Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/671d99fc-5058-3ab2-a306-fe9ab2994371.roa
File:                     671d99fc-5058-3ab2-a306-fe9ab2994371.roa (raw, json)
Hash identifier:          zp94DT5tbjJS1n1sMTB+qxLc41VLKpOEdlhabwsGlxU=
Subject key identifier:   45:AE:D3:A4:4C:0A:CC:7D:19:BA:14:87:60:C6:1E:69:FC:CE:12:C2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA90B738470CDC3AC639C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/671d99fc-5058-3ab2-a306-fe9ab2994371.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     196975
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:90:b7:38:47:0c:dc:3a:c6:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=98b1d0fd-20e7-40da-8260-25310f47c9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:41:32:00:dc:52:e1:ed:9c:f7:24:cd:ff:
                    23:2f:2c:f8:de:9e:cb:0d:a4:a0:d1:73:f5:d1:f9:
                    8d:fc:5b:43:75:91:11:76:f2:92:84:08:86:e1:a1:
                    32:ab:ba:3d:cf:36:bc:33:5f:ee:22:f8:a7:0b:e1:
                    b1:32:b2:27:b2:20:2c:76:d3:2d:f0:47:09:d0:8c:
                    43:e0:fd:1f:83:51:7d:7b:68:f2:18:39:c3:08:ba:
                    fd:23:6b:48:16:87:ea:b0:66:a0:77:78:6a:e2:e3:
                    64:74:27:00:d6:50:af:a5:2f:6f:e0:31:ff:72:53:
                    a5:83:28:17:05:1b:d7:d9:5a:5a:e8:ab:a5:59:14:
                    63:89:29:da:a5:eb:c1:50:ec:51:84:ed:5a:40:a9:
                    06:e8:68:0a:c7:0b:85:e7:6b:a5:fc:9c:d0:69:2f:
                    3b:3a:74:bc:b7:fe:0c:4e:da:51:ae:45:82:c1:ba:
                    13:5e:2d:84:b6:45:0d:fa:ad:43:d1:64:cc:2f:c4:
                    1f:ed:84:dc:4a:65:12:92:fb:8f:90:b1:6d:ac:2b:
                    5f:55:9c:72:97:2c:e5:67:25:28:ab:c9:19:ee:86:
                    bc:39:a3:28:cc:64:45:41:ca:33:c4:8d:1d:8a:16:
                    bc:bb:3e:1b:a9:45:e8:d5:9f:3b:c5:d7:62:48:0f:
                    bd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AE:D3:A4:4C:0A:CC:7D:19:BA:14:87:60:C6:1E:69:FC:CE:12:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/671d99fc-5058-3ab2-a306-fe9ab2994371.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:22:b0:87:6c:94:e6:14:f8:3c:8b:eb:69:4e:2e:c8:99:cc:
         91:fd:67:a0:3c:fd:3f:d7:e5:2c:f2:ec:75:ec:f1:c9:89:14:
         46:7d:5f:ed:9d:be:25:6c:1d:cd:a9:1c:31:fc:e3:d7:ba:10:
         68:3d:80:db:32:9a:2e:a3:72:92:ab:62:38:30:4d:cd:ee:9b:
         31:8e:c7:8b:08:e0:12:e8:97:e6:ff:0f:e3:79:3f:46:23:73:
         76:21:b3:4c:17:42:2c:4c:42:ce:7a:94:dc:80:f0:4d:b0:cf:
         c2:65:f1:a4:51:15:33:3d:b0:1e:c2:8e:4d:bb:b9:8f:bb:43:
         4f:05:39:65:6d:0e:60:14:af:d3:df:55:50:46:ef:f6:45:be:
         c3:43:3b:21:28:78:99:87:93:85:88:72:49:0b:49:3b:e7:18:
         3b:07:00:b7:ad:bf:59:fd:13:ac:57:aa:63:f0:8c:ac:6e:5b:
         32:d3:09:1c:3b:6c:c7:89:24:6a:c1:ae:0f:ab:db:4f:e1:6c:
         c6:d1:cf:b2:a6:e6:2a:a2:36:cc:ab:f3:eb:d2:f5:e3:9e:8b:
         84:1d:2f:44:13:03:ec:27:5f:90:08:15:be:52:ec:4d:c0:c8:
         79:a4:c3:14:c2:87:96:d9:49:93:31:96:cb:03:f6:bf:0b:9f:
         52:09:ae:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:14 2026 by rpki-client