Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b095eb20-f625-3ed7-9643-807efb6750bb.roa
File:                     b095eb20-f625-3ed7-9643-807efb6750bb.roa (raw, json)
Hash identifier:          /bzJUnQiNJd/QEcFrNIegctZ7I39FnKYCyXeDBM7YPI=
Subject key identifier:   4E:3E:02:C3:F4:F8:4E:55:75:71:92:D4:8F:27:41:88:A8:A4:24:1E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D7A053A1C4FD575DCB70E9100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b095eb20-f625-3ed7-9643-807efb6750bb.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     400190
IP address blocks:        2001:470:396::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:3a:1c:4f:d5:75:dc:b7:0e:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=b1acca22-e81f-4db7-bdd1-65089515b891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ee:87:ea:5c:2a:92:2c:59:4b:e0:d1:fc:c1:
                    c6:12:e6:2b:39:59:ff:29:f8:06:60:dc:7b:64:7d:
                    e5:52:e0:50:a3:99:9c:dc:17:fe:df:f3:c2:6f:a2:
                    84:0e:5e:42:62:fc:5a:3c:ca:e9:9d:26:fb:56:a2:
                    11:02:90:14:d6:ed:38:f1:03:d4:d6:e5:5e:34:9c:
                    20:40:37:ea:4d:37:06:4a:f1:ed:d6:78:12:96:e1:
                    a0:3a:16:16:3d:55:6c:48:25:08:59:12:90:98:8a:
                    d2:8c:bf:93:38:2c:9f:90:2e:78:82:e6:db:c5:2c:
                    83:c5:02:3b:03:ec:49:eb:c2:c7:47:91:50:bf:f8:
                    c4:a2:45:31:e0:4f:45:d7:5d:ea:85:00:1c:82:a0:
                    53:e4:d8:de:9f:d9:65:2a:25:fc:18:7b:9a:36:fb:
                    90:f4:9a:ff:85:6a:0c:93:6e:78:27:ee:fc:2f:a5:
                    ef:2a:c2:02:53:6d:76:e0:85:bd:34:ca:92:9d:38:
                    c3:f2:fb:aa:7a:4a:d0:af:b2:6a:39:3c:41:1a:b4:
                    24:39:8f:fb:97:1c:a5:99:6e:54:97:79:2b:89:e0:
                    f7:27:c2:b0:95:58:e3:01:ad:58:56:e4:1d:91:66:
                    a3:89:7b:e3:c0:6e:ab:67:10:5e:63:65:b7:e2:f3:
                    3f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3E:02:C3:F4:F8:4E:55:75:71:92:D4:8F:27:41:88:A8:A4:24:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b095eb20-f625-3ed7-9643-807efb6750bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:396::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d6:83:99:8c:39:27:23:30:7e:e3:f9:f7:e8:ef:3b:38:c4:
         57:93:46:04:4c:4c:b3:80:25:b1:5e:2b:25:21:ad:85:5f:ce:
         11:0b:01:da:97:be:b7:6b:90:3a:52:b5:a3:bd:a1:3d:88:92:
         47:65:57:f7:5a:d7:bf:ea:e7:05:b8:db:aa:5f:3f:25:e5:d5:
         34:58:5a:68:c4:b3:3a:0b:46:30:64:ef:84:60:0a:41:6c:3d:
         64:04:c0:50:3b:54:a2:fe:ca:ac:66:e8:6b:66:91:42:42:1b:
         3e:fb:97:c5:62:90:a5:b0:80:58:61:c2:85:a8:3a:a2:2a:62:
         11:41:48:54:a6:9b:76:47:19:1f:36:e9:62:3e:37:d8:fd:38:
         75:42:4b:ad:03:d9:5d:79:6f:f3:71:bc:a0:c4:61:a7:f3:51:
         0a:20:97:73:a0:7b:e3:fd:95:85:fb:ce:95:42:59:42:be:16:
         e9:7f:f6:57:fe:e8:63:68:9d:f6:fc:d2:ef:ea:05:36:fe:73:
         41:8c:95:1d:8b:1b:b4:c6:a8:88:45:1c:45:22:0a:72:30:2d:
         71:e9:28:31:4d:70:6e:e2:d6:3e:bf:25:e2:31:ae:8a:57:9e:
         30:13:b8:77:85:1e:20:ad:b7:ce:ab:88:32:58:c3:4d:a4:0a:
         7d:b4:f6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:30:30 2026 by rpki-client