Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eb25272a-de92-3ed4-8fe7-841c9aaeac09.roa
File:                     eb25272a-de92-3ed4-8fe7-841c9aaeac09.roa (raw, json)
Hash identifier:          hqHkDce8fklF0TYXeGAbPRKPNCIx4ZluU3vZm4uU2oE=
Subject key identifier:   38:93:DA:8C:C9:E3:01:22:3C:7B:7A:A6:7F:95:CF:D8:A0:9D:B4:D0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D5B4FA36283118C3D2CFA37A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eb25272a-de92-3ed4-8fe7-841c9aaeac09.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     50287
IP address blocks:        2001:470:274::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:a3:62:83:11:8c:3d:2c:fa:37:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=71513d2a-0bef-4046-bf62-ec0322b4ff1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c0:88:c4:fc:7d:38:33:f1:f8:3a:af:8a:0c:
                    df:be:8d:98:83:c9:da:5c:a7:2f:a8:5d:76:b2:d2:
                    b2:54:db:c5:5c:cb:70:5c:80:f7:ab:e5:11:26:d9:
                    20:bb:e0:43:8a:dd:e8:13:c6:c9:8b:0c:5f:fb:71:
                    56:4d:12:7b:00:f6:08:d6:01:e2:92:e9:27:17:bd:
                    d3:b8:af:87:f8:4a:ef:4a:8d:ec:f7:82:e0:6a:9b:
                    f4:a0:95:cd:c1:a5:49:1b:8a:03:2e:59:23:f4:27:
                    64:1c:4c:86:51:02:87:23:ea:47:5b:5b:0c:64:29:
                    74:0f:65:c3:88:7d:4e:60:34:a8:dc:39:06:ca:05:
                    d5:9c:82:99:56:b6:0e:0c:6a:99:4e:7e:7d:7a:3e:
                    f7:e7:4e:59:c9:4e:34:c7:61:ad:76:db:71:b6:fd:
                    1a:21:94:22:73:1d:0a:7e:a0:5e:90:5a:68:09:6f:
                    5a:c1:9e:f5:f4:c3:a5:a4:6b:b9:6e:72:c0:3b:2e:
                    e2:cc:b6:4c:d7:19:b8:23:7c:b7:b4:fd:da:dd:bb:
                    c4:25:c8:cf:7e:45:7e:a0:58:39:47:fb:58:55:8d:
                    16:66:59:10:f2:86:9f:89:95:6b:29:b3:60:f9:61:
                    6e:b7:ee:3b:69:7a:90:31:02:8f:1c:73:fe:c5:dd:
                    a5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:93:DA:8C:C9:E3:01:22:3C:7B:7A:A6:7F:95:CF:D8:A0:9D:B4:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eb25272a-de92-3ed4-8fe7-841c9aaeac09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:274::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:a1:7b:b4:c4:e9:db:8e:2b:f7:4f:6c:66:42:1e:52:5d:3b:
         78:88:1d:94:c2:b8:73:1c:47:47:df:12:63:28:66:ed:0f:b3:
         5b:21:a4:01:46:22:83:26:e5:d3:ab:36:44:de:d2:ad:c7:1e:
         bc:ea:ac:0d:ac:5f:1c:84:b8:86:c0:96:4a:27:a4:45:6a:dd:
         8c:ff:7b:60:37:75:f1:79:fb:74:16:22:1c:d3:e4:eb:93:17:
         01:c2:01:11:7b:82:db:37:9c:fa:0c:a1:52:d8:d1:d2:27:17:
         f7:c2:b9:31:29:19:ee:d4:b9:19:5b:4d:0c:53:8e:44:1e:b4:
         4c:bc:d7:a6:7b:f0:fb:37:24:53:c2:a6:c4:ca:4a:03:38:e7:
         0e:76:c8:94:d1:aa:51:6b:1b:14:73:1e:9d:3d:10:4f:e6:61:
         e3:13:80:1f:94:4d:dc:89:8d:97:c2:1c:d0:31:ef:f7:ad:e2:
         6a:cf:12:ba:66:1d:bb:8d:98:73:68:87:e6:8c:89:ca:6c:9b:
         19:03:e0:e5:23:e6:85:dc:5f:d6:77:6b:f2:e7:89:07:e8:65:
         c7:fb:6c:ad:22:a4:21:58:63:b4:6c:20:39:d2:2b:54:2b:d8:
         e3:1c:12:20:db:c2:a8:01:57:c9:46:72:2c:8b:42:27:59:53:
         be:06:cb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:18:49 2026 by rpki-client