Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dd485a6e-5c74-3597-a4e2-f296943c1657.roa
File:                     dd485a6e-5c74-3597-a4e2-f296943c1657.roa (raw, json)
Hash identifier:          OHuBeeN4i/3XVgR9KyCyqkcB4AvQOcxb41wTYHnO5cw=
Subject key identifier:   4E:CA:7C:DD:B5:32:31:71:E0:A8:D9:30:BE:A9:E8:5C:B4:9A:E6:E3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EAA59409E43694F4D81700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dd485a6e-5c74-3597-a4e2-f296943c1657.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     11738
IP address blocks:        2001:470:1e9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:a5:94:09:e4:36:94:f4:d8:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=699843e7-e54b-414e-8980-b5c15d0433f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:56:07:b6:92:cc:1d:87:c5:68:61:dd:18:0f:
                    9c:6b:95:02:4e:99:81:92:cd:5b:f0:14:b4:d0:d9:
                    1f:b6:b1:2c:34:ab:46:d9:0d:e6:3f:41:fa:fa:38:
                    5a:0e:4a:4d:5f:5a:e8:67:a8:6e:11:ff:70:f5:19:
                    85:10:5a:83:64:2b:c9:bc:d8:af:9d:68:55:77:fe:
                    e4:c4:9b:79:ce:bf:b8:87:c2:c1:54:42:7d:01:02:
                    ae:e3:69:f3:9d:5a:37:6d:00:7d:d7:c1:2e:9f:fe:
                    f4:23:b5:e0:e2:18:1c:52:78:d5:3b:95:b9:38:e5:
                    ba:23:d8:38:cb:27:5d:bb:70:fd:72:51:01:ad:4c:
                    a7:c5:08:e9:91:b7:de:f5:bb:b5:2e:7e:da:84:4c:
                    d4:3c:cb:79:db:c1:d3:62:8d:0b:f4:33:46:77:90:
                    0d:66:d0:39:db:2a:99:6a:a8:0a:92:ef:75:94:80:
                    03:41:49:d6:86:eb:ef:a3:94:e6:86:f7:47:bc:01:
                    19:02:12:fe:2d:94:c5:1e:d1:83:d9:45:7a:76:b9:
                    42:dd:14:72:af:84:81:e5:fd:fd:b7:c8:f6:02:11:
                    8c:b2:86:5b:2c:8e:bb:b5:dc:b7:f5:2a:f8:5e:7e:
                    f9:69:63:43:35:8a:b3:1c:c0:4a:2b:fa:41:b3:36:
                    48:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CA:7C:DD:B5:32:31:71:E0:A8:D9:30:BE:A9:E8:5C:B4:9A:E6:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dd485a6e-5c74-3597-a4e2-f296943c1657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1e9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:1c:e2:02:e8:f4:07:03:90:9f:d8:f5:cd:43:86:2a:4b:83:
         30:8f:eb:fb:da:80:28:7d:f9:be:40:98:fd:82:4f:f4:f0:e2:
         5e:c3:3f:45:e8:70:ca:75:29:3b:c7:8f:df:c0:1f:ab:ff:e5:
         c6:b4:c5:3e:41:1b:2e:aa:40:71:07:9a:fe:ef:09:ec:2f:9c:
         9d:f9:66:83:f2:eb:01:7b:55:4f:68:e1:24:8c:15:de:05:f4:
         6b:dd:b3:62:a6:db:36:b6:ab:fe:04:e3:fc:90:fa:f0:c5:20:
         84:8c:48:e6:3b:eb:6f:04:3e:46:fb:24:37:ed:bc:c5:14:c4:
         96:81:6b:f0:be:11:38:a2:68:a6:54:85:d5:83:a8:b6:ff:fe:
         88:24:77:dd:fa:28:10:98:b0:9d:88:26:eb:18:eb:85:c0:a4:
         32:e9:ff:86:c5:c6:3e:db:e3:be:b9:af:d9:bd:20:ef:5a:68:
         d2:17:9d:4c:1a:af:6e:de:ba:7d:87:cd:08:7f:48:d8:1f:47:
         a3:33:bf:2f:b2:8e:5b:cb:47:ff:6b:d2:91:18:1d:fa:48:a2:
         35:c5:1a:9d:f9:dd:71:63:a0:f1:0c:f6:12:ce:7c:f9:dd:15:
         db:c9:77:dc:45:0d:7b:6f:a2:c6:de:56:7b:ad:f0:ac:98:58:
         1a:07:c8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:17:14 2026 by rpki-client