Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cb07eb45-c2a7-3841-a50f-5072f4dbecd2.roa
File:                     cb07eb45-c2a7-3841-a50f-5072f4dbecd2.roa (raw, json)
Hash identifier:          gz0s4jDMXH5El5sFv1i2+geLz+g+HRJoIJM7PvSnuho=
Subject key identifier:   5D:CE:65:FA:33:8D:27:0B:CF:AB:08:25:19:EF:54:97:C0:B5:AD:C9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E1A1450D1DBDA40653AF73D00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cb07eb45-c2a7-3841-a50f-5072f4dbecd2.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     22131
IP address blocks:        2001:470:248::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:50:d1:db:da:40:65:3a:f7:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=9370d0ec-fce0-4b0b-a1b5-f349551fe15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:80:f7:32:42:5b:e4:5c:eb:b2:8f:fd:06:
                    16:16:b2:dd:13:94:38:01:89:20:53:a1:21:18:99:
                    bf:18:e4:ec:5c:b7:77:52:93:44:ce:2a:9b:20:ae:
                    18:f3:9c:33:2c:cd:4e:09:61:a1:4e:ce:b8:c1:3a:
                    3a:58:a3:c9:02:a0:6e:67:2a:00:de:1b:fa:ae:6a:
                    a7:c4:e9:94:92:08:20:4e:5f:65:d0:5a:4b:1b:7a:
                    da:d7:64:56:7d:56:a7:a1:41:74:b8:66:0e:35:7d:
                    12:cc:40:93:1f:49:df:9a:6e:6d:63:6a:a0:05:b6:
                    d4:57:fa:8a:db:94:88:e5:65:84:45:38:b0:96:c3:
                    b0:0e:10:e0:56:d0:ff:7c:d7:eb:f3:27:18:6e:14:
                    ea:42:e2:e1:17:09:ab:13:66:9f:02:c8:4b:3b:00:
                    e1:52:5f:74:8b:70:9d:0b:a5:0e:29:18:c0:ef:7e:
                    bc:52:89:d4:6f:58:3b:9d:cb:fd:d8:2d:95:e8:e8:
                    56:62:74:57:9a:05:99:a9:6f:92:c4:d8:ea:37:45:
                    9f:3d:42:dc:9e:9e:22:56:93:ef:cb:ee:9d:60:b2:
                    db:ba:a5:14:0c:f0:b1:d6:da:02:5b:98:37:41:1e:
                    c7:c3:5e:07:fb:c5:38:2d:e7:43:6e:05:2a:d1:21:
                    96:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CE:65:FA:33:8D:27:0B:CF:AB:08:25:19:EF:54:97:C0:B5:AD:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cb07eb45-c2a7-3841-a50f-5072f4dbecd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:248::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:d7:30:92:7b:ff:13:2e:37:45:7d:77:58:d3:47:ca:b5:33:
         fd:5f:6f:90:fd:17:3a:95:fc:5e:48:45:40:85:10:39:9b:f2:
         f0:f6:0d:1b:58:f5:6b:e8:f6:c8:a9:05:b9:b8:63:02:35:73:
         b5:9f:ee:18:72:fa:fe:79:48:95:b9:16:97:66:3a:04:53:ea:
         ef:7a:82:34:04:ae:c8:3f:40:e0:e9:70:73:28:3f:cb:0f:82:
         60:ca:2a:81:49:3d:2c:6f:a9:71:8e:59:68:ae:ed:46:b6:0b:
         86:ec:6e:18:37:69:e2:01:22:da:1e:b1:3a:25:38:47:6b:f5:
         22:1e:34:ff:54:4b:32:b1:1b:9a:ee:f6:f7:6d:94:76:0a:50:
         8e:23:aa:9b:ab:ec:02:58:b3:2d:7a:05:8f:34:bf:41:37:26:
         83:d5:4a:7d:4a:4b:2b:c2:96:a3:05:a2:55:e2:6e:63:16:7d:
         fa:dd:25:ca:f2:69:d5:90:ea:56:a7:fd:66:2a:b1:5a:52:55:
         ec:0c:c4:f4:55:58:6d:9a:58:83:c7:60:2b:73:ab:b6:34:0b:
         81:14:43:63:6d:ec:19:69:a1:cc:e1:63:cf:bf:29:ab:cb:7b:
         d5:0c:b3:0c:dc:ed:88:63:18:af:fa:98:db:7e:8a:d8:8b:44:
         a2:ae:74:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:38:43 2026 by rpki-client