Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bab0599e-4a59-36ce-84f2-4303cd188c32.roa
File:                     bab0599e-4a59-36ce-84f2-4303cd188c32.roa (raw, json)
Hash identifier:          cYy5MazmgPOAmr7+2RwWVSNVC4FaZxglVgZVA+e6e/o=
Subject key identifier:   13:65:C6:E0:54:B2:77:06:BB:47:10:09:F8:15:3B:F8:94:03:31:DB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DE2B5F3E1F5F9A027AD37BB28
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bab0599e-4a59-36ce-84f2-4303cd188c32.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     31515
IP address blocks:        2001:470:407::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:f3:e1:f5:f9:a0:27:ad:37:bb:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=a4d7fee3-c27f-4f76-8ca1-492e1186d1b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:15:50:38:ea:19:da:92:b1:c6:01:8e:65:9c:
                    b4:22:44:ec:6e:00:1e:79:76:9a:14:71:0e:d1:ca:
                    7e:ef:31:da:98:21:b9:8c:e4:aa:3b:81:a6:6a:df:
                    68:3c:31:61:b5:07:44:96:90:35:44:2d:6e:95:c6:
                    c7:77:a8:54:ff:d2:cc:97:1a:85:ed:17:90:8e:cb:
                    7c:fb:4d:4f:af:05:37:6c:cd:ef:7d:26:90:d0:44:
                    1e:77:ec:ef:47:0e:9c:40:b5:3f:5e:67:34:1f:30:
                    d1:62:c2:ec:71:ae:e1:93:20:3b:35:c8:b8:d4:b9:
                    c9:e0:d9:0d:61:cc:c7:92:14:23:b3:02:b5:2e:a3:
                    26:6e:a6:d8:aa:b2:78:11:2f:4f:d3:8c:79:37:4e:
                    2a:0b:f5:d1:e6:cd:9a:47:9f:a2:5e:49:f2:06:29:
                    59:4f:84:e0:7f:d6:1a:1b:2a:d8:cb:61:59:8a:17:
                    90:c8:7f:b3:52:7d:c5:10:fe:77:38:20:89:9d:4a:
                    52:fc:56:6f:a9:ce:2f:c9:15:fa:8a:7d:0e:8a:d3:
                    a2:00:10:f0:a7:4f:15:ec:96:b9:5f:ed:d3:e2:54:
                    32:99:33:d2:ae:e4:bf:91:71:b7:be:6a:a3:5d:71:
                    fc:1a:b1:73:8b:44:11:12:e3:7b:1f:52:1c:64:00:
                    93:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:65:C6:E0:54:B2:77:06:BB:47:10:09:F8:15:3B:F8:94:03:31:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bab0599e-4a59-36ce-84f2-4303cd188c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:407::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:6e:b0:3e:e9:88:a9:37:5a:fe:6d:6d:05:d0:b8:a3:cb:d7:
         88:54:7a:2e:34:ee:a9:77:4e:27:d6:22:62:37:68:b9:60:2e:
         59:77:97:43:2f:76:d6:4a:6b:ab:42:1c:d2:69:3c:08:15:f1:
         3c:2d:c0:d7:0b:ef:cd:6d:c9:cb:f3:c8:3a:b3:f6:ce:3b:52:
         e3:d1:2a:19:de:5a:d8:a8:2d:e1:07:3a:c9:20:83:e3:91:0a:
         5d:66:d0:58:87:6c:47:2c:8f:e0:26:90:fe:01:b8:2c:3f:74:
         35:bb:58:6f:57:7e:83:bf:8e:98:c2:3e:6a:39:90:45:b2:72:
         92:e2:0a:7b:ab:28:35:f6:79:cc:e8:9c:0d:dd:c3:81:9c:a0:
         ee:3a:9d:45:40:8a:d4:75:71:68:1c:75:63:0b:0f:66:8f:06:
         72:e8:ce:0f:85:c0:22:7c:2d:2f:ed:3b:73:74:d0:84:30:9f:
         27:ea:b8:e0:b9:0d:41:17:23:ce:16:99:0d:6c:25:19:80:98:
         21:3f:6b:fa:66:b3:38:9d:73:3a:3d:d9:e1:7c:ed:32:7e:9e:
         6c:71:15:67:c6:63:63:5d:5d:56:84:30:ab:8a:bd:00:51:b1:
         54:66:42:a6:32:f6:2b:d1:8a:74:57:c9:74:52:4f:cf:75:de:
         8a:ae:e3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:15:52 2026 by rpki-client