Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/68795db9-f1de-3c57-bc6b-ecaac7fed370.roa
File:                     68795db9-f1de-3c57-bc6b-ecaac7fed370.roa (raw, json)
Hash identifier:          gAXWxP9SjTiLkcuJ/1pDE1fC9tpl4D3AE6JxD5jPRQ8=
Subject key identifier:   C7:E4:FF:6E:DE:0D:3A:7D:02:1B:EF:B3:5F:07:19:3B:4B:63:44:29
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA8AD201922342D36BE130
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/68795db9-f1de-3c57-bc6b-ecaac7fed370.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     44431
IP address blocks:        2001:470:1a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:8a:d2:01:92:23:42:d3:6b:e1:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=24a8c12c-7a58-4459-ae09-34af99b5eae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d0:df:8f:e9:8d:12:ca:a3:28:f2:9d:78:0b:
                    b3:a8:b9:98:cb:05:04:85:5e:1b:f1:4a:05:80:46:
                    80:f8:44:9d:57:42:19:41:ff:55:f0:87:c1:8c:01:
                    8e:9e:37:de:27:e5:16:63:60:23:9d:b6:63:37:a6:
                    35:a3:18:26:ad:e1:3a:ed:1b:90:26:8e:23:de:46:
                    1c:90:2a:be:79:f2:8f:fa:d4:f2:b3:dd:6c:2f:b8:
                    49:47:d1:09:35:fa:aa:6f:24:48:65:51:bb:ff:a8:
                    8c:07:07:81:fa:9e:65:d1:f6:0a:f8:28:b5:42:1c:
                    e3:d0:ba:d4:ec:5b:d0:91:04:14:cc:4e:04:5a:0c:
                    41:a7:4d:a6:36:65:65:96:02:41:d9:93:91:91:52:
                    a9:ec:c5:b3:62:a8:75:f4:a6:48:75:f5:4e:d9:82:
                    11:0a:80:be:20:20:d0:76:9c:07:56:3f:47:91:8a:
                    6f:0d:f4:12:d2:85:df:6b:2e:0e:c5:75:09:d0:6f:
                    0a:33:67:2f:97:0f:00:4f:7e:f6:a2:32:7f:51:e5:
                    16:53:8a:c3:0e:ad:ab:c5:83:b2:77:ea:f6:07:5b:
                    9d:ef:85:33:6a:aa:77:f1:72:ac:72:17:83:e7:4c:
                    6b:11:42:fe:e3:dc:e6:5b:e9:9b:74:53:ef:6a:cd:
                    17:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E4:FF:6E:DE:0D:3A:7D:02:1B:EF:B3:5F:07:19:3B:4B:63:44:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/68795db9-f1de-3c57-bc6b-ecaac7fed370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1a0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:28:32:cc:59:b3:2e:49:2b:ce:6b:89:3f:13:9e:82:3d:eb:
         cf:06:df:bd:0f:1b:e7:9c:9c:83:ff:1d:f0:1c:16:ca:62:19:
         c2:c6:43:ef:8a:84:6f:e9:56:d0:f6:f3:26:06:c0:ca:e1:b8:
         e8:bc:61:be:36:f2:a3:19:3a:39:15:6f:24:21:a5:04:1d:ab:
         ef:31:17:a4:2f:6b:3d:f0:b2:3e:b7:8c:a8:12:21:75:5d:1b:
         f0:c8:c6:10:57:3a:62:07:8d:e8:b5:fc:ff:90:c8:2a:50:69:
         a6:ad:90:2a:50:22:ed:48:5c:44:7e:aa:ae:2e:d1:4c:4f:7f:
         9c:12:f3:ed:8e:84:93:a7:12:2e:52:4b:c9:b5:fc:fc:42:df:
         b0:f0:17:a2:57:3d:37:d4:d0:a3:4d:a8:a8:a1:d3:27:34:ac:
         11:3d:df:bc:ad:1e:22:97:d1:74:14:98:a2:66:48:a1:a3:23:
         eb:ca:55:cc:b5:84:6d:3c:d0:7e:31:66:42:93:96:d6:c9:a7:
         09:a6:97:d9:d6:da:bb:34:10:ca:53:2d:cb:40:74:c7:04:33:
         f5:8c:7c:1e:76:55:76:75:69:d5:80:7b:26:ba:94:42:af:63:
         a4:2d:bb:ac:46:28:54:06:54:34:59:5c:62:4d:56:d5:b5:e3:
         24:d8:4e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:58:07 2026 by rpki-client