Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6ed4ccf2-2fdb-3e15-9795-1ed24d2c3767.roa
File:                     6ed4ccf2-2fdb-3e15-9795-1ed24d2c3767.roa (raw, json)
Hash identifier:          KkCIgO2GhNUpkEY6WMX/ak3ODIqNT0PDjkqiYoEghA8=
Subject key identifier:   4D:01:07:01:BB:FD:90:55:01:03:43:4C:78:BA:92:4C:ED:FB:C7:8F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EAA9AE97B2A7A584FEB560
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6ed4ccf2-2fdb-3e15-9795-1ed24d2c3767.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     15081
IP address blocks:        2001:470:281::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:a9:ae:97:b2:a7:a5:84:fe:b5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=ca708ea3-f88e-4d61-b6de-3d636ec66745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f1:e6:9c:1f:d1:72:41:87:b5:3c:19:3c:7e:
                    47:51:b9:b8:66:74:32:23:20:0b:09:b9:d6:c7:3b:
                    ab:8d:14:46:b0:dd:b1:16:a1:dd:3a:06:c6:7d:13:
                    d2:22:bc:98:55:f3:ca:b7:c3:5d:77:93:e0:5b:f3:
                    b0:06:3c:6b:9d:07:06:b5:b5:64:c8:2e:07:83:77:
                    83:c0:63:5e:2e:cc:1a:44:11:b8:98:50:51:95:f4:
                    56:7e:ae:05:96:be:3c:c6:88:9f:f0:3b:82:1e:54:
                    d0:d8:e1:a6:ad:de:9f:57:70:64:87:28:36:04:1d:
                    0c:72:9d:66:0c:5c:ff:57:37:1b:1b:d2:c7:94:68:
                    29:0f:db:5c:05:58:30:f4:2a:c7:1b:11:99:18:1a:
                    fb:53:1c:b9:3a:74:6c:ab:73:aa:2d:3f:87:cf:ee:
                    3e:9f:c8:b7:f9:19:00:43:bf:4b:04:82:fb:b7:38:
                    ef:96:76:de:5b:79:82:b0:fc:a2:b5:24:59:37:9a:
                    38:6c:3e:d2:e7:b8:22:8f:96:12:fb:cc:5c:91:eb:
                    d1:17:14:10:ed:40:f5:f3:72:4a:c1:18:d8:fb:d1:
                    f5:4c:6c:57:0d:7d:ab:87:ed:4f:a7:62:58:39:82:
                    b2:53:1a:76:dc:61:52:92:34:0f:51:7d:aa:6e:06:
                    c2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:01:07:01:BB:FD:90:55:01:03:43:4C:78:BA:92:4C:ED:FB:C7:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6ed4ccf2-2fdb-3e15-9795-1ed24d2c3767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:281::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ee:c4:42:3c:7f:a3:9c:14:be:7e:f9:f3:90:7f:47:e1:c4:
         be:ed:85:ba:bf:78:fe:b1:75:21:23:c5:45:3b:66:0b:15:7d:
         cd:0b:86:8f:ec:c8:57:81:4f:d7:35:40:0f:86:4d:a6:f9:75:
         26:81:46:e0:20:af:fa:2c:8a:18:d9:8a:ca:c6:5d:02:92:ef:
         5a:4a:a3:92:d6:af:21:0e:15:64:94:7d:c8:a2:f9:5c:40:73:
         94:8a:85:ab:39:71:39:5d:20:24:f4:a3:fe:94:cc:ff:74:3c:
         c0:8d:19:80:dc:f5:b9:fe:3e:a4:b5:7b:18:d9:35:13:aa:89:
         69:e9:80:4d:44:29:ae:07:f7:36:20:e6:a2:c9:45:db:74:90:
         64:34:7e:ab:13:63:dc:7b:02:62:05:db:8c:31:78:84:d9:bb:
         ec:64:18:9a:1e:cc:4c:0d:46:32:a0:42:13:d2:7a:0b:e9:f0:
         0c:9a:97:88:cd:43:0d:d3:c1:89:38:ae:e1:82:aa:fb:ee:f9:
         b5:0f:d8:a2:cd:c0:66:c5:ef:a6:66:60:56:21:bd:7b:9a:07:
         f4:62:13:a8:2c:a5:24:8c:1b:f2:98:d9:79:c5:03:d4:03:96:
         c8:78:85:fc:3a:12:50:02:ad:7b:12:72:97:74:a4:62:47:14:
         90:db:04:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:58:49 2026 by rpki-client