Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aba21f63-e795-30fb-915b-8287023fddb0.roa
File:                     aba21f63-e795-30fb-915b-8287023fddb0.roa (raw, json)
Hash identifier:          IjGE7/4miYjloiDqvwbdyrLe68kR0jKMTJsx4zQL3xk=
Subject key identifier:   32:2C:21:71:3F:CD:A4:73:BE:65:3A:40:EE:1B:95:40:8E:51:EC:A5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D037D23D004B621E6F6851E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aba21f63-e795-30fb-915b-8287023fddb0.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     30383
IP address blocks:        2001:470:369::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:23:d0:04:b6:21:e6:f6:85:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=f3c7b2bb-d24f-4528-b4ae-dea68920ddd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:73:31:9a:36:3d:66:91:d2:a8:80:08:39:a7:
                    c7:09:0f:49:d2:cb:6a:03:9e:f0:ba:c1:ae:de:1b:
                    e4:e2:1f:bb:05:d3:89:3d:64:c1:47:8e:3e:c6:84:
                    cd:fb:14:6d:c2:84:79:29:7c:ac:25:c0:95:3e:6e:
                    6a:46:60:ef:ca:c1:69:4f:f5:05:1b:3d:95:f5:4e:
                    63:a1:1a:24:ce:b0:22:1f:94:e1:58:34:fd:37:64:
                    dc:c7:df:61:82:0f:b3:52:69:13:47:f0:cd:ef:41:
                    40:16:a6:88:c6:53:0d:9f:6e:10:d4:38:e1:48:a9:
                    db:3b:c7:21:72:81:f1:09:d4:26:72:1f:25:c8:fe:
                    61:49:e1:2b:57:ca:34:f0:a4:e2:b2:e7:33:1c:df:
                    33:06:9c:1c:57:ef:57:10:84:d8:b9:be:ea:8f:c4:
                    fb:2e:ae:f5:7d:03:91:35:b5:28:e4:32:a6:b5:0c:
                    c9:02:90:b0:6d:54:55:f8:18:17:2b:68:55:c6:6c:
                    ce:ea:13:b0:22:43:03:9c:f0:0f:5f:b9:65:7e:a8:
                    20:c5:6f:d9:cd:c9:94:54:c1:e6:71:16:59:b7:32:
                    28:0a:22:40:1f:f9:30:74:19:23:ac:62:b2:95:f1:
                    a8:59:ec:d8:44:cd:64:6b:10:0a:e9:f1:85:bb:0e:
                    00:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2C:21:71:3F:CD:A4:73:BE:65:3A:40:EE:1B:95:40:8E:51:EC:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aba21f63-e795-30fb-915b-8287023fddb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:369::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:d3:1b:4d:0a:7d:14:54:29:6b:d0:21:de:ed:a2:bb:d3:e8:
         3a:d5:28:fa:a8:a7:1a:25:ec:00:15:1c:f9:c9:f5:92:ed:00:
         4f:ff:63:fe:2c:54:da:35:a9:b7:93:7e:c1:f9:77:bf:05:7f:
         cb:2b:15:e8:ef:e6:43:4a:de:08:d7:dc:82:85:a4:ab:cb:57:
         aa:bb:e5:af:94:49:89:57:b3:4d:49:6b:53:88:b4:f1:47:5c:
         68:a6:1d:08:f1:9e:45:ac:44:0e:4b:f8:9f:02:47:8d:36:59:
         9b:ac:40:6f:a2:77:22:16:13:df:c7:72:0c:b6:97:bc:41:a8:
         3d:09:42:a9:b2:23:79:84:d8:70:57:4f:6a:15:97:28:c4:4b:
         6c:82:74:e7:1b:01:1d:7e:0b:fa:ee:78:6a:97:97:01:cb:4e:
         8a:9d:04:f5:74:91:44:8a:b4:b0:c3:db:3d:f9:69:47:b2:b4:
         0e:a2:d2:df:8c:38:ac:6a:28:bb:98:59:bc:2f:c5:4c:b3:75:
         13:cb:1e:2c:49:90:ab:6d:31:bf:16:f6:4a:a1:f0:39:0f:8f:
         a3:5b:70:fe:6e:c3:86:8b:1a:f6:80:ca:7d:27:e6:c7:37:0f:
         5d:3c:6a:30:38:5e:52:1e:e7:8e:3f:b1:9f:a5:1b:02:62:7c:
         1f:e2:e7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:38:21 2026 by rpki-client