Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e0b7330c-bad8-3ffb-a4e4-faabb006fc60.roa
File:                     e0b7330c-bad8-3ffb-a4e4-faabb006fc60.roa (raw, json)
Hash identifier:          3G5ZYYlTd7/oCoGxW2WMN2ADZvgIFnL/+UdITYdIlZU=
Subject key identifier:   2D:61:B4:C1:6D:FE:EC:48:0D:21:D6:08:4A:0B:63:D0:87:7E:41:52
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D037D3A177541079C0CCC5000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e0b7330c-bad8-3ffb-a4e4-faabb006fc60.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     12129
IP address blocks:        2001:470:369::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:3a:17:75:41:07:9c:0c:cc:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=2bb32643-7e95-4c71-bb38-1b57686a35c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:77:35:15:13:52:58:2a:75:7f:c0:51:fc:f5:
                    88:3d:83:78:50:c9:36:b0:0f:a1:3d:b2:ef:cb:09:
                    c7:b3:6c:26:4d:a9:6b:d6:a8:02:0c:07:c7:d4:55:
                    78:09:92:f9:53:39:15:7e:a4:a5:1a:33:c2:7f:89:
                    9b:b2:6f:9c:1f:95:44:52:be:bb:ca:52:8d:15:b8:
                    e5:e8:30:f5:ab:94:82:4e:dc:80:a5:0c:2e:1e:08:
                    c7:ef:eb:df:de:b4:59:32:ac:3f:ec:d2:e3:b5:b8:
                    2f:e2:36:a1:83:bc:8f:0d:57:bc:a8:0f:1a:65:4f:
                    f2:66:dc:7f:a2:77:83:83:71:ef:bb:ec:54:d8:0d:
                    ef:1b:2b:c8:47:98:09:83:12:a1:df:16:b8:06:4b:
                    3b:5b:1c:c2:a2:b4:30:7d:f3:79:00:11:fa:07:d1:
                    73:0f:50:3d:e3:bd:9e:28:a3:0a:9c:01:60:90:54:
                    dc:5f:c8:04:7d:25:d8:c3:b3:a3:f9:6c:eb:bd:eb:
                    18:9c:9b:b4:8d:f5:87:45:89:d8:4c:57:af:35:f1:
                    0a:4e:be:db:ba:22:4c:c9:77:81:8f:09:28:ae:20:
                    16:ea:49:6c:8a:f9:56:c0:e7:b7:63:e7:23:97:e8:
                    5f:94:7f:0f:27:03:8f:d4:44:0b:34:c2:2b:c6:1b:
                    e7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:61:B4:C1:6D:FE:EC:48:0D:21:D6:08:4A:0B:63:D0:87:7E:41:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e0b7330c-bad8-3ffb-a4e4-faabb006fc60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:369::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:d2:7e:e5:48:65:04:29:9b:d4:a9:5b:b3:d0:a5:72:6c:c5:
         b9:c4:f5:05:3f:f7:4d:1b:10:ec:7a:66:92:58:a3:0f:81:63:
         3c:8d:58:1d:47:b2:12:6c:5d:13:f7:e7:4f:38:05:c9:a1:c3:
         72:18:14:b9:c6:08:88:11:8b:69:ec:53:67:d7:14:70:a7:e0:
         48:46:73:d0:a8:51:aa:66:0e:2e:19:fa:14:1d:c3:4b:cc:20:
         59:c4:42:25:9b:c7:96:20:c7:a8:e0:38:60:a0:1d:21:9d:53:
         8a:8c:e8:2c:fd:a1:eb:8c:a0:cf:fb:42:4c:03:09:12:31:cb:
         27:30:80:ae:f4:0d:4b:b9:1d:77:ac:86:da:7d:e7:a0:a1:e5:
         56:a8:74:96:d5:b1:bf:ea:66:6f:53:ea:85:d5:4d:5b:e8:2f:
         62:dd:b4:a5:3c:e8:97:90:f5:3a:aa:24:d7:41:a8:c1:26:f1:
         4c:d6:a3:db:3c:19:e5:56:ce:65:29:d6:ff:d4:2b:ac:f7:ac:
         45:80:47:22:b2:a6:17:1e:e9:e0:94:58:14:b0:97:d8:95:d3:
         9f:18:45:60:eb:1d:af:9c:e7:be:51:6e:51:53:14:d9:5a:2c:
         9b:5d:b8:0c:f6:8f:01:7b:69:89:fb:e4:3f:8d:a8:9c:56:c0:
         b9:ff:85:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:24:56 2026 by rpki-client