Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5139b17c-60f3-30dc-b04e-9e056ee507d1.roa
File:                     5139b17c-60f3-30dc-b04e-9e056ee507d1.roa (raw, json)
Hash identifier:          V0faWLFcA3a0G6jikmOIkEUH5aGVlxuS+xxMlhe4KpA=
Subject key identifier:   67:6F:8E:B1:59:4E:A7:B9:9D:B7:30:69:15:E7:21:35:D9:08:7F:C2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA8A262BB83075A346B7C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5139b17c-60f3-30dc-b04e-9e056ee507d1.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     395517
IP address blocks:        2001:470:164::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:8a:26:2b:b8:30:75:a3:46:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=04c7dbf1-720c-496e-842b-2ab34d9f644e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:07:bf:d3:62:6b:1b:4a:ae:6e:32:06:6d:9c:
                    ed:43:25:b3:83:99:41:8f:eb:f0:36:71:42:56:71:
                    11:53:67:18:11:29:7d:bf:12:8b:72:b0:b8:6b:db:
                    1a:d0:43:a7:c6:65:30:e7:e6:a6:f0:f9:e0:70:da:
                    a6:1b:d1:f3:a4:82:ea:27:5e:1b:d8:25:fd:b7:36:
                    b8:83:15:ed:00:71:2d:b8:e1:97:32:af:9d:f1:45:
                    66:29:01:49:ca:0d:f6:6d:27:09:dd:e3:00:81:94:
                    27:0b:31:e8:a8:1d:a6:af:79:62:40:58:f7:1c:ff:
                    cc:d3:37:64:b1:34:7c:ac:c1:65:e2:45:e0:a2:97:
                    14:68:79:0d:cb:90:5d:c1:87:52:47:66:3c:c1:ee:
                    3e:86:07:26:90:1a:90:dc:e7:c5:c9:d4:74:89:b5:
                    19:12:b2:c1:6d:1c:1b:f8:ed:99:d4:00:67:ac:8b:
                    88:41:4b:a1:ff:2e:2c:f7:f4:2e:fe:cb:68:69:de:
                    b3:27:40:97:16:f3:60:3f:d3:b7:6b:ce:20:df:98:
                    6b:32:1f:cd:e5:15:ff:0d:eb:94:4a:3f:9c:55:c6:
                    f5:d4:f8:2e:89:14:2e:2f:c5:02:a0:2e:9b:6d:9d:
                    16:74:3c:8a:e7:37:9b:d6:90:22:17:dc:b5:2f:d9:
                    7f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6F:8E:B1:59:4E:A7:B9:9D:B7:30:69:15:E7:21:35:D9:08:7F:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5139b17c-60f3-30dc-b04e-9e056ee507d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:164::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:92:c5:6e:00:6e:e1:e6:d5:f3:37:e7:8a:79:39:5c:c5:65:
         83:b8:b1:48:17:50:34:83:5a:27:d0:e2:2f:91:81:60:e5:11:
         78:7a:2c:03:0f:95:da:f3:f8:2c:80:ea:c6:9d:5d:04:ee:ea:
         53:f3:f3:b5:a1:2a:a2:8d:50:bb:cf:3f:ff:5c:ca:3c:20:61:
         4d:fb:da:01:4a:70:83:d4:33:8a:4e:24:55:c0:24:8c:f9:33:
         e8:30:47:4f:b1:f6:35:a9:c7:99:96:67:ef:af:cc:ff:1e:e6:
         b8:05:56:ad:d0:58:86:e3:e8:2a:0e:6d:2e:ab:9f:33:89:9b:
         45:22:0f:6d:24:73:f3:7a:02:5c:65:76:a5:68:3b:e9:34:9e:
         ee:f3:a7:1c:ad:34:81:88:3f:ba:94:fa:89:8d:f2:85:6b:88:
         ac:61:20:44:16:ac:ae:d8:3f:9b:e7:ac:44:25:2c:c9:ac:af:
         c8:ba:94:14:5a:21:49:9f:9f:df:db:c4:0a:0f:47:45:fa:5b:
         9a:0f:f5:e4:04:2e:67:33:09:cb:fb:c4:05:3b:c4:c5:6a:28:
         9f:4a:65:bc:10:bd:9f:34:f9:d6:cb:7c:f7:bd:6d:66:b0:8d:
         84:bc:85:fc:4b:77:23:70:8f:a0:81:c8:89:85:e1:09:ac:b1:
         ef:c0:e0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:00:52 2026 by rpki-client