Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7083891-90ca-3ebd-85a3-c2668606c9c8.roa
File:                     b7083891-90ca-3ebd-85a3-c2668606c9c8.roa (raw, json)
Hash identifier:          Ej6vNfEZW+27v47f8fGPsi4K/2Tc0/03hV7uNPKSz9M=
Subject key identifier:   3C:76:5E:D4:52:2F:5F:3F:92:49:25:18:FD:00:03:FF:EC:63:F5:D9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D60E50DFE417E64A7B299E6C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7083891-90ca-3ebd-85a3-c2668606c9c8.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     62537
IP address blocks:        2001:470:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:0d:fe:41:7e:64:a7:b2:99:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=d7ee1f3d-0605-432b-a7fe-62d4d07933fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:60:29:5b:5a:e5:3e:3d:da:06:80:28:28:84:
                    d5:a2:50:5c:bd:9a:a9:3c:db:f8:5b:43:4b:68:2f:
                    fa:5e:74:30:d2:6d:4e:65:44:32:24:b1:9d:ff:c8:
                    d5:fe:2e:1e:d5:3c:cf:87:16:9f:29:b2:e9:c6:13:
                    fd:48:d2:db:a6:be:f4:15:d0:f5:4f:27:c3:aa:8d:
                    95:84:52:e4:1d:02:22:b5:8b:b5:0c:5c:2c:2e:5d:
                    89:6f:88:ad:4d:a3:df:7c:ae:29:97:a9:d0:24:71:
                    df:2c:07:b0:17:27:da:15:5e:e7:b0:14:28:17:21:
                    ab:de:06:28:b7:18:05:6c:65:82:31:01:8c:66:97:
                    89:1d:05:65:f8:88:7b:9e:7f:27:be:3b:bc:d7:94:
                    62:f2:12:31:17:f9:34:61:d8:1f:9d:21:29:2c:24:
                    36:33:11:91:db:b4:27:9f:a4:1a:31:d1:48:14:33:
                    57:5f:ef:59:7c:0d:38:c4:c3:fb:81:0a:16:06:78:
                    47:03:cb:89:e6:97:e0:5c:cd:9e:35:ca:c8:59:70:
                    d1:2e:7d:14:0a:25:20:a1:bf:e3:93:f0:c6:7a:51:
                    ba:5e:1a:70:76:5c:55:28:1e:23:ba:07:b5:57:27:
                    6a:f7:f2:d4:67:25:92:ec:66:e6:e5:59:07:72:e8:
                    50:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:76:5E:D4:52:2F:5F:3F:92:49:25:18:FD:00:03:FF:EC:63:F5:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7083891-90ca-3ebd-85a3-c2668606c9c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:35:dc:12:d5:b4:87:97:87:9f:f5:8e:83:10:f9:17:9a:92:
         c7:77:b9:59:f3:f8:9b:f4:35:e0:09:ec:81:02:ef:1a:13:b3:
         09:42:3c:a9:41:73:06:d1:66:14:92:a0:50:c7:a8:2b:78:15:
         01:01:ba:af:46:19:13:5d:eb:0c:22:37:fd:1d:40:d2:52:2b:
         f0:09:48:4d:69:83:e1:46:74:f3:2a:d3:47:59:ef:9b:da:5b:
         71:0b:90:88:31:e8:95:5b:46:c7:de:c0:b5:3a:29:b1:71:cd:
         49:d5:1c:89:fe:9e:81:76:49:e0:3f:7a:f6:d7:aa:88:6b:6d:
         83:66:92:8b:7d:f7:48:d3:3e:be:b6:fa:36:52:ed:9c:23:c4:
         39:f9:fb:26:3c:fd:f1:ec:f4:a0:bd:7a:85:1a:5a:c7:5a:25:
         de:b3:16:b4:5f:cf:3b:c8:34:95:c3:23:1a:69:ca:95:c6:fc:
         4c:78:3e:0d:72:8c:7a:f6:cb:48:4a:3c:ef:37:9c:97:12:00:
         4c:f9:5d:61:aa:56:fe:12:c8:4c:98:ed:c0:66:47:32:b9:53:
         bc:74:15:7d:5a:d4:b8:00:6d:1c:74:0d:40:e8:2f:a3:72:c2:
         96:9f:e5:33:f5:e1:0a:b8:ac:38:fc:d1:bb:b0:22:bd:01:53:
         93:49:38:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:14:56 2026 by rpki-client