Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3b2770f-b0f5-3bb7-9b43-2dd2ef450e51.roa
File:                     f3b2770f-b0f5-3bb7-9b43-2dd2ef450e51.roa (raw, json)
Hash identifier:          uEBmFmXTWh4Ir1PUfLLTUNkOR4qqHrJ7Rm0+c7gd/JI=
Subject key identifier:   DC:88:0C:29:7E:43:78:AC:8D:55:7A:26:59:92:95:DA:AE:AF:F0:6C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA875DD82456FEAE2CC300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3b2770f-b0f5-3bb7-9b43-2dd2ef450e51.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     31769
IP address blocks:        2001:470:133::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:87:5d:d8:24:56:fe:ae:2c:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=a809fe3d-4c30-43e1-8cf7-e003c4c6f482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:95:ed:b9:d5:23:ad:ea:70:7b:c6:f4:2c:b0:
                    95:8d:8c:1a:ec:86:a4:8d:8b:f3:b5:31:9d:99:5a:
                    31:ff:4a:68:56:70:8a:77:8a:15:97:fc:dd:fa:b5:
                    3a:39:18:9c:18:69:8d:22:bf:b7:87:e6:07:fe:6d:
                    33:97:c7:f9:05:b5:97:ea:80:35:98:0e:11:58:0a:
                    31:d3:b2:23:d4:df:5c:9a:af:8e:2b:86:3f:5a:33:
                    43:d4:75:f4:b7:79:47:a1:c9:7c:8d:d4:bc:34:18:
                    90:71:a0:f3:90:53:00:c3:9e:0e:6e:d6:4a:55:a1:
                    61:6e:99:1a:8f:ec:30:3f:13:6c:b4:e6:3c:16:4f:
                    38:ee:f4:d4:ef:ea:45:c6:0e:b4:c0:8d:0b:0f:6d:
                    c8:9f:93:c7:48:8a:c0:e2:5d:5c:af:6b:11:c1:9a:
                    af:e9:ed:d4:9b:1e:76:ec:b7:bd:ba:5c:51:4a:b1:
                    35:10:c8:b4:ec:9b:16:7a:3a:62:06:14:0f:9c:27:
                    90:0f:15:66:3c:cd:cb:04:41:54:60:f2:0b:f4:95:
                    35:96:1e:71:50:a3:b5:59:67:aa:0e:18:e9:ff:84:
                    9c:65:e0:c0:a1:83:5c:de:a7:26:10:ff:73:cc:45:
                    f5:28:db:52:31:2f:83:67:78:30:c4:d3:a3:3e:0d:
                    ee:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:88:0C:29:7E:43:78:AC:8D:55:7A:26:59:92:95:DA:AE:AF:F0:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f3b2770f-b0f5-3bb7-9b43-2dd2ef450e51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:133::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:54:3f:c0:b7:1e:ba:f3:bd:32:f5:76:e5:52:07:72:13:5d:
         0a:5b:02:22:8a:9c:93:d7:41:d5:0b:0a:de:79:64:70:49:de:
         bf:d2:42:ab:14:52:41:0a:38:04:41:61:34:35:6b:7b:41:fb:
         bb:1b:00:86:77:db:c7:a3:a3:b8:69:16:b4:7b:65:d6:9a:28:
         03:55:f4:8a:0b:0d:56:5e:91:c7:a8:26:dd:c5:85:c6:be:4d:
         8a:8d:89:68:96:b1:13:41:17:b6:a2:f9:3c:80:e6:6e:cc:eb:
         c1:1c:58:e8:d5:4c:bf:2e:ee:df:66:93:75:7e:78:14:e5:17:
         c7:7f:ee:73:53:4c:4a:a6:19:f4:fc:cd:9f:ef:57:9b:5c:71:
         9f:d6:77:57:64:59:50:8a:a1:c7:b3:0e:6f:ed:da:fe:23:28:
         13:02:de:fb:40:71:a2:a7:53:9f:b1:95:2a:97:74:be:e9:06:
         14:48:f8:8a:33:ae:3c:0f:b1:fb:90:d0:63:3d:bd:24:40:8b:
         1e:48:1c:97:1b:0b:90:28:f9:d7:77:b9:80:03:6e:3c:ea:c9:
         30:2a:a8:e4:f5:49:37:6a:23:27:78:0b:1b:0b:2d:0d:50:48:
         f5:eb:15:da:84:96:06:94:5a:ce:a6:e1:70:68:6e:62:5e:07:
         08:90:82:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:59:16 2026 by rpki-client