Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1637f82b-b875-3e51-833e-383542b07770.roa
File:                     1637f82b-b875-3e51-833e-383542b07770.roa (raw, json)
Hash identifier:          H6DaMIzxxWCMxabKq/uTjrTkkNG0imBfKeW1G3jrHlY=
Subject key identifier:   B3:7F:9B:29:35:A2:26:88:BE:D3:61:F2:A9:44:08:55:DF:B8:8F:AE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC9239B346E25EFBCF5FCE40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1637f82b-b875-3e51-833e-383542b07770.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     12183
IP address blocks:        2001:470:132::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:39:b3:46:e2:5e:fb:cf:5f:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=14cf6171-8940-44f5-b14e-f9230bb40d4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ed:6a:fc:01:95:0d:ff:bf:6e:18:7b:ad:85:
                    b7:b9:e1:ab:a9:fd:20:0a:09:fa:39:99:bc:9b:10:
                    2e:19:10:6e:23:c2:82:c3:05:7b:41:4c:d6:5b:fa:
                    2c:08:ca:08:89:e3:40:a7:a8:ad:76:bb:4d:3a:89:
                    b3:52:be:76:74:44:b0:b3:22:1d:58:c7:96:b6:03:
                    c6:39:47:09:1b:c8:20:9d:36:0f:53:a4:cd:39:7d:
                    a8:ce:10:2d:fe:ef:47:09:8d:19:a4:3b:04:67:71:
                    64:9e:a0:eb:76:4d:86:b4:ce:e8:ed:d1:fa:b5:bf:
                    73:02:e2:aa:e1:0b:af:3e:44:fd:71:5b:56:a4:bc:
                    8e:e0:6d:a7:ee:c1:3d:e0:f5:48:c6:27:7d:6b:94:
                    6d:0a:39:30:1f:3a:63:84:a6:da:6b:0b:d3:6b:49:
                    2c:b3:2a:8f:7e:d1:da:4a:37:15:db:64:a6:de:14:
                    2c:d6:7e:60:5e:cb:13:21:26:90:d2:70:58:cf:95:
                    e5:0e:a7:e1:69:a5:78:f2:3d:7a:cd:a4:4b:7f:29:
                    f9:d0:0d:13:7f:6b:46:51:fa:2e:95:af:f8:7b:2b:
                    0c:c9:c2:aa:40:82:7f:3d:bc:71:5b:c2:78:10:dd:
                    cf:c4:11:d1:6b:f4:16:65:57:7d:b6:56:42:aa:69:
                    54:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7F:9B:29:35:A2:26:88:BE:D3:61:F2:A9:44:08:55:DF:B8:8F:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1637f82b-b875-3e51-833e-383542b07770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:132::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:96:76:eb:9b:36:69:9b:aa:a9:8b:59:10:5c:50:ac:1e:c7:
         c7:cd:ee:81:7b:89:5c:b3:02:b9:5e:33:72:9d:8a:92:cc:27:
         b6:fa:76:7c:27:9e:ff:93:0c:bb:52:f3:71:8c:ed:73:13:10:
         0d:61:84:ed:89:8b:2b:aa:e5:78:44:e2:bc:99:3c:02:96:3e:
         c6:44:51:50:31:b0:a5:0a:56:5d:f5:9b:b5:ef:9d:fa:51:49:
         36:17:37:08:c1:cb:3b:c7:30:9c:b5:24:38:d3:b0:7c:a3:31:
         03:80:e2:ce:5f:cc:ef:0c:ac:71:a2:76:7a:b5:f7:86:c4:4f:
         2c:5a:64:16:69:1c:61:29:70:cd:89:7c:56:64:46:67:a2:f3:
         d3:1f:96:9e:75:23:da:08:7e:f8:02:06:ec:fa:4c:ab:7b:02:
         89:e6:67:1f:91:49:cd:a5:aa:93:9c:87:b2:4c:a6:76:9a:fd:
         53:f3:bc:84:9f:4d:d3:e3:5f:1e:55:3a:99:37:f9:f7:c6:fc:
         6e:d1:ce:c6:4f:03:a3:92:41:92:05:53:4e:b4:55:75:f1:c4:
         f6:c3:c1:a8:bc:55:b3:8e:4c:e4:d2:f1:79:77:38:a3:d9:42:
         7b:e2:1b:20:00:a9:e2:ef:31:cc:af:1e:e3:76:5a:f5:ab:fd:
         6c:06:f5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 07:52:56 2026 by rpki-client