Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b1a43cf3-ba13-3ae7-aec0-9a0f0aae8429.roa
File:                     b1a43cf3-ba13-3ae7-aec0-9a0f0aae8429.roa (raw, json)
Hash identifier:          vXAEDWxiEBNpSYzh0ZJARVEYK4DZEzxc0qWpQO3Y0tk=
Subject key identifier:   2E:04:25:B0:0A:B2:7E:DC:4E:4C:46:6F:E9:C7:B1:24:42:89:CF:BA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E0D841FDC4BB205AE085CBF00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b1a43cf3-ba13-3ae7-aec0-9a0f0aae8429.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     211156
IP address blocks:        2001:470:542::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:1f:dc:4b:b2:05:ae:08:5c:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=6b073f75-2a8c-41e2-9761-1be13c39b099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:61:89:77:a8:cf:ce:36:f0:d3:0b:d3:e0:12:
                    0b:0a:52:0a:5e:a6:81:0c:3a:78:df:08:f7:10:78:
                    3d:13:b0:94:36:47:19:6e:bd:6e:57:78:6a:b9:92:
                    3c:e1:a3:05:6e:7f:ae:27:b9:43:26:53:e5:e5:f8:
                    be:e3:53:a2:c4:88:ad:87:25:1a:d9:37:07:7b:cc:
                    a3:a7:ec:23:11:3a:e4:a1:74:9f:b8:4e:a2:c9:a8:
                    8a:88:40:cf:f2:64:e2:ac:a2:c7:10:3c:e8:f0:d8:
                    ae:bd:2d:b5:65:4b:a5:d9:ad:44:3d:53:c0:bb:5a:
                    5d:26:8e:77:98:98:85:18:80:65:ac:52:a1:f7:f7:
                    28:9d:62:a9:62:7d:5f:cb:aa:2a:a9:80:77:a3:5c:
                    96:4c:72:03:92:0f:7f:56:2a:a7:cd:30:58:83:04:
                    09:e4:5f:0e:ca:31:be:69:2a:c0:13:28:19:54:a8:
                    a3:37:ab:d4:3b:16:a1:54:e6:59:a9:99:8f:42:f2:
                    dd:e3:ee:6b:de:29:3d:39:70:23:1d:4e:57:49:13:
                    a4:4d:af:b6:0f:6b:37:29:b9:5e:47:cd:a8:89:eb:
                    68:3d:23:a4:f2:d7:4a:04:6d:a1:f3:58:fb:4f:d9:
                    bf:4e:ce:ef:5a:b9:e8:b7:0c:62:5f:02:09:12:28:
                    6f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:04:25:B0:0A:B2:7E:DC:4E:4C:46:6F:E9:C7:B1:24:42:89:CF:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b1a43cf3-ba13-3ae7-aec0-9a0f0aae8429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:542::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:d9:9c:d1:87:cd:a4:0a:ad:07:dc:62:5f:3b:5b:58:3a:ba:
         7c:c2:8b:68:ca:16:ca:ec:04:2f:ee:8f:be:e7:76:7f:be:3c:
         80:8d:c0:20:a0:3b:f7:bb:8f:0f:6f:01:a1:64:ec:91:4f:7e:
         07:a3:8f:35:fe:4d:1b:1b:d7:46:6a:41:36:90:d4:a4:aa:7d:
         b3:22:9f:81:15:de:61:b5:ce:e1:8f:8f:fc:b7:b6:2f:f6:8a:
         0a:f5:13:30:89:a1:5c:33:63:80:e8:13:0e:ad:14:d0:38:56:
         13:c1:12:8a:3a:24:51:c3:8e:52:3c:f3:3c:7c:95:8d:d7:6f:
         ce:be:30:31:7b:5e:8c:97:ef:d3:e2:1c:99:8d:57:e9:a7:01:
         f9:b5:10:b0:be:f0:89:31:1c:c3:37:09:6d:f3:3a:ee:b2:72:
         96:9f:a4:28:b9:93:e3:c4:75:d6:6a:68:ea:39:58:4c:23:6b:
         43:e3:09:32:6e:ff:87:db:f8:a6:53:81:53:73:39:e0:77:ef:
         f9:5b:c6:64:fe:41:33:43:86:2e:22:f5:14:7f:cd:17:0e:da:
         91:4f:e5:3f:7a:a2:a9:df:ab:bc:64:d3:c6:a7:1a:92:e9:10:
         0c:71:32:ad:90:eb:dd:3e:7d:e9:8c:ce:2f:c1:3a:0f:f2:04:
         90:4c:a9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:36:55 2026 by rpki-client