Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e7fa28f-4c7c-3a79-8256-af53431d9e76.roa
File:                     4e7fa28f-4c7c-3a79-8256-af53431d9e76.roa (raw, json)
Hash identifier:          2GoiZLO+tfBS5KLcatz57QQrMd7Y3nGmjxCL/88blRQ=
Subject key identifier:   02:B2:2A:97:39:89:D3:B8:22:8A:72:A4:A3:17:58:AF:CB:D6:67:A8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D8100A94F1DC528FD0D28C9A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e7fa28f-4c7c-3a79-8256-af53431d9e76.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     210872
IP address blocks:        2001:470:c7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:a9:4f:1d:c5:28:fd:0d:28:c9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=cb4faced-dcdc-4443-bd03-ee3c39c5fc7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:92:c8:5f:74:e9:eb:ae:0b:38:a8:1e:e1:27:
                    88:7c:2a:cd:51:73:4e:cd:38:71:70:d3:7b:aa:ba:
                    6e:e0:1e:69:2c:dc:ba:48:a5:5f:7f:c9:2e:d7:19:
                    01:0f:31:68:31:60:80:74:e4:63:84:d9:c3:1c:9b:
                    a3:47:cf:2b:7a:c2:8b:a1:4b:cc:10:8c:19:ba:39:
                    ba:d2:40:66:70:c2:4f:ad:8e:24:0c:c6:89:4f:8a:
                    47:eb:c0:cf:2c:fa:47:e2:5d:62:9b:e4:e8:5e:0d:
                    e8:97:52:47:42:78:9e:61:59:62:4a:07:88:36:08:
                    ac:30:39:97:20:76:ea:d5:dc:85:ee:35:13:f3:7d:
                    31:7f:84:dd:b8:8f:75:cd:a9:86:da:ed:0e:9d:a4:
                    a3:46:0e:18:ef:d9:50:f3:ad:fe:30:c5:fb:fc:f9:
                    2d:1b:c8:d4:77:db:fe:8a:77:86:e9:1c:e2:20:98:
                    6f:47:92:f0:57:3d:d0:3a:4a:dd:cf:20:f2:4c:9a:
                    38:e9:bd:8c:75:1a:db:71:f3:26:7d:f0:9c:fe:aa:
                    2f:ed:cc:05:1a:26:23:44:12:31:8d:4c:8b:30:2b:
                    3e:b1:60:68:b7:21:8e:f2:c0:b6:34:30:d0:fd:8f:
                    b8:1c:cf:e4:6b:5d:5a:45:79:c6:20:4d:d1:8e:19:
                    9c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B2:2A:97:39:89:D3:B8:22:8A:72:A4:A3:17:58:AF:CB:D6:67:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e7fa28f-4c7c-3a79-8256-af53431d9e76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:c7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:50:6f:e8:09:9a:2b:07:ac:9e:2c:61:28:9e:b3:a6:b2:63:
         78:6d:35:1f:46:b4:94:b0:44:c8:50:71:3b:95:10:92:5d:cd:
         5a:89:94:5f:08:23:36:56:d6:9a:ee:c6:81:ad:bf:8f:fb:39:
         fc:88:ba:da:ba:a9:cb:59:d1:26:24:50:31:a9:48:6d:80:a4:
         10:d7:63:47:9e:b3:17:ed:fe:fb:fa:3f:46:99:cb:04:23:f3:
         19:38:5e:c9:cd:5d:6f:9e:da:05:61:80:b1:da:b9:a9:76:0f:
         bb:1f:32:c0:34:d8:a7:22:ee:cb:5e:62:36:49:4e:0a:9d:2b:
         28:c9:b5:3c:d0:f5:f1:76:29:df:5a:39:b3:43:a4:68:02:cd:
         08:8a:c9:21:03:2a:d2:42:80:d7:9a:6e:b4:43:5e:73:71:d4:
         c5:3b:fe:bd:67:6b:f0:5b:29:2a:48:0a:64:79:d5:24:53:28:
         64:e5:d0:99:b5:b2:c3:0d:1d:bf:0c:42:2d:d4:90:07:94:cf:
         1d:01:f4:b2:b6:a3:6f:62:75:f9:be:aa:a5:26:fb:6e:eb:18:
         e2:e6:07:a6:11:d8:bd:57:40:d1:6e:df:43:4a:bd:69:d8:f3:
         2f:15:fd:07:54:b4:6c:0d:7a:05:b3:72:49:85:0c:c8:f5:f9:
         36:47:b0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:44:27 2026 by rpki-client