Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d860e400-55ce-3e7b-81c5-634d70946b62.roa
File:                     d860e400-55ce-3e7b-81c5-634d70946b62.roa (raw, json)
Hash identifier:          4HA+wPMyv6dX/b1zFzL3YxidIcSH/did6edrIBEKwsk=
Subject key identifier:   54:07:E0:BA:22:99:52:5C:37:D7:60:C6:96:CF:90:9B:86:2D:4D:EB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B3F1C6A32963D2AC520CB9580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d860e400-55ce-3e7b-81c5-634d70946b62.roa
Signing time:             Fri 19 Sep 2025 13:00:41 +0000
ROA not before:           Fri 19 Sep 2025 13:00:41 +0000
ROA not after:            Thu 18 Dec 2025 14:00:41 +0000
asID:                     11711
IP address blocks:        2001:470:26d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:1c:6a:32:96:3d:2a:c5:20:cb:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 19 13:00:41 2025 GMT
            Not After : Dec 18 14:00:41 2025 GMT
        Subject: CN=3a61de7a-3b22-470e-87c8-ecfc5dd401c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c5:fb:01:d6:cc:7c:b6:a0:37:85:2d:b1:33:
                    c9:84:f6:d8:30:c0:36:62:2d:0e:80:a9:05:34:91:
                    26:65:33:3f:b7:7a:74:42:90:86:f3:06:0c:88:72:
                    e5:7c:f3:82:a8:f6:20:53:dc:7c:8a:d2:84:69:c1:
                    db:55:c0:fb:e6:74:9f:8e:e5:a3:a8:96:fc:59:f4:
                    70:15:01:87:55:df:26:32:46:b0:fe:de:c8:77:03:
                    57:ce:0c:f9:cd:30:ec:02:db:24:78:8a:a3:a9:8d:
                    f2:78:6b:64:ff:78:c5:08:57:b9:53:2f:63:da:bb:
                    7d:57:2e:67:15:f4:50:46:45:07:24:87:cb:68:67:
                    82:a4:7e:17:f1:95:6f:bf:bd:66:29:e4:45:d2:04:
                    b8:5f:45:9c:6f:37:59:ce:b3:c2:12:08:f3:86:38:
                    c4:a8:26:b2:8a:60:5d:59:46:6b:cc:42:e0:7a:6a:
                    2c:79:41:8a:05:78:c5:c4:b8:25:cd:e8:c8:1a:ab:
                    dd:2c:55:72:a8:53:9d:98:a9:7a:c4:af:90:07:e4:
                    79:26:c6:ea:a7:cc:83:88:6e:9f:37:66:5a:55:e8:
                    dc:db:53:9b:1e:cb:2f:92:dd:5e:ca:b2:da:71:4a:
                    93:f7:5f:10:cd:c6:1e:25:dc:ec:b7:07:6e:8d:6a:
                    0f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:07:E0:BA:22:99:52:5C:37:D7:60:C6:96:CF:90:9B:86:2D:4D:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d860e400-55ce-3e7b-81c5-634d70946b62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:26d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:e8:ee:17:4d:2d:21:0c:d9:5e:87:ad:72:ae:c9:f6:eb:da:
         a7:4d:49:2d:b6:6f:e9:ba:b9:19:e0:8b:e6:7e:50:04:ab:1a:
         e7:f8:26:18:d5:eb:64:ef:68:ee:02:1d:fb:85:09:bc:cb:4c:
         c8:39:de:94:7d:b2:cf:78:38:96:de:16:25:5f:b6:41:1c:6e:
         59:b3:03:81:20:de:ec:be:9f:9a:d4:5f:b9:98:89:91:2d:13:
         9e:e6:c6:68:82:8e:25:75:10:47:dc:11:3c:54:c7:2b:47:45:
         51:13:f0:1c:ad:0c:c1:06:5b:46:b0:3f:11:d9:f5:95:80:51:
         2e:d8:b7:28:28:9e:db:e0:19:5d:01:5c:5a:6d:58:9d:7a:94:
         d0:c6:ad:44:c7:a7:2c:44:17:eb:0e:4c:37:fd:c0:3f:41:2a:
         00:11:b6:f4:d8:62:17:31:78:8e:81:bc:fa:d9:17:f9:bc:e0:
         1a:ac:63:34:b9:7e:ac:55:e3:21:83:69:f2:62:75:6e:b1:52:
         aa:08:79:1c:5f:47:31:f8:8a:94:8e:76:17:3a:99:9b:3f:9c:
         07:7f:0b:2e:bb:62:d7:0d:f5:3f:51:e1:01:88:57:ff:8c:b7:
         41:b7:cb:09:ab:13:4e:83:50:2b:97:13:51:e8:6e:9d:3a:fb:
         8a:4b:eb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 09:54:14 2025 by rpki-client