Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dce136fc-edc3-3fc0-ac30-7c242a646eb9.roa
File:                     dce136fc-edc3-3fc0-ac30-7c242a646eb9.roa (raw, json)
Hash identifier:          HUp9ICXL5AZqwbMjr/N+MSw3Lfd1doNyOxjTxezEKAc=
Subject key identifier:   18:21:E7:0C:29:6D:73:A2:1A:AD:4C:F1:1F:99:C4:A3:C5:F9:81:7A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E253F18297E80279346B83340
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dce136fc-edc3-3fc0-ac30-7c242a646eb9.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     13631
IP address blocks:        2001:470:3d7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:18:29:7e:80:27:93:46:b8:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=3518d59c-9fd1-4c1a-8411-655f5bc81938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:59:d7:b6:b0:e9:df:4c:73:4c:c1:6a:4f:30:
                    fa:0c:94:ae:cf:36:5c:9a:ce:be:4e:5d:aa:b2:1f:
                    ed:ee:d9:6d:3a:da:40:12:8d:a9:1d:59:84:91:b7:
                    7f:92:4d:87:ab:30:26:eb:12:70:2a:65:17:a1:67:
                    a2:6c:50:9a:0e:7b:0e:82:1d:d1:f1:77:6f:af:71:
                    14:22:7a:aa:15:c7:3f:50:84:b8:8e:2a:f8:29:da:
                    e3:24:42:ca:19:bb:b4:65:fc:b4:8d:e0:d8:ad:78:
                    7d:c0:c8:42:02:4e:c8:dd:71:21:bf:78:d1:1e:96:
                    78:60:a0:9e:b1:38:cc:eb:fb:27:9f:e9:cb:95:ab:
                    7d:d3:16:84:d1:42:c8:00:02:05:11:60:d6:67:c7:
                    ff:99:12:5f:f5:e9:51:cb:d4:08:45:b2:6b:19:b3:
                    78:10:a4:15:13:37:52:a1:b7:b8:0c:5d:82:06:73:
                    bd:44:d3:cf:dc:ed:29:cc:05:01:c8:e7:61:c8:e7:
                    25:31:27:cb:c1:9c:88:70:a8:f9:af:83:f5:00:18:
                    e0:c0:7e:a3:b8:d7:e5:b5:0f:99:1c:9f:91:ea:bd:
                    af:30:25:93:6f:31:35:f6:3b:54:68:fd:cb:95:2f:
                    d9:ec:c9:a8:e7:a5:76:b3:ab:b9:cc:c2:38:f5:e1:
                    7c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:21:E7:0C:29:6D:73:A2:1A:AD:4C:F1:1F:99:C4:A3:C5:F9:81:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dce136fc-edc3-3fc0-ac30-7c242a646eb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3d7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:16:bf:b9:f4:0a:dc:cc:37:17:96:75:c8:b6:64:17:cd:bf:
         e3:b4:82:56:f6:39:f8:5f:24:d2:63:14:cf:f6:67:ad:b0:e2:
         99:be:35:41:0d:45:60:0d:e5:40:f9:72:df:8d:79:44:3a:61:
         0d:1d:1b:e8:56:6b:7f:11:41:5d:3f:50:35:cb:17:57:0f:f9:
         d1:63:a5:81:9e:13:5e:fb:42:5d:bd:a0:af:e1:9c:03:92:e1:
         79:4e:c3:04:7b:8b:c7:13:59:d8:8a:89:d8:63:d0:2c:e1:de:
         d7:cd:4b:54:58:d6:17:4b:ef:2f:69:32:58:46:fa:5b:1a:08:
         95:c6:4b:75:6c:7a:46:c1:91:1c:32:2b:90:f9:e9:6e:38:83:
         78:a8:13:de:19:1b:72:81:9b:99:bb:a3:e4:49:91:a7:76:e6:
         46:d8:01:7e:ad:6f:ac:df:d0:c8:e9:02:4a:58:e2:f0:e3:66:
         d7:7f:b6:d0:d1:ed:08:c2:3b:6f:92:28:14:dc:7b:bd:77:71:
         79:d8:fa:4e:85:21:20:6d:2c:8a:c0:07:9c:8c:13:40:a6:5f:
         1d:08:54:1f:e2:47:eb:11:51:26:45:e7:9a:3d:22:6b:38:63:
         7a:f3:e1:8d:db:83:c5:1f:8b:68:b6:de:a0:13:a0:ae:d5:e4:
         5b:a4:6d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:10:26 2026 by rpki-client