Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e02f4422-da6e-3791-9e60-87ffca7dfe75.roa
File:                     e02f4422-da6e-3791-9e60-87ffca7dfe75.roa (raw, json)
Hash identifier:          ScFhcR3zdbECDK1uCk3zcyhdLF5lUZEZdneb+7nbUS0=
Subject key identifier:   E5:30:B2:DD:FE:D6:66:29:27:AF:0F:55:41:D4:70:06:D3:5A:2F:68
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA9E3C93007002B9D5EE00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e02f4422-da6e-3791-9e60-87ffca7dfe75.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     26123
IP address blocks:        2001:470:10b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:9e:3c:93:00:70:02:b9:d5:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=306f31c4-5bf6-4de2-a441-ede0b2403343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2e:d5:19:05:23:bf:ee:4b:8c:2f:0c:35:d5:
                    eb:ea:fb:88:71:52:fa:65:46:78:76:58:98:60:ec:
                    cc:1a:96:a7:b7:9d:78:d3:bf:5c:34:86:00:9f:73:
                    6d:38:44:fa:f7:ff:03:38:81:de:ab:8e:15:08:c8:
                    fd:28:05:27:7e:1b:28:27:ee:5d:99:b5:9a:ed:93:
                    c4:f0:f2:89:a8:67:fa:8e:ac:50:32:64:36:56:76:
                    45:b9:ed:3a:ed:73:a9:59:d5:bd:1f:f1:17:a6:c2:
                    09:6a:3e:3e:ee:a1:05:e7:4b:d5:a9:4d:98:df:51:
                    f1:78:25:ba:b7:85:ca:88:93:4a:c4:ff:20:b1:b3:
                    95:4f:8c:55:b8:46:a4:ba:ed:ce:58:66:5f:45:bd:
                    b9:99:3d:ff:a8:db:5e:82:f5:5a:65:ff:aa:0e:49:
                    89:fd:7d:a2:84:b0:70:8d:18:67:ed:0f:93:b9:37:
                    c0:b0:2b:a8:20:e3:37:08:0d:c6:e7:24:c8:ca:e9:
                    ae:8b:a9:b5:63:4a:a5:92:75:cf:4a:29:9b:e1:07:
                    19:2c:d7:34:41:b6:f7:6d:c4:78:8f:d4:85:1d:6a:
                    45:28:18:65:b4:8d:84:4b:5c:13:3b:72:33:d9:15:
                    39:42:f4:c2:1f:58:f1:65:91:0d:ba:e1:c1:03:54:
                    1d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:30:B2:DD:FE:D6:66:29:27:AF:0F:55:41:D4:70:06:D3:5A:2F:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e02f4422-da6e-3791-9e60-87ffca7dfe75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:10b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b5:05:9f:ef:26:9f:6a:dd:d0:18:a9:ab:17:49:dd:85:36:
         f8:19:fa:03:bb:31:f8:f0:41:1c:cb:04:a8:da:10:c0:87:a2:
         a4:ee:61:cf:2f:44:01:6a:92:5b:75:fd:08:67:3e:44:a7:8d:
         92:6c:22:8d:de:35:41:cf:50:88:a5:b3:53:9b:02:dd:34:21:
         10:80:5a:7e:e8:ff:d6:96:02:44:43:97:59:f6:bd:ec:4f:ed:
         31:5f:9a:7e:b7:30:4a:f3:e6:95:1d:0c:7e:7d:a7:3d:bc:d3:
         2b:c2:3a:74:12:17:df:b2:a5:fb:98:9d:48:3e:0a:b8:46:ac:
         41:49:f9:d1:59:ae:bd:71:33:d1:94:24:f2:aa:50:09:fb:33:
         84:47:c8:d3:82:fb:c2:48:1b:67:d7:d4:ae:36:21:64:f5:f1:
         c2:e3:ce:2e:ee:44:58:49:ed:ec:b9:9c:94:78:9e:11:51:cf:
         d9:95:6e:25:bb:f9:da:62:51:af:46:09:be:88:7c:91:75:43:
         65:4b:76:ae:58:ff:d2:7e:70:bf:eb:2b:57:62:fb:b2:dc:7f:
         d5:70:8f:f5:3b:8b:6f:be:de:c0:1c:a9:64:58:3e:1b:a3:0a:
         13:4c:fe:df:0e:0c:ea:17:c0:12:f5:2c:05:7a:73:c2:b1:22:
         69:1a:e7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:59:38 2026 by rpki-client