Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9f46b6e-579d-3fa1-b616-8b61902f4409.roa
File:                     a9f46b6e-579d-3fa1-b616-8b61902f4409.roa (raw, json)
Hash identifier:          +pGQNttpyfCtpYdXcRapUr5DpA8FfclLcV1fO1OhGbY=
Subject key identifier:   81:73:A3:D8:A0:F4:F6:32:80:84:25:95:E7:6B:E7:F5:74:A3:C3:DB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584CED27BBC4F7875EFEA15940E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9f46b6e-579d-3fa1-b616-8b61902f4409.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     19054
IP address blocks:        2001:470:3f1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:bb:c4:f7:87:5e:fe:a1:59:40:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=114c045a-ade6-40e3-9629-f7e2eb5052fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8e:94:47:45:07:1f:c5:63:6f:3f:e7:b2:3d:
                    9c:3d:c3:0f:a3:bd:23:78:79:e6:df:8a:07:3d:25:
                    37:ea:68:f0:8b:8c:db:0e:d3:43:67:23:8a:d7:6a:
                    04:80:3e:9b:3f:10:2d:6a:bb:d1:3d:a5:85:86:cd:
                    47:a0:10:2e:cc:f0:df:9f:ce:cd:c6:89:fe:3a:dc:
                    21:bf:e1:0b:f3:16:15:40:d0:68:ba:79:ec:7b:ca:
                    22:fb:e4:f4:a1:b9:d8:77:3e:aa:a6:92:7e:91:14:
                    02:f6:04:33:db:bd:4d:26:8b:30:04:50:a9:ed:54:
                    02:80:1e:8f:07:e3:e2:83:6b:4a:69:fe:a7:71:96:
                    0d:b8:63:78:62:8f:f0:b3:dc:58:da:24:b8:39:06:
                    6a:ee:7a:91:a3:a0:44:3d:e3:b0:dd:b7:8c:63:65:
                    10:9f:a3:cf:16:a3:4b:a4:3c:6f:55:af:19:b2:ed:
                    51:d5:32:58:54:04:47:96:d5:1f:74:f7:fe:25:75:
                    1a:59:4a:a7:4b:cd:4b:81:25:73:93:2d:41:0e:3f:
                    85:5d:21:33:0f:ea:cf:45:47:93:23:7e:e7:bb:49:
                    33:1e:fc:41:dc:ee:59:2b:a9:aa:33:32:fb:1b:d0:
                    ae:21:5a:63:ac:d3:d2:da:2d:99:11:1c:08:64:9a:
                    3f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:73:A3:D8:A0:F4:F6:32:80:84:25:95:E7:6B:E7:F5:74:A3:C3:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9f46b6e-579d-3fa1-b616-8b61902f4409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3f1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:de:81:92:2a:6a:fc:b4:42:57:56:58:51:29:0a:9d:27:02:
         6c:81:06:8a:fa:6b:dc:ac:b4:24:a0:a3:b2:b3:21:be:3b:71:
         2b:f1:05:df:e0:62:7b:d9:89:18:69:29:e2:45:1c:af:9f:ac:
         53:38:ad:4e:8e:85:00:56:9f:2a:5d:d3:b7:0b:ce:77:ac:cc:
         92:2a:a3:1a:28:a4:d1:16:44:13:dc:f8:ac:5a:8c:80:25:e1:
         23:7d:0b:0a:03:8b:74:db:4c:8f:44:cd:d8:4b:29:dc:98:05:
         09:82:6a:9a:fa:f1:9a:9f:b6:02:6d:48:25:2b:30:d0:71:b1:
         44:e2:64:3d:68:c5:1d:48:01:31:08:f5:3f:05:89:c3:55:e0:
         d5:05:89:fc:a4:7b:54:c1:51:cd:33:15:cd:6e:3e:64:81:58:
         94:24:63:1a:ac:d6:d1:b9:aa:20:91:54:e0:9e:13:6c:4e:14:
         fd:bd:91:08:8b:ae:f9:66:0d:71:ed:56:16:dd:8f:4f:42:ef:
         05:f8:a1:52:71:7d:98:bc:d2:bd:44:03:5a:72:d7:64:84:12:
         6f:e9:d9:a2:19:cb:43:9e:7c:17:6a:dc:4f:aa:39:27:f0:8f:
         bc:00:7a:5d:ee:e2:d2:46:92:22:d0:a3:6a:5c:28:c1:8a:d8:
         eb:d9:0c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:57:01 2026 by rpki-client