Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b56bb6f9-1249-36ca-83c3-5a8def25be0f.roa
File:                     b56bb6f9-1249-36ca-83c3-5a8def25be0f.roa (raw, json)
Hash identifier:          c7Wqw8shySzTn6jWJ2BxmCkKOwa2oKIKOVjGbVLwWjU=
Subject key identifier:   82:E4:2D:CE:75:8D:4F:CD:DF:84:72:69:6D:D7:6F:ED:2D:B2:0D:D6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EAA559FCA1041C98230BB0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b56bb6f9-1249-36ca-83c3-5a8def25be0f.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     49650
IP address blocks:        2001:470:1e3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:a5:59:fc:a1:04:1c:98:23:0b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=1af3109d-f23e-4903-b073-4ecdee8ee880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3a:26:05:4e:f1:cf:fc:b7:27:29:72:ed:71:
                    b7:d9:dd:c6:de:6e:d0:c4:0e:30:6f:54:2d:06:93:
                    0b:07:10:dd:3e:8d:6a:28:46:47:9a:64:c2:42:63:
                    df:a8:af:27:8d:41:e4:e6:b9:7a:35:3f:33:fe:f1:
                    a9:41:b5:07:37:fd:98:8d:3b:eb:87:7b:e2:dc:58:
                    8b:30:63:d5:39:8a:ee:43:8b:b9:6b:fd:1f:96:90:
                    9b:4b:c5:16:87:db:6c:a6:fe:9e:22:dc:a0:b8:9d:
                    4d:e5:ff:5d:5e:f5:d6:21:8b:b1:2b:0e:fb:bd:a4:
                    71:b7:2d:87:5b:6b:2a:d8:8b:cd:7e:8c:a6:61:f6:
                    ba:e3:2a:e0:00:8b:ed:57:63:78:cf:5a:77:b2:d6:
                    3b:48:97:c2:58:6a:fb:e4:86:a6:63:72:73:3f:ad:
                    cf:f4:ca:91:36:90:11:bf:24:9c:de:ac:1f:6f:d5:
                    7c:93:f0:d9:96:67:d3:eb:b7:2b:e2:d2:e2:4c:f7:
                    04:ba:6b:05:e2:b8:11:76:d4:98:76:cf:fe:69:67:
                    01:f2:29:5b:48:81:b2:17:1c:85:67:42:22:6d:8d:
                    5a:ba:79:a3:c3:33:6d:05:56:b6:01:2d:df:1b:32:
                    1f:30:10:29:2c:04:44:36:42:7d:26:86:b7:31:6b:
                    06:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E4:2D:CE:75:8D:4F:CD:DF:84:72:69:6D:D7:6F:ED:2D:B2:0D:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b56bb6f9-1249-36ca-83c3-5a8def25be0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1e3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:43:2e:9c:48:b7:5c:c0:24:7f:94:36:7d:d7:0e:2c:32:e9:
         a9:48:57:63:67:39:bb:a6:93:5b:e6:36:e2:2f:b8:da:2b:8c:
         35:4c:60:10:f8:04:51:e2:71:a5:ca:2a:d3:3d:c1:a0:c6:95:
         74:51:2f:89:7a:68:d6:73:71:30:7f:0d:b1:37:13:95:89:0b:
         64:24:71:49:9b:4e:75:10:71:27:b0:93:c3:23:cc:7e:b4:e8:
         54:55:c0:26:3f:e2:50:df:9b:e6:86:95:4f:4c:39:54:2a:fa:
         b5:bf:bd:94:a4:9a:42:aa:25:30:a7:0d:49:36:a4:c9:6c:e1:
         6e:84:e2:cd:bb:3b:ff:b2:81:d3:4f:7f:34:95:16:75:f9:ce:
         fb:c5:76:ff:18:cf:8c:d7:c6:88:29:bb:dd:c3:a0:fe:07:a7:
         57:f8:eb:c7:04:0d:f1:37:a8:30:fc:27:53:e5:19:9d:fb:a1:
         3a:ec:b1:0a:75:25:73:19:11:1c:1f:54:f7:59:02:89:16:48:
         47:d3:fc:c6:74:b8:88:21:6c:db:07:c8:be:8f:c6:aa:b1:d2:
         fc:a0:c2:f6:f5:23:c2:e1:cc:0f:eb:8a:ec:04:a6:4c:eb:14:
         31:40:2d:af:25:9a:4f:b2:93:94:68:71:32:45:da:83:92:5b:
         e7:64:b1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:15:19 2026 by rpki-client