Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/691ac06d-850d-3824-a1f1-48d9c55f8c97.roa
File:                     691ac06d-850d-3824-a1f1-48d9c55f8c97.roa (raw, json)
Hash identifier:          ljV9rJuODApBnHF+vRYM+cW5PPWMbzBDyPMZNntQqqs=
Subject key identifier:   7C:9B:CA:46:4B:47:8F:E0:C7:6F:BC:22:AD:28:04:FC:02:E0:76:54
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E1A1436D8FCCE0D6326489200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/691ac06d-850d-3824-a1f1-48d9c55f8c97.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     393844
IP address blocks:        2001:470:450::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:36:d8:fc:ce:0d:63:26:48:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=616108a7-8218-4c44-81da-fe56b444d7be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:43:81:c1:37:69:74:72:4c:94:53:eb:dd:c4:
                    c0:00:72:82:bf:11:96:3d:12:16:7b:11:1f:05:af:
                    a2:2f:65:6c:ba:ca:f7:f5:24:db:04:b3:05:cd:38:
                    be:3c:62:de:f0:66:48:e6:ec:05:68:f9:e3:85:e5:
                    3e:69:89:51:bc:87:8c:26:70:fd:41:94:60:6d:f5:
                    3d:80:0b:88:2d:df:60:3d:b8:64:f1:c0:c3:fd:a9:
                    52:70:dd:33:44:63:8c:99:80:71:98:5b:d1:a8:d4:
                    b3:3e:3d:04:eb:18:ba:e6:0b:7a:26:25:b0:f6:36:
                    93:34:a9:0d:c8:1f:6a:b6:20:eb:a8:a5:b4:77:16:
                    45:9a:79:3d:1c:f3:45:5b:8a:88:a5:c4:bc:0e:d3:
                    14:12:26:8d:5a:d3:c0:a5:c1:da:b8:08:24:11:59:
                    ef:ed:b7:e7:7f:dd:15:90:e2:76:fc:e4:08:9b:d0:
                    0a:a1:04:b3:e6:ae:54:07:59:06:57:f6:04:62:da:
                    c4:0d:5b:48:74:44:4d:e7:98:f6:64:99:b9:cf:e3:
                    cc:32:b6:b6:34:e6:53:c3:11:74:2d:02:d5:17:7d:
                    72:f7:72:e9:eb:26:d9:9f:ad:34:8c:1a:0a:0c:94:
                    ae:b0:99:18:c3:e8:04:08:f4:1f:0e:59:21:f6:76:
                    02:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9B:CA:46:4B:47:8F:E0:C7:6F:BC:22:AD:28:04:FC:02:E0:76:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/691ac06d-850d-3824-a1f1-48d9c55f8c97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:450::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:ee:43:dd:e5:7f:b8:a3:2f:1a:48:13:98:89:b9:eb:66:50:
         1a:18:ef:e5:1b:c5:d1:6c:ac:f5:2b:a9:f6:fc:77:d2:5f:1f:
         05:d6:f1:2c:c0:ca:cd:db:11:2a:4a:6c:b9:cb:aa:2d:93:e1:
         1d:6a:fa:49:cd:a1:fa:3d:1c:b8:37:fd:d5:81:04:37:84:ef:
         4a:37:35:f7:86:1c:66:bf:c9:49:62:4f:b9:e0:cc:30:cf:91:
         9e:1c:df:08:34:63:05:21:38:55:b7:8a:22:4b:62:db:4b:a1:
         e8:3f:e8:1f:17:ee:ea:2e:ae:9c:64:88:6b:7d:a8:f9:7a:d2:
         82:05:ba:eb:1b:56:69:60:cd:e5:77:05:14:3c:48:2a:7d:3e:
         50:62:af:20:cc:dc:aa:44:e9:77:5a:58:c9:40:c8:08:0e:b6:
         75:df:53:b0:e3:5d:20:72:cd:6d:32:63:ac:f4:05:32:c5:b1:
         6f:32:9c:da:6a:fd:06:e6:4b:00:2a:3d:f3:82:e4:71:6c:e3:
         60:79:bd:ef:a2:95:a2:13:2c:3b:89:34:09:93:c4:6b:1e:60:
         da:6e:f6:d9:75:e2:bd:d2:ef:52:c1:82:8b:36:45:0e:fb:3a:
         19:40:51:f8:23:28:76:ab:7b:fa:30:42:00:54:7c:01:ad:59:
         f8:a1:66:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:37:08 2026 by rpki-client