Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/63c57d4b-6cd4-3882-98db-b07fa9793cf3.roa
File:                     63c57d4b-6cd4-3882-98db-b07fa9793cf3.roa (raw, json)
Hash identifier:          AdtmjpGaEto8nd6h/EJNdOR1s8jPbhuPaWurVkR+Lh0=
Subject key identifier:   D6:0F:8D:A0:31:30:DF:01:9E:7E:93:AA:B4:A0:56:35:00:96:E9:19
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA9E5EB2ABD41F5B92A880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/63c57d4b-6cd4-3882-98db-b07fa9793cf3.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     29844
IP address blocks:        2001:470:c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:9e:5e:b2:ab:d4:1f:5b:92:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=0c9828a5-45b2-4770-85b3-1e2fa5c1927c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c3:e8:6f:53:50:d9:8d:13:a1:40:35:ea:68:
                    49:53:61:4b:28:08:55:59:10:e6:c9:9a:0f:0a:11:
                    60:9e:3f:26:c1:81:5f:89:5c:e6:d3:58:97:93:06:
                    59:b1:72:9c:70:34:98:c4:9e:a3:b5:10:23:a7:80:
                    df:83:db:1f:5c:03:50:29:1a:b5:ad:df:56:51:d5:
                    9f:01:c2:fa:f6:eb:07:f1:15:e4:aa:d6:d9:d3:06:
                    45:15:b2:5f:89:d1:97:2e:6a:b2:8d:11:63:4c:9f:
                    21:7a:d6:48:29:74:1e:0b:cc:79:91:cb:d2:a6:47:
                    56:ed:ea:23:18:77:67:62:5d:71:76:ca:bd:ba:40:
                    1b:e7:96:3c:64:96:c9:4b:71:36:57:db:76:93:78:
                    cc:b5:9e:16:8d:e4:69:d9:86:05:bb:e9:13:0e:39:
                    7d:31:38:5a:24:02:e8:29:c8:89:a9:e7:74:9a:fe:
                    7b:e5:36:24:01:a3:44:45:22:21:a0:86:5b:32:54:
                    06:51:58:77:c0:6d:31:9f:02:46:6e:93:8d:2e:7b:
                    a1:bf:c3:6f:3d:17:7d:46:80:e4:5d:b1:16:ac:06:
                    ce:9d:4d:5e:3c:ef:a1:8d:0f:c4:79:16:8f:1f:8e:
                    bb:9d:1b:ad:1e:90:c8:b7:30:92:c6:1a:17:42:fd:
                    d8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0F:8D:A0:31:30:DF:01:9E:7E:93:AA:B4:A0:56:35:00:96:E9:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/63c57d4b-6cd4-3882-98db-b07fa9793cf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:85:cb:f0:a1:59:67:53:2f:66:77:7d:1b:f5:d5:3f:2d:7b:
         da:9b:b4:02:9e:28:08:85:71:bd:ec:03:25:e7:22:e4:bb:47:
         01:57:68:96:01:37:0f:bf:49:97:a2:d7:ee:1b:22:0d:bc:b0:
         39:02:42:c4:f4:ac:81:2e:e4:52:aa:d6:7a:62:21:89:33:3a:
         3d:ee:77:5a:4b:82:41:a8:45:00:2b:ce:3b:e3:64:6c:0f:37:
         dc:97:d9:0c:f5:a6:f0:15:ba:17:c0:b9:18:be:0c:95:28:f8:
         54:9c:ea:24:f3:00:b4:74:88:10:10:1c:b7:93:c1:23:1e:73:
         3b:05:c6:c6:14:70:2a:9a:02:35:a2:39:a3:ec:56:2d:73:3b:
         5d:f5:cb:f9:89:a9:21:2c:57:c5:b1:0a:71:0f:ad:2b:8b:22:
         df:47:18:98:9e:73:d5:c3:4c:f8:75:aa:aa:6a:a1:cd:b1:09:
         11:46:b0:c7:67:a4:a8:57:19:4e:22:31:c2:36:c4:1b:d3:92:
         f0:a2:78:22:c8:2e:d4:76:eb:27:27:89:8f:fc:e0:39:ff:27:
         10:04:2d:a4:ef:41:15:ed:41:35:72:05:26:0a:10:76:69:e5:
         aa:95:f9:63:34:46:51:a0:a3:1d:06:bd:91:c1:92:cd:23:cf:
         dc:fa:c5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:15:12 2026 by rpki-client