Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/77f0fced-3ccd-3a73-9ae9-ea034fa4fe02.roa
File:                     77f0fced-3ccd-3a73-9ae9-ea034fa4fe02.roa (raw, json)
Hash identifier:          IpM3CoOvWvUxjBGejkgQcCY263MNEsvbfJwJRxJZDQs=
Subject key identifier:   7D:F0:31:27:3F:E0:D6:1C:80:4C:8C:BF:FE:87:53:62:AB:57:78:B1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D5B4FAC6F7A4471F71C7D9E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/77f0fced-3ccd-3a73-9ae9-ea034fa4fe02.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     209847
IP address blocks:        2001:470:433::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:ac:6f:7a:44:71:f7:1c:7d:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=c4ad4a18-e9c7-4e90-9fdb-e3eb6ccfef3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c7:25:d0:5c:5f:3b:05:67:b0:da:74:15:2f:
                    71:39:f2:92:75:db:26:5f:a3:32:fa:36:55:3f:a2:
                    1a:39:e6:39:ae:4b:1c:db:22:b6:5d:0d:64:29:9a:
                    d4:a1:1d:8a:a0:ad:26:46:a2:a0:89:03:ce:6a:18:
                    c1:58:31:3b:ab:8f:95:62:69:1b:20:ef:e3:00:34:
                    c3:e0:11:c0:1e:bc:ff:b9:8f:33:bb:bc:4a:73:62:
                    71:f9:83:92:f8:19:66:6e:6e:6c:17:69:3d:0c:24:
                    08:c9:8c:05:4d:cf:de:74:d3:e0:38:53:c6:e1:8d:
                    9c:22:9b:4f:e3:4a:d3:25:9f:09:01:8c:54:ad:0c:
                    6b:78:18:72:d6:67:90:05:63:7d:3f:47:71:9e:8a:
                    20:b2:eb:32:63:76:25:6f:eb:38:48:03:05:cd:32:
                    74:ba:b9:13:ee:e1:f3:56:b7:1e:91:93:84:4a:05:
                    b7:f6:04:fe:b2:1a:a0:46:7f:0f:13:67:b6:5b:be:
                    3b:c9:a9:b4:27:73:60:14:1c:91:ad:1e:df:80:bc:
                    26:a0:b5:27:95:2c:98:10:ff:12:82:17:67:99:f8:
                    bb:80:24:c0:39:54:5f:30:f8:d0:d0:fb:af:cf:c9:
                    0b:92:69:41:20:3f:0b:9a:9b:b1:ca:ac:fb:f1:68:
                    58:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F0:31:27:3F:E0:D6:1C:80:4C:8C:BF:FE:87:53:62:AB:57:78:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/77f0fced-3ccd-3a73-9ae9-ea034fa4fe02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:433::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:1b:23:b5:c7:dd:44:16:7d:99:e2:f6:20:a1:be:6f:39:f3:
         d1:cb:3c:ba:ad:b1:15:50:a6:cc:f4:f4:f2:81:e9:7d:13:73:
         1a:41:a8:63:99:dc:dd:7e:e2:df:84:aa:f6:06:a0:12:75:87:
         0d:0f:9d:44:31:ad:e2:91:77:f4:6d:31:41:dd:c0:a1:6b:d7:
         f7:07:d4:4b:5e:bd:ff:1b:62:18:03:5a:12:93:d6:ce:52:87:
         67:75:3c:07:16:98:ea:f2:97:1f:09:25:be:de:88:9f:3c:46:
         78:5d:fa:45:2f:17:26:f6:0f:f3:d3:a6:30:3b:d3:b1:aa:51:
         53:36:4f:0b:a6:b8:fd:91:9d:62:7b:60:b0:82:0b:04:8f:7e:
         42:38:a9:92:15:9c:c4:f5:f1:b8:cc:7e:8d:c2:95:2e:8a:8e:
         ad:64:08:9b:35:a0:17:13:22:d6:b3:e8:40:d2:41:bd:96:8d:
         59:68:c2:5f:2a:bc:95:5b:01:09:59:4d:31:1a:55:19:b4:e1:
         a4:a7:42:54:07:57:ea:ef:c0:f0:1d:cb:e8:38:c1:8e:7e:a3:
         31:14:f9:fb:96:c2:d1:0e:0d:ff:d1:81:18:f4:10:61:75:21:
         94:9b:5f:69:58:85:c7:c7:7e:14:49:29:b9:3a:3d:43:52:cb:
         e4:71:88:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:17:16 2026 by rpki-client