Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9c27fc5e-8fb6-3798-9b00-b2da4a033d9f.roa
File:                     9c27fc5e-8fb6-3798-9b00-b2da4a033d9f.roa (raw, json)
Hash identifier:          4ussGvwEL0yHThKwiACWbf6nFjf4ZoOgBvvn0l2usZY=
Subject key identifier:   F7:E2:84:DE:AD:D3:B2:88:1A:8F:CD:E9:CA:61:0A:73:49:05:8C:BF
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D0647A1CD1C64220160C8DB00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9c27fc5e-8fb6-3798-9b00-b2da4a033d9f.roa
Signing time:             Sun 01 Mar 2026 14:00:41 +0000
ROA not before:           Sun 01 Mar 2026 14:00:41 +0000
ROA not after:            Sat 30 May 2026 13:00:41 +0000
asID:                     23673
IP address blocks:        2001:470:25e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:06:47:a1:cd:1c:64:22:01:60:c8:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar  1 14:00:41 2026 GMT
            Not After : May 30 13:00:41 2026 GMT
        Subject: CN=464a5391-fffb-401b-b1e3-a7d9b24fd8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ce:3d:f8:4e:1f:a9:25:06:1a:a3:68:b1:49:
                    d9:4d:da:a9:52:b2:49:33:5d:63:7f:f1:fb:2d:a7:
                    19:8d:c1:43:4d:f6:94:34:cb:c4:17:2f:91:05:8e:
                    a3:fc:30:45:a2:87:f4:f5:dd:6c:65:0e:55:9f:4a:
                    13:f3:ba:28:b0:87:bf:7e:4b:03:a6:94:78:5f:3d:
                    55:dc:02:19:bb:24:85:1a:dd:ad:12:0c:d0:b3:b9:
                    d9:8a:12:e9:b8:65:09:da:14:28:ff:76:4a:82:fc:
                    e0:f1:5b:5b:2b:41:52:2d:85:7b:9a:bc:b7:56:f5:
                    07:c0:c0:70:1f:13:2a:94:5d:7e:af:fc:81:75:a2:
                    b3:f6:e9:21:22:59:56:36:15:f6:b7:e3:34:5d:4f:
                    da:7b:26:72:a6:b1:23:33:8b:e9:1c:cc:7c:c4:9a:
                    fb:40:26:c9:6f:19:8c:cf:38:1c:d9:f9:e9:f6:7e:
                    ae:10:66:61:15:7a:b2:19:3c:65:33:f8:55:5f:8d:
                    10:7e:e7:6d:c3:55:17:7d:73:54:8f:9d:6c:68:d2:
                    19:1c:7f:fc:aa:58:2b:08:da:e8:32:31:88:2e:c5:
                    ac:d1:cf:16:89:02:ba:63:6d:59:ca:60:28:1b:9b:
                    30:a8:4a:ea:5b:3c:7a:c0:34:66:10:4e:c9:83:f6:
                    ed:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E2:84:DE:AD:D3:B2:88:1A:8F:CD:E9:CA:61:0A:73:49:05:8C:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9c27fc5e-8fb6-3798-9b00-b2da4a033d9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:25e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:16:1b:5f:09:d3:03:42:86:d3:69:a1:8e:74:90:6e:0b:13:
         6b:9e:e8:7f:d1:1b:ac:40:a6:16:71:b8:fc:05:a7:c9:51:f6:
         ff:8a:7a:82:ab:b2:05:e4:1a:36:01:e9:69:33:d0:0f:5f:eb:
         eb:7e:dd:df:50:55:df:a3:83:a3:e3:dc:8a:90:37:bb:00:51:
         98:77:84:65:9d:03:e1:72:d6:6d:da:ce:2a:ba:43:fa:04:ff:
         e1:22:2a:3b:2f:2f:99:64:3e:a2:7a:d5:73:5f:80:e0:a2:f8:
         56:9e:03:46:c2:91:4d:2d:d4:8d:89:1b:20:b0:19:2d:61:19:
         3c:81:95:d8:c0:e4:aa:fc:34:45:f9:d6:e5:43:34:9a:d8:53:
         50:c0:c0:cb:67:90:8a:8e:a4:dc:16:7f:c5:7f:6d:a7:e1:29:
         21:ea:51:20:8f:ac:b8:ea:35:3e:27:25:b2:70:b5:52:c9:c2:
         3f:aa:2f:05:32:fa:21:b6:07:7f:50:58:77:93:63:b1:c3:b0:
         1a:aa:2f:be:35:31:a4:df:8b:f6:4c:a2:8e:54:0b:73:07:02:
         3d:74:ca:7b:94:86:1e:73:b2:dd:40:2f:9e:bb:de:d6:c2:19:
         0d:3f:7b:bd:de:8b:9d:c2:8e:ce:e0:cf:af:6e:c5:8e:f3:27:
         70:aa:a0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:49:42 2026 by rpki-client