Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/adc53458-fdf6-3a45-bae9-6f42cc1b281d.roa
File:                     adc53458-fdf6-3a45-bae9-6f42cc1b281d.roa (raw, json)
Hash identifier:          rQ5iFN34vehzm6wpZMksjb/X8FPqcFJe56Yji1VtNdc=
Subject key identifier:   6A:13:5B:7B:27:6C:92:92:8C:0E:4F:78:16:A9:F0:3C:81:3B:20:9A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA94BDCA2C49A30C0C8200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/adc53458-fdf6-3a45-bae9-6f42cc1b281d.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     394452
IP address blocks:        2001:470:313::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:94:bd:ca:2c:49:a3:0c:0c:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=e010e116-07e8-4c3c-923b-08eeb54b0d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b1:c9:8b:33:09:cd:51:df:0c:3a:c9:9a:00:
                    b5:27:e1:62:8e:48:83:e3:fe:68:7d:3d:4d:72:99:
                    8c:48:e2:4c:a6:33:c2:6e:c8:57:f9:8c:bd:14:f0:
                    86:17:85:e8:66:f2:7d:ea:22:b5:53:85:95:71:f7:
                    0a:83:a7:78:77:88:cf:e6:f6:07:23:37:c0:e2:da:
                    9a:61:e9:91:a5:2d:b0:b9:53:e5:05:f0:c0:8f:4d:
                    d7:6a:7f:1b:c5:d7:87:f3:6e:c3:41:5b:ce:2a:ea:
                    8a:54:e1:fe:25:b0:38:b8:98:8a:11:d1:73:4b:97:
                    59:e8:f2:13:9a:0d:78:88:ba:c1:68:b6:0b:05:72:
                    11:29:df:8d:53:11:62:84:01:9f:a3:7b:47:86:fc:
                    31:f0:04:f2:c1:08:b5:2c:60:5b:bc:17:b6:8f:a4:
                    0d:8d:01:99:57:1e:df:c9:9a:92:87:bc:50:bd:b5:
                    f5:70:c3:a4:3b:37:db:fd:5c:08:fa:45:8e:83:d8:
                    21:f5:d4:34:25:c8:c8:2e:ff:7d:1f:bd:08:f8:b7:
                    5d:ad:9b:fd:4f:e0:9c:ab:c1:6e:3b:6d:6c:1a:f8:
                    5a:f6:ec:3d:6e:ef:63:ae:81:39:73:b4:e8:bb:6a:
                    5e:4b:c7:0d:01:d1:f2:1b:e3:f6:93:36:76:ba:34:
                    8c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:13:5B:7B:27:6C:92:92:8C:0E:4F:78:16:A9:F0:3C:81:3B:20:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/adc53458-fdf6-3a45-bae9-6f42cc1b281d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:313::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:46:85:e4:8b:ff:36:72:2f:56:f3:1a:8a:6a:36:5f:c4:7c:
         6f:02:72:bc:73:2e:15:60:83:08:77:be:89:38:0f:5e:4d:72:
         05:e8:05:7f:8f:50:53:4c:d4:51:d0:70:5c:9e:14:a9:66:0d:
         07:ad:54:ea:65:1f:3f:d7:7b:15:20:a0:eb:f3:61:e7:ad:09:
         59:68:ce:61:04:51:25:7a:46:2f:32:af:6b:eb:8d:e5:5d:f7:
         79:6e:1c:c5:5f:21:75:8b:c0:82:d4:8a:8c:5b:4d:e1:d9:b4:
         dc:e1:eb:6b:11:fd:83:a0:c0:ec:c4:dd:2a:d0:7a:8b:d2:3b:
         89:62:0f:e2:8d:0e:27:80:6d:48:20:7a:7d:84:8b:86:79:ca:
         f0:1f:10:0f:ec:a8:70:e5:07:b3:71:64:36:44:55:37:7c:c1:
         56:cd:6d:ef:1d:1f:13:0b:83:55:bd:6d:14:37:18:05:29:fc:
         01:2f:a0:cc:92:41:09:76:dd:c5:4e:26:f1:50:6f:01:a0:f4:
         17:4a:d5:86:92:a7:59:6c:73:dd:ca:19:f4:7a:b9:76:ae:eb:
         dd:3f:7c:ce:5d:9f:a4:f2:25:d4:af:6e:1c:43:91:d4:7b:92:
         5f:2a:6a:f3:7a:c1:b5:90:73:fc:bf:56:86:40:51:50:b4:27:
         3e:49:d4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:45:52 2026 by rpki-client