Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa
File:                     5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa (raw, json)
Hash identifier:          MhEmYswPmBTEOxkfH1r4VMs/0uDcfp22PPSwhFJ9CO0=
Subject key identifier:   70:AE:4F:9A:E7:D9:D7:79:13:AA:B6:BD:1A:3A:5C:12:03:47:46:AB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC923EA37C9E1ACCA0974C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     45960
IP address blocks:        2001:470:243::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:3e:a3:7c:9e:1a:cc:a0:97:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=0789f75a-9d0c-4416-b5aa-b4309ebf1856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b5:3c:ee:84:0f:83:9c:8b:7c:61:98:40:e8:
                    c9:4b:bd:af:fb:a4:56:1b:49:80:a8:d3:5c:11:34:
                    2f:ba:03:e7:f7:38:5d:98:58:a6:30:15:5c:71:37:
                    fe:f0:e1:c7:57:03:06:aa:46:a0:f5:ec:62:dc:ff:
                    da:21:43:e2:67:11:f3:46:08:37:a1:14:4e:b4:63:
                    df:f7:50:81:db:96:4c:fd:bf:7b:18:bc:53:29:2a:
                    6f:14:30:12:af:57:3f:28:79:f5:ff:d1:7a:e8:8d:
                    ae:47:a5:7b:e1:fd:8b:27:1a:5b:93:fe:ce:f7:6f:
                    2d:62:a4:a7:ca:c5:59:5a:37:1f:a3:2a:43:8e:6f:
                    18:d2:57:4f:4c:3c:6d:dd:ab:b8:cf:9d:5e:8d:5b:
                    b4:be:9c:ac:08:00:04:84:02:cb:27:8a:4b:24:8a:
                    34:32:0a:b4:d9:29:d1:ad:a7:48:07:b4:a4:16:95:
                    73:40:58:b4:c2:25:e7:c1:b3:23:8c:b1:29:29:ad:
                    a1:84:d4:00:30:2a:a1:3b:bb:92:b7:94:ee:39:73:
                    cc:0d:ef:cf:6c:4b:2c:18:4a:fb:10:2c:8e:32:a9:
                    00:ba:6c:ad:01:1e:3e:cd:16:4a:fa:ec:53:cf:60:
                    6f:65:3f:f5:6c:b7:1d:63:52:c6:17:8a:b5:42:79:
                    e2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AE:4F:9A:E7:D9:D7:79:13:AA:B6:BD:1A:3A:5C:12:03:47:46:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5232a25a-6432-3b3e-a4e0-7e0f95439c81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:243::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:52:19:62:88:95:1d:12:7a:b2:d7:91:33:21:14:23:a8:4c:
         9f:dd:c7:22:5e:cb:c2:09:82:45:da:2f:25:4b:7c:45:7a:98:
         60:c7:e1:1d:79:ab:07:0d:7d:c2:e4:c9:32:f8:fc:a2:de:d8:
         3a:8f:aa:e8:f4:f0:36:a1:59:b0:1c:98:05:95:12:75:a7:8c:
         11:31:c7:ca:84:01:fc:4c:fa:81:d7:66:12:41:d4:62:c3:f8:
         74:4f:6a:a0:39:1b:a8:9b:6a:aa:36:0f:2a:a1:01:0f:51:fb:
         d8:69:ca:cd:68:ac:be:6f:6f:4d:1f:e1:44:d1:8b:06:1d:6a:
         0f:38:8d:a9:f2:d1:bb:a5:ee:65:cc:a9:e6:2e:37:62:d2:aa:
         59:0e:37:9e:b5:b1:67:61:90:eb:9b:2f:53:3d:19:2c:bf:ea:
         3d:ee:8c:6a:65:1a:5e:79:bf:ca:8b:b8:04:70:14:3f:fc:a9:
         e2:98:39:f2:6d:53:d9:25:14:cc:88:f2:5e:69:50:30:6e:80:
         ce:3c:fc:d9:4d:ee:58:31:b2:92:79:84:c3:93:d9:23:5c:61:
         5d:d4:bf:9c:36:e1:3e:42:d3:ef:ef:4c:85:84:a0:a3:b2:a9:
         19:c7:79:0c:fa:a9:e8:20:c9:83:c7:25:9b:72:f7:0b:64:db:
         8f:94:6e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:54 2026 by rpki-client