Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5eb17499-54d1-3ab3-b109-f2c4846c9490.roa
File:                     5eb17499-54d1-3ab3-b109-f2c4846c9490.roa (raw, json)
Hash identifier:          qtHMOPz+9x4fu8wPRarhcL7sjAfiJY0MO29P2TI8SYM=
Subject key identifier:   60:BB:8C:33:01:95:96:D6:80:5E:61:04:14:E3:86:59:2D:F8:9E:43
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA9249783FD001A6681600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5eb17499-54d1-3ab3-b109-f2c4846c9490.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     18526
IP address blocks:        2001:470:2b3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:92:49:78:3f:d0:01:a6:68:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=4b7588a1-f2c1-4077-85b3-c12bc53f6bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3b:8a:8f:9a:79:17:a9:07:20:ae:f1:ce:2e:
                    7b:03:64:a4:43:27:eb:fe:93:86:1f:0a:b1:b9:50:
                    78:76:77:0e:96:aa:6a:72:a7:f6:72:ba:83:3a:01:
                    c3:30:17:87:cd:86:a5:34:fc:a8:06:4f:39:0a:20:
                    ef:3d:c0:d0:c8:c7:2f:3f:1e:cd:84:9f:a4:fe:04:
                    d5:69:e1:6f:b0:ef:fa:38:08:55:26:a8:f2:eb:87:
                    3f:18:c6:9c:5e:40:47:84:19:4e:b5:12:d0:fa:73:
                    05:11:38:af:27:da:9d:97:9c:b0:fc:69:ce:ed:dd:
                    3b:53:18:6b:0b:9a:74:67:38:b6:2b:15:91:96:ad:
                    5e:fc:45:1e:40:84:de:df:64:f7:bc:e3:79:44:73:
                    6b:90:37:38:7f:d6:75:95:3e:52:fb:37:99:e0:df:
                    b4:39:7f:6e:1b:4c:49:66:d2:5d:d4:c2:7d:a1:1f:
                    c6:c4:f2:5d:f9:4f:ab:a0:e3:e1:94:68:ab:21:7d:
                    19:81:53:1d:27:7c:5d:99:32:5e:fb:30:b0:4c:d8:
                    59:49:08:3a:dd:4d:60:d2:d6:15:b0:62:03:b0:82:
                    eb:df:33:50:91:73:88:cb:49:a8:1d:88:ef:12:a3:
                    95:a8:d2:c1:d0:21:85:7e:19:ec:3f:09:e1:e5:ab:
                    eb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BB:8C:33:01:95:96:D6:80:5E:61:04:14:E3:86:59:2D:F8:9E:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5eb17499-54d1-3ab3-b109-f2c4846c9490.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2b3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:db:46:c1:01:5a:dd:0a:6e:4f:cc:b4:f5:ef:41:fe:d6:cc:
         e9:9c:86:d4:68:f1:9a:9e:34:a5:30:21:89:f1:40:1d:32:1c:
         bd:c3:15:f2:13:91:41:cb:18:2b:03:5f:1c:1a:2e:ed:32:a3:
         0f:06:aa:3b:ea:04:16:96:52:5a:35:bb:2d:fe:ac:27:b0:95:
         83:3e:7a:23:89:0d:67:c2:25:49:1f:46:19:a2:71:b1:de:bb:
         39:11:d8:f2:2e:6d:ea:bc:d8:2b:62:06:ee:39:68:30:4b:a6:
         dd:01:dd:28:71:d2:4e:df:13:0e:5b:0e:60:a6:7d:1e:f0:dd:
         a7:90:ba:b6:af:eb:e3:be:f9:44:09:d1:45:c9:e7:d4:e2:12:
         5b:3e:54:69:99:a3:76:03:54:ae:6b:28:f0:f6:60:0b:1e:b7:
         93:96:47:36:da:9a:87:db:4d:d3:6c:e9:4f:9f:91:01:9f:4a:
         9f:df:69:f6:57:cd:37:4d:47:1b:07:17:7a:8d:c4:56:34:01:
         66:96:6b:b4:a6:ea:ad:69:7a:2d:be:ae:3e:cf:90:fe:f9:55:
         7e:93:1f:37:4c:c3:f7:f1:d4:9e:cb:76:e6:4c:60:40:23:03:
         de:0d:6e:1d:b8:4e:cf:a6:cc:8c:a7:eb:38:ce:36:7f:e1:da:
         dd:43:68:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:45:53 2026 by rpki-client