Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/12a136dd-56d7-344d-8ac6-749a2a704578.roa
File:                     12a136dd-56d7-344d-8ac6-749a2a704578.roa (raw, json)
Hash identifier:          9fkBnQcvAJboIC7ukPj1wLyeyknjb8AUZUIbGLzyw7k=
Subject key identifier:   51:FC:CA:2E:D8:4D:9B:C2:32:22:8F:C9:CB:F6:F5:A9:52:C8:74:D2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC922B3529E2B39194F9C900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/12a136dd-56d7-344d-8ac6-749a2a704578.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     213373
IP address blocks:        2001:470:51::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:2b:35:29:e2:b3:91:94:f9:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=2871b2d4-c8ca-47a8-9d9a-e992513b64a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8b:b3:f0:18:8a:a3:ea:4d:6e:fe:a2:cc:a8:
                    6c:1c:90:0f:ac:96:d2:d8:8e:88:e7:a8:70:67:79:
                    6c:02:48:82:45:2d:5a:8e:aa:d7:d6:0a:34:02:c9:
                    77:c8:91:ec:02:4a:5a:b9:ee:bc:ea:85:0c:4f:2e:
                    a7:65:73:e1:ab:d9:aa:7d:70:db:dd:31:3e:68:56:
                    6c:ee:3b:42:2c:c9:82:a6:44:a0:82:e1:80:5c:dc:
                    82:c9:48:5a:c8:de:4e:4a:b2:9f:ad:49:43:d6:09:
                    00:12:32:8b:bb:b4:96:70:ee:e5:c5:f0:50:f2:b2:
                    9f:29:8e:0f:6f:0d:c9:09:63:32:da:73:ca:e4:fc:
                    2f:7b:ee:16:2d:48:1d:7f:21:95:bc:f4:5a:c4:19:
                    6d:bd:c9:e9:74:cc:4d:f1:0e:ea:d4:b5:97:b7:f1:
                    7c:17:3c:da:64:02:d2:16:6c:91:e1:19:c6:42:2e:
                    fb:0f:00:75:ee:b7:d9:a2:52:5c:3c:f0:41:61:31:
                    f8:20:e0:57:a1:85:a8:c0:74:6d:23:66:12:19:ec:
                    66:6a:6b:76:a0:6a:3a:41:f4:5a:f1:d2:1e:0a:7f:
                    d6:5d:50:c2:1a:c2:7b:33:10:e5:64:8f:a3:36:d3:
                    bc:40:b6:e2:ee:c7:89:14:d7:26:8e:4c:39:1f:25:
                    01:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FC:CA:2E:D8:4D:9B:C2:32:22:8F:C9:CB:F6:F5:A9:52:C8:74:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/12a136dd-56d7-344d-8ac6-749a2a704578.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:51::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:16:01:ef:eb:03:7e:94:a3:33:19:79:40:77:2f:68:2c:46:
         1f:69:db:29:b1:6b:7f:ef:dc:a2:b1:65:5a:c8:c5:84:f6:57:
         e8:fa:b1:7c:27:57:87:73:0d:74:79:eb:b4:84:e0:aa:81:2b:
         d3:1a:2b:9f:61:74:90:fe:58:20:83:db:b5:d7:13:60:1a:93:
         51:dd:a2:28:ce:44:51:a9:fc:6b:40:36:49:4f:6f:31:48:ba:
         da:f1:bc:5e:3e:6b:bf:d0:1e:f4:ef:5e:8d:2e:23:ef:22:45:
         6f:48:69:fd:dd:84:8d:ae:77:bb:89:c6:1d:86:58:c0:01:7a:
         01:7f:f5:47:9f:34:f5:6a:12:fe:0b:72:cf:77:94:16:04:f7:
         c6:8c:26:bf:b1:2d:ec:52:c5:db:03:f4:13:c4:70:19:a6:9f:
         9b:82:30:e4:f6:ce:44:72:a1:bd:b9:01:5f:e7:62:3e:84:e8:
         33:8c:1f:45:17:aa:9c:23:33:5e:b7:c6:f4:a7:44:52:c3:41:
         35:b4:fa:e1:d2:19:b4:ec:ec:af:cb:43:70:04:de:1a:32:3f:
         ed:4d:98:a3:49:98:cd:e0:52:d6:34:3f:02:be:a1:45:87:71:
         27:de:ac:27:6a:9f:5c:3e:3d:ce:5b:17:17:98:bd:5f:f9:a4:
         9b:01:01:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:19:32 2026 by rpki-client