Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6d42871-1d03-324a-a411-2e5b3006ddf1.roa
File:                     d6d42871-1d03-324a-a411-2e5b3006ddf1.roa (raw, json)
Hash identifier:          Vva7aOs0znjlabWkIFXISF8v3XZe9rplN9CqKn/QPkU=
Subject key identifier:   AE:3A:11:6D:59:01:99:AE:15:7E:08:0B:48:0F:C8:0D:EF:1B:A7:30
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EAAB5B6D5B4E4B0D242800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6d42871-1d03-324a-a411-2e5b3006ddf1.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     30860
IP address blocks:        2001:470:2b4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:ab:5b:6d:5b:4e:4b:0d:24:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=707e4f8b-28ef-4392-97e3-c9b62fcfc963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:65:04:41:f4:98:38:03:d5:76:6a:43:83:b4:
                    25:5a:c6:37:34:cc:a6:b0:ef:0e:00:6a:8a:87:f2:
                    a6:75:94:40:5a:9c:8b:b8:9e:61:96:69:e8:41:57:
                    6a:9e:ae:d4:21:36:29:ae:52:87:52:bf:9a:bb:c0:
                    f8:a4:17:55:3a:44:e5:e5:f9:68:fc:fe:a4:1b:2d:
                    52:1f:ab:2e:c4:6d:67:92:ac:13:1b:30:34:40:1f:
                    89:9b:df:59:97:90:18:1e:0d:69:e1:06:b8:48:19:
                    b4:12:dd:06:d5:88:25:11:59:10:89:9c:a4:99:01:
                    48:10:dd:c0:d0:1b:86:77:d4:e6:fd:5f:db:4e:1a:
                    f9:e1:a2:7b:a0:c7:33:ba:7e:ee:54:de:b4:57:65:
                    c8:69:98:05:a3:2b:20:1f:32:34:8f:d6:c3:01:4c:
                    43:c6:6f:ec:d2:d7:5c:2b:03:5c:1f:dc:18:ab:34:
                    b7:2f:c7:bc:26:f8:a3:0c:95:a1:49:76:85:75:77:
                    28:fa:a0:92:45:31:3c:7b:44:c0:c3:81:5b:a4:f0:
                    ac:ad:05:c8:a0:a7:03:a0:f0:2f:74:a3:20:a6:5b:
                    48:2d:7c:3c:a7:fd:aa:25:13:41:e9:bc:58:b7:40:
                    70:98:17:f0:b9:55:8b:67:f8:ca:22:0e:98:3a:ff:
                    fa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3A:11:6D:59:01:99:AE:15:7E:08:0B:48:0F:C8:0D:EF:1B:A7:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d6d42871-1d03-324a-a411-2e5b3006ddf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2b4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:68:61:66:49:4f:7b:31:11:0c:7c:d8:f8:8b:70:90:4d:ab:
         38:62:58:4f:3b:72:40:1c:97:f8:5e:37:45:e7:d5:e1:f2:de:
         2b:73:16:7b:40:bb:0e:59:21:62:b3:f4:45:68:a1:32:0b:2e:
         62:8c:75:e0:8b:1d:bd:09:74:b6:47:1b:4e:ea:73:ff:a0:23:
         d0:40:2c:c1:4b:4d:61:40:13:66:be:b4:f2:cb:63:3c:e0:74:
         2f:82:36:e1:b1:3a:00:68:8a:d4:f0:d6:ed:27:0f:37:7f:1c:
         8b:17:f6:fa:88:79:43:67:c6:26:4f:a7:6f:e9:79:43:42:8e:
         b6:13:31:ee:f5:60:b1:fa:e9:d4:71:ab:a2:30:2b:6b:fd:b1:
         7a:4c:a8:73:d2:1e:14:3e:f6:12:7e:fa:d2:59:ad:e0:21:fe:
         15:10:37:16:3d:3b:74:36:0d:cc:07:7c:a1:15:f8:31:59:72:
         79:07:78:09:bd:84:44:39:93:75:cd:6a:a6:88:53:84:1f:ad:
         63:a0:d3:72:54:b7:34:67:6c:72:1f:ef:b8:5a:22:02:2e:9d:
         24:eb:20:bf:9e:19:31:84:6d:f8:50:cc:1f:e1:2c:56:e4:07:
         86:f0:e9:37:ba:da:80:7a:87:e0:d5:02:c2:56:3c:a8:03:c0:
         9f:0e:10:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:23:24 2026 by rpki-client