Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/06e5b1fe-6e6f-3ac7-8d57-252fddf8fe8e.roa
File:                     06e5b1fe-6e6f-3ac7-8d57-252fddf8fe8e.roa (raw, json)
Hash identifier:          xatQ/0mCXG5ksBlCP8Sq8mgm5SxG3fNN/sId1Z4unFs=
Subject key identifier:   37:8F:DE:7B:03:80:35:E8:74:D4:05:7B:49:8C:1D:37:9B:7E:90:6A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F1302418B18164956B7B0BD20
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/06e5b1fe-6e6f-3ac7-8d57-252fddf8fe8e.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     61356
IP address blocks:        2001:470:4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:41:8b:18:16:49:56:b7:b0:bd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=96c33be1-251c-460c-aa4d-8f42de25279e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:61:7d:04:80:ed:da:d6:da:b0:4d:03:4b:c6:
                    c8:2b:9e:a9:01:0f:5a:06:87:5d:cc:3a:1d:99:12:
                    1a:d9:64:17:e7:af:3b:a2:2b:7e:d2:a0:2d:73:02:
                    db:e6:be:3b:c3:da:74:26:de:d6:9d:e9:91:68:25:
                    ff:b2:48:b9:4b:6b:7c:a6:29:d7:db:cd:25:ee:c7:
                    c8:ef:95:7d:2d:67:7b:36:f2:5e:dd:ff:43:5c:bb:
                    3d:d6:bf:a0:e3:99:06:d6:37:04:62:46:bd:68:81:
                    a8:6b:57:88:75:b7:5f:a8:d3:65:03:9f:75:a3:fd:
                    95:01:3d:0f:9f:7f:a9:a8:57:9c:d3:e5:78:8b:d6:
                    d1:0c:10:68:15:85:42:58:94:3a:eb:86:e2:78:9d:
                    dc:7d:0d:3d:18:59:08:06:0c:85:ac:ab:19:2e:eb:
                    97:12:b7:51:75:20:c7:87:f3:8a:c7:33:5d:22:3a:
                    a1:fc:b7:fb:4f:9d:cf:1a:fc:10:90:09:3c:37:99:
                    71:6e:1d:b9:94:ba:49:91:85:57:8c:d6:28:0c:fc:
                    06:5c:5e:63:ba:17:2d:8d:31:19:f2:5c:25:d1:2e:
                    1b:5c:e4:95:94:5f:49:be:0a:cc:ad:04:a9:72:4b:
                    e1:fc:7e:9e:63:6f:69:53:5b:fc:e8:94:59:36:a3:
                    b9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8F:DE:7B:03:80:35:E8:74:D4:05:7B:49:8C:1D:37:9B:7E:90:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/06e5b1fe-6e6f-3ac7-8d57-252fddf8fe8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:1e:0c:a0:de:8e:31:9f:ee:14:43:a8:fd:b9:cd:25:1a:17:
         7d:df:24:64:d0:35:4f:15:57:20:15:3f:ab:4d:82:0c:f5:6c:
         cb:1b:60:5c:48:9e:a7:e0:c7:75:b9:82:8a:a8:5c:09:b2:9c:
         64:ee:0c:0c:aa:93:f4:58:5c:0f:c9:7d:54:89:ab:2b:3f:e7:
         13:a8:7a:9f:36:24:e2:3e:78:e4:04:dd:01:c8:bf:9c:8b:a1:
         bb:ac:7b:f9:2f:ae:93:d3:b8:37:c9:7f:58:d9:a3:85:da:6c:
         c4:2a:c5:83:6d:04:4b:d2:4a:8b:07:ac:85:bd:fd:00:4a:86:
         d8:d1:d9:93:f1:9b:91:d6:6c:88:76:d9:14:3f:1f:cd:6f:05:
         20:67:a3:55:4d:7b:9a:b4:59:1b:b2:76:59:1a:3c:92:c6:4c:
         80:47:31:74:34:87:61:d8:4b:45:ca:4f:6f:62:09:3d:5d:30:
         5f:d9:92:b7:92:57:8d:63:dc:03:99:38:db:3e:a6:2a:8e:4a:
         9c:4e:34:ce:b7:3e:2f:3e:dd:29:70:b7:a6:d6:18:f5:82:78:
         da:fa:ba:c5:93:78:cd:94:aa:65:30:8f:66:06:be:86:9c:34:
         9f:9f:36:c4:9c:5e:95:27:24:63:23:63:80:52:c0:23:7f:73:
         a7:a3:d7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 08:58:02 2026 by rpki-client