Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/96c6728c-3213-3d87-9667-997e02b87ce4.roa
File:                     96c6728c-3213-3d87-9667-997e02b87ce4.roa (raw, json)
Hash identifier:          9j5Gh/0oeUQ8kl+QlJ/XiUkkGp8kEVmNFKiXb7Rrjxk=
Subject key identifier:   60:8F:BF:3B:6D:EA:3F:5F:D7:E0:C7:8B:2E:2D:2A:80:A2:8B:A2:D9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D75D546D047D0E09C4345AC20
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/96c6728c-3213-3d87-9667-997e02b87ce4.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     30712
IP address blocks:        2001:470:391::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:46:d0:47:d0:e0:9c:43:45:ac:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=99546db4-b00b-4bc0-a9d8-963cb6a98464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2a:8e:08:58:2f:8c:06:53:01:07:2c:7a:60:
                    6b:6b:2b:c0:6f:02:58:39:cf:e3:f2:b3:ad:c0:3d:
                    97:5f:1d:93:fd:c9:6c:31:5b:ef:85:78:eb:db:00:
                    e0:14:96:55:c7:55:1d:76:f7:41:ef:16:28:2c:a9:
                    82:f3:eb:b1:41:56:b1:96:af:46:35:ef:1e:1b:4b:
                    f0:5d:e5:49:d3:c4:bd:c7:75:f9:d2:7a:cf:8a:d5:
                    51:1e:52:ec:4d:7b:5f:eb:fd:fd:cb:df:fd:a2:de:
                    4e:fb:be:74:9a:58:4c:21:f6:68:fe:50:b1:a9:87:
                    92:85:42:87:22:98:34:d4:65:87:c2:5d:92:c2:5d:
                    6b:9c:f2:66:c0:55:1a:5b:e9:79:4d:d7:14:ab:a5:
                    0e:c0:6c:eb:66:8c:8a:20:6c:f5:d9:f1:cd:c6:a4:
                    de:9c:55:aa:97:d1:32:7e:e2:13:3f:f9:5a:74:f0:
                    d5:ee:71:86:17:19:33:ef:36:f5:95:19:88:b1:76:
                    bc:8b:d2:ac:3b:0f:0e:e6:e9:39:80:35:37:5e:be:
                    cf:2a:14:30:dd:23:3b:a3:94:c7:1d:43:42:a3:9d:
                    74:a1:20:52:7b:61:66:a4:f9:67:a1:5a:63:76:ce:
                    45:ba:59:9a:4a:c9:c3:6c:63:f9:ad:78:82:82:3f:
                    40:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8F:BF:3B:6D:EA:3F:5F:D7:E0:C7:8B:2E:2D:2A:80:A2:8B:A2:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/96c6728c-3213-3d87-9667-997e02b87ce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:391::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:8e:ac:76:15:dc:c9:7f:b7:b5:9a:18:d0:30:52:f5:bf:c1:
         c4:93:79:66:3d:21:ff:59:ce:99:f6:20:9d:01:a2:e1:d2:89:
         21:da:89:ad:b5:b3:9a:e1:7b:ef:36:db:bd:a7:cc:2b:58:c0:
         83:74:f6:c2:22:76:31:76:91:33:30:6e:5c:b0:12:99:14:0c:
         50:86:b6:20:6c:a4:f0:ff:b6:8f:65:b9:89:46:7e:7c:06:d5:
         01:8c:d3:e8:f1:e2:88:86:2c:13:7b:9a:6f:64:c9:ce:67:49:
         15:7f:d4:88:ae:fc:36:eb:0e:3e:b8:7b:3f:ef:78:e5:99:31:
         79:ad:92:ae:34:06:cb:6d:21:4a:72:0b:90:eb:1a:59:a7:dc:
         44:2d:d5:4a:f1:7a:1f:7c:1c:78:34:60:a8:bd:63:bf:87:75:
         0c:6a:b6:ff:60:8d:26:ff:10:8c:a9:da:ef:2a:ad:b8:66:78:
         d1:c5:37:0c:03:7d:18:b4:73:5f:42:52:c6:ef:bc:69:3e:da:
         52:98:de:99:5f:2f:38:e5:90:a6:d4:40:07:37:e2:48:cf:e6:
         1f:a9:19:8c:bf:8c:1d:dc:40:2e:03:fe:d0:ff:36:f0:cd:c4:
         df:49:66:bb:34:cd:69:04:d5:5e:ce:ef:b6:76:12:a8:1c:a6:
         f1:c3:3d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:36:15 2026 by rpki-client