Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6aa02105-780d-32a3-90d6-5b3599928828.roa
File:                     6aa02105-780d-32a3-90d6-5b3599928828.roa (raw, json)
Hash identifier:          +6a40DFPggUKTDd2dHPvKmPQ6gB/mjQkxTNJQQo0vqU=
Subject key identifier:   7A:CE:0F:3E:44:EB:C9:96:F0:62:FE:E2:C6:D3:41:29:A1:69:DD:50
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E0D84320A3A0D1A78A08D6780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6aa02105-780d-32a3-90d6-5b3599928828.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     153183
IP address blocks:        2001:470:3c3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:32:0a:3a:0d:1a:78:a0:8d:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=b0a05824-f343-4d7d-ab43-df76367f683b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a1:67:bb:8c:66:37:7c:30:94:e0:59:73:eb:
                    76:7a:44:7a:07:76:b0:81:c0:fc:5e:58:cd:9f:8d:
                    d5:75:2e:37:5a:fd:17:e8:02:ce:e0:45:d9:b8:98:
                    8e:3b:2e:22:0b:f9:8c:dd:72:18:6f:87:f2:77:5d:
                    94:ea:65:4b:97:be:c3:c5:dd:56:98:e5:eb:e7:b4:
                    03:f1:48:7f:99:73:8e:c4:7b:f3:ea:5c:96:64:d5:
                    80:72:71:b6:28:ff:af:de:5f:78:8b:51:d3:aa:83:
                    fe:4d:ee:fb:a7:df:ae:ad:87:4b:21:12:16:f4:48:
                    fe:17:b3:d3:34:73:4c:dd:fc:01:f4:a4:71:66:02:
                    f4:69:00:3b:4e:08:fc:d8:ee:7a:a7:11:10:9b:4b:
                    21:43:81:38:31:e4:aa:26:af:0b:60:20:a6:a8:65:
                    5a:73:c3:e2:0a:7f:5a:ed:1b:00:f6:bf:ef:64:38:
                    a7:e5:2c:cd:c7:1b:10:74:66:d3:07:be:81:d0:b6:
                    eb:05:81:c8:18:40:f6:db:53:82:52:d0:b1:38:4a:
                    49:20:bf:79:79:8b:19:eb:e0:70:c9:2a:05:60:05:
                    39:2e:c2:78:77:66:6c:1b:d3:6a:da:fa:d4:13:9d:
                    d8:22:57:66:ae:6a:c2:38:ac:85:22:50:fa:fe:92:
                    a8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:CE:0F:3E:44:EB:C9:96:F0:62:FE:E2:C6:D3:41:29:A1:69:DD:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6aa02105-780d-32a3-90d6-5b3599928828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3c3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:28:e8:65:3d:81:9c:6f:9f:ef:c7:89:58:22:ee:3f:00:55:
         48:88:4b:a2:cd:c4:b8:bc:10:a4:9a:94:70:e9:87:f1:c3:8c:
         f6:f0:e8:ad:6d:29:a5:95:5c:0f:b1:2c:12:83:d8:47:0d:74:
         69:6c:f3:dd:66:05:e2:d5:ae:fb:06:4e:cf:2e:68:39:0d:b0:
         a6:3b:8d:cf:48:f4:7d:da:79:2e:82:3e:29:37:28:93:f4:88:
         42:7b:59:28:e7:2f:cd:77:5f:05:8f:a6:dc:1b:af:cb:f3:a0:
         23:e7:7d:bf:25:a1:3e:d1:67:25:36:ec:55:8c:5e:6e:3a:18:
         c7:6a:e3:e8:2f:67:f7:84:f7:96:27:fd:48:7f:83:67:00:bc:
         8b:e9:5f:11:66:8e:1b:4f:d7:e0:3f:6e:58:93:12:73:45:79:
         32:7f:21:0c:63:d2:28:ad:e7:73:25:6d:c2:87:c0:d4:75:9b:
         2e:0a:ee:84:ab:04:73:28:d9:5b:a6:86:ee:f2:95:09:78:73:
         ac:68:1f:ec:b6:2c:98:3c:d0:6f:84:16:c1:27:8f:a9:be:2d:
         40:8e:84:d8:db:bc:a0:a1:6b:cf:3f:89:d7:70:2f:6c:44:59:
         ba:97:39:5e:51:46:0c:bc:4f:64:da:b9:bd:69:61:95:51:e6:
         5a:83:75:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:06:42 2026 by rpki-client