:ac:
         af:68:b9:4c:c7:4e:35:96:63:d0:d2:8a:aa:78:d5:7f:a9:15:
         1a:f6:d3:30:07:a6:83:3f:2f:5e:2b:cb:03:f4:69:0d:ad:06:
         a2:bb:9a:0c:fd:28:9f:f0:64:e0:2d:df:2c:89:48:27:92:41:
         3b:fa:2e:68:10:7d:02:65:bc:c1:b3:1c:5b:18:db:de:d0:49:
         b8:97:04:81:f3:5f:6d:a1:5c:a3:b1:e0:20:37:33:ce:3f:0b:
         7f:4b:b3:f5:16:68:30:3d:5f:e4:34:d4:54:7a:6e:c2:9c:66:
         c3:30:17:19:6e:be:32:67:99:04:b6:5b:e0:cc:4a:4b:d5:3e:
         8b:22:22:0b:40:f0:24:b2:1a:89:1c:3a:52:0c:33:08:67:d4:
         87:56:88:4e:da:73:1d:e0:6f:6b:68:a7:f0:af:96:58:c1:6a:
         d5:61:ad:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:44:05 2026 by rpki-client