Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87222be5-585b-3919-9225-cc81c26d451e.roa
File:                     87222be5-585b-3919-9225-cc81c26d451e.roa (raw, json)
Hash identifier:          Wopdi1TSgZbeA7pRWTnfKXCTn9goh4WFn94HrrnLRuk=
Subject key identifier:   FA:84:09:E3:1B:FB:35:73:39:C7:3A:5E:BA:40:85:B3:42:B0:3A:E9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DE84B2C8D557B2E15B141D968
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87222be5-585b-3919-9225-cc81c26d451e.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     150770
IP address blocks:        2001:470:3fd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:2c:8d:55:7b:2e:15:b1:41:d9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=d3b184d5-f95a-4a26-b79f-636eb44720c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:88:b6:21:2e:99:56:7d:1c:df:ab:6f:7f:40:
                    32:1f:38:88:e3:2f:83:78:21:2a:82:85:18:93:3d:
                    ca:0b:21:08:e8:50:e9:92:35:f4:55:dd:94:50:39:
                    5c:76:02:90:68:27:c8:0f:09:a5:bc:16:2e:9f:ab:
                    c2:f5:21:76:f3:d0:9b:e0:57:64:6c:f5:7a:59:db:
                    c0:8b:7d:3d:2c:d8:e8:83:78:49:86:d4:89:00:5f:
                    bb:6c:ad:ea:41:c2:93:84:3d:be:f7:d5:f7:d2:17:
                    e1:2c:ee:1b:ac:60:70:8f:9e:84:6f:f7:c7:1e:bc:
                    60:5b:ec:73:30:6c:d5:78:d5:42:09:b9:2b:80:0a:
                    4e:27:36:23:5d:4e:1d:cb:dc:00:e8:2e:08:2a:aa:
                    6c:b3:bd:0f:c9:ad:98:0b:48:4e:9d:b8:41:4b:9f:
                    2a:a3:62:a9:54:b6:4e:67:a2:77:49:07:99:78:32:
                    75:47:20:3d:48:3c:20:c1:8e:4a:26:81:ac:97:2a:
                    26:94:9c:09:f4:6b:bf:e1:c3:76:a7:a4:78:24:15:
                    68:0e:af:a1:21:02:b4:f5:9a:1e:8a:2c:b4:78:ce:
                    f5:7a:13:ee:63:9a:3c:3f:95:1b:21:01:83:66:d4:
                    a3:5c:0f:37:00:bd:e2:f9:8f:92:bb:ba:30:e9:82:
                    ce:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:84:09:E3:1B:FB:35:73:39:C7:3A:5E:BA:40:85:B3:42:B0:3A:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87222be5-585b-3919-9225-cc81c26d451e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:cc:2a:f8:0d:8c:a4:6a:a3:ed:69:3f:14:97:e2:6a:b6:59:
         5b:80:7c:c5:0c:fc:32:f5:80:55:11:82:0c:d2:4a:db:19:15:
         ed:5b:01:be:5f:87:5f:c4:5f:36:11:ca:52:d3:04:be:d8:f7:
         48:46:b1:af:df:83:e9:15:a3:0a:df:aa:72:27:e4:7c:3d:e6:
         66:15:0d:f7:2a:e3:5f:ae:1f:28:7b:40:d2:d5:b7:c7:42:ec:
         f1:d8:68:df:4c:3f:0a:39:6a:97:60:58:2c:4a:d8:2f:fa:ab:
         61:59:90:5b:91:8c:78:61:fd:2b:a8:30:57:a6:ec:f9:d9:be:
         8d:ef:33:f5:e7:ff:d3:d2:7f:f0:40:8b:d3:60:1f:c9:46:f6:
         a1:cc:5f:0d:71:c3:23:d4:c0:bc:b4:82:d6:97:c4:a4:f7:cd:
         30:50:3a:9e:ef:4c:cb:83:99:16:df:da:7c:09:fe:71:6f:99:
         23:e8:bb:62:0a:d3:d0:26:ea:ea:6f:87:d8:a4:bb:05:73:da:
         9a:26:9f:8e:19:c5:95:f9:85:5d:19:54:df:bb:7b:21:06:52:
         07:65:70:6f:e2:a5:f0:74:99:35:13:de:12:1c:d5:91:ee:6d:
         0e:71:3a:2c:18:b0:db:98:20:17:d4:97:d8:e9:c6:fd:47:1d:
         fa:17:71:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:23:41 2026 by rpki-client