Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6509623-abdc-366a-9b44-a90f59cbe42c.roa
File:                     f6509623-abdc-366a-9b44-a90f59cbe42c.roa (raw, json)
Hash identifier:          E6TebsSfOUE5IQadtd5N8E1+km+jOmovYBkc+PJ+srQ=
Subject key identifier:   DB:70:F6:00:E5:80:E3:A3:27:0F:C0:46:BB:3B:96:61:E0:88:7E:FC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584DF4DB8934B22046A0E7E10B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6509623-abdc-366a-9b44-a90f59cbe42c.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     34979
IP address blocks:        2001:470:405::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:89:34:b2:20:46:a0:e7:e1:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=d90489cd-c900-4b1a-a9b8-7a27e39dc670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c5:92:cc:c0:27:35:c1:88:75:aa:c4:ed:56:
                    30:76:c9:b8:33:95:1c:55:a0:05:e3:a2:9e:63:de:
                    9f:6c:91:76:b0:6c:a3:d0:40:1a:2b:7e:0b:af:55:
                    36:92:5e:34:76:37:26:e9:ed:d9:e8:5c:ae:b4:f1:
                    56:68:a3:31:24:c5:67:37:9b:32:e6:5b:65:30:07:
                    73:39:da:16:9c:59:db:7c:56:75:de:c3:0f:73:4c:
                    de:0a:0d:ff:72:48:9b:a6:99:fa:78:0f:ac:fa:60:
                    c9:a7:51:1d:ce:16:35:19:86:be:9f:9e:e5:5a:45:
                    d9:7d:cf:42:4c:fb:55:6e:c7:2e:1a:c2:eb:59:d2:
                    5b:85:9b:1b:fd:5b:e4:bd:ef:0a:7d:25:67:33:ba:
                    8b:03:4b:00:49:e5:d6:a9:e7:6a:09:f0:ee:c7:7c:
                    1c:39:01:8c:2e:4a:4f:02:6a:c1:a8:89:33:19:6d:
                    99:62:f1:d8:65:ae:a4:a9:4b:34:3f:6e:44:0b:2a:
                    89:1d:4c:fd:32:ea:a6:dc:91:d6:a2:4e:44:7d:95:
                    3b:c1:37:6d:02:85:95:56:50:79:cd:92:20:32:2d:
                    91:a9:70:12:67:b7:1f:da:cb:c5:f1:fd:db:c0:00:
                    a8:2d:61:da:a8:3d:75:d7:4d:89:c8:fe:eb:1f:a0:
                    5e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:70:F6:00:E5:80:E3:A3:27:0F:C0:46:BB:3B:96:61:E0:88:7E:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f6509623-abdc-366a-9b44-a90f59cbe42c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:405::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:03:9a:79:3a:a6:62:ba:0a:db:b1:3f:5d:cd:cc:69:97:08:
         47:ea:18:b1:68:19:04:2b:54:ce:f5:91:e5:11:43:bd:3c:5b:
         e8:56:1e:d8:23:a4:c4:4d:87:26:d4:60:53:11:2e:6f:48:b7:
         12:82:1d:2d:47:56:c7:9c:a8:da:56:21:e0:32:5c:29:fd:bd:
         fc:79:7c:22:77:ab:d4:41:7e:3c:ff:9f:e5:8a:21:ef:26:ed:
         53:bb:70:ca:6c:3f:73:62:03:6d:dd:e7:56:31:9c:3f:74:cf:
         cf:ff:2f:f6:b3:0a:3f:e9:57:36:3e:50:6d:38:d1:fe:c1:c1:
         25:13:cc:f2:0b:13:90:20:eb:ff:ba:e5:ef:1b:a0:73:f8:76:
         7a:e1:08:39:df:b9:1f:70:e1:d0:5f:14:f6:bc:7c:9c:65:93:
         35:ea:58:9e:a5:0e:e6:40:f2:19:3f:dc:43:a4:8c:b1:87:e0:
         1c:f4:cd:01:3f:71:ef:0f:b1:34:ef:79:90:1a:0c:7f:f3:f5:
         0a:ba:60:2e:46:97:0b:89:3f:68:66:8b:6f:d8:a1:6c:a4:09:
         f7:a8:34:e0:9a:39:30:1f:15:10:ad:b4:b2:7b:48:cb:7c:22:
         80:6b:4e:ea:5c:d4:79:e1:a4:bb:42:0d:45:0b:e7:93:4e:b8:
         98:73:e0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:15:04 2026 by rpki-client