Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/50923e3f-f020-39d3-9f32-2eebd72fdaad.roa
File:                     50923e3f-f020-39d3-9f32-2eebd72fdaad.roa (raw, json)
Hash identifier:          N51qRob4P6bXAz4tISlznm2zoYr1Cn42P0rZuz9cRHw=
Subject key identifier:   7B:53:EC:B2:6A:E1:D0:B9:D5:30:D4:44:15:94:31:63:7F:45:1C:23
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584CAFBC75C10AA5A9CA3C0EBCA0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/50923e3f-f020-39d3-9f32-2eebd72fdaad.roa
Signing time:             Thu 29 Jan 2026 14:00:40 +0000
ROA not before:           Thu 29 Jan 2026 14:00:40 +0000
ROA not after:            Wed 29 Apr 2026 13:00:40 +0000
asID:                     198408
IP address blocks:        2001:470:4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:af:bc:75:c1:0a:a5:a9:ca:3c:0e:bc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan 29 14:00:40 2026 GMT
            Not After : Apr 29 13:00:40 2026 GMT
        Subject: CN=ce317f06-c5d4-451d-ac67-36916bd2db6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5e:db:6b:59:97:b7:50:0d:5a:e0:39:35:66:
                    d1:ad:a8:61:80:6a:e6:ad:f0:33:16:a3:9e:e3:ce:
                    90:23:1a:5f:ad:14:f4:eb:86:d7:18:0e:e7:4a:74:
                    ef:06:6d:52:47:df:91:34:5d:59:e9:99:6a:5f:84:
                    e7:28:e0:b6:88:26:bb:ec:de:aa:f9:02:b2:08:45:
                    00:8e:36:23:bd:aa:b5:3f:da:df:f4:13:16:e7:42:
                    50:b6:d8:86:32:cb:e2:a1:cf:90:d1:5a:58:49:1f:
                    d3:01:11:89:03:22:39:2a:49:60:e6:57:df:61:b2:
                    bd:eb:be:b6:f2:a3:c1:ca:c7:31:99:b2:54:22:80:
                    b9:61:a4:9b:a8:64:be:c0:a8:38:c9:f4:09:b4:1d:
                    bc:e6:24:5a:8c:93:d3:28:73:a5:9f:58:1d:b3:a7:
                    a6:01:f2:0e:9d:da:41:1a:a4:9c:ef:3b:e8:db:08:
                    48:0c:26:29:d1:95:c4:44:d2:a3:94:30:4e:5c:f4:
                    c1:ef:18:b5:70:d8:28:32:d1:c6:42:e4:10:44:40:
                    af:2a:f6:0a:56:a1:cb:08:69:2f:b2:e2:60:82:dc:
                    b0:58:57:8f:ad:fb:28:c4:93:64:51:86:5b:67:88:
                    0a:ec:98:32:e6:e1:48:5e:c2:25:00:3f:4f:bd:cd:
                    bd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:53:EC:B2:6A:E1:D0:B9:D5:30:D4:44:15:94:31:63:7F:45:1C:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/50923e3f-f020-39d3-9f32-2eebd72fdaad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:8c:0c:cb:bb:0d:99:f0:19:82:8a:90:0e:f8:05:b6:92:c1:
         33:da:96:9e:f4:59:33:cd:b6:8e:3b:b3:0a:2b:5e:58:6e:cf:
         5a:98:2c:5e:42:88:1a:56:5a:fc:2d:7c:d1:64:8c:ba:48:ae:
         90:ad:75:28:f9:82:51:70:c1:da:21:2a:e1:26:b1:4d:b1:f7:
         b0:dd:4f:81:e4:46:98:1e:67:f2:5d:25:fb:4d:fe:42:ad:dc:
         07:62:23:96:f1:1a:ef:fa:fa:ae:2f:cb:a9:ac:d2:91:38:cc:
         e1:ec:76:ec:77:2f:db:fb:41:bf:05:1b:1b:16:8b:fe:83:4d:
         ba:a1:8a:14:da:5d:99:5f:b9:09:3d:05:d3:b9:cd:76:6c:9c:
         b2:4a:dd:3e:04:65:d8:da:fa:ba:d4:4c:00:a6:6d:6e:f1:32:
         7b:d1:4e:a1:26:ab:03:95:2f:ce:20:fa:e4:3d:8a:0b:2b:b3:
         ac:22:91:0f:95:38:55:60:9f:c7:bc:99:54:a3:f7:4d:7c:d2:
         fd:18:41:b6:33:ad:60:11:e0:d9:7a:eb:5e:ec:02:8d:21:2e:
         18:c4:e6:cb:52:8d:e1:c4:11:84:b3:9a:58:e3:ab:e8:f6:fc:
         e4:8e:d0:5a:02:6b:9c:16:6d:e3:7c:13:fa:e9:10:54:72:10:
         ed:91:f7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:47:44 2026 by rpki-client