Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2fb1291c-da46-357c-bf54-a29a186c6fe0.roa
File:                     2fb1291c-da46-357c-bf54-a29a186c6fe0.roa (raw, json)
Hash identifier:          SYX+ej3QEuC05tcZZd11fjfo1G73VGz+lY4/n+d0LLE=
Subject key identifier:   8F:3F:EE:D2:1D:19:55:92:CF:0A:15:74:C3:CF:16:1E:3E:E7:74:5B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EA7881DC94012BA1D1A158780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2fb1291c-da46-357c-bf54-a29a186c6fe0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22961
IP address blocks:        2001:470:47b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:1d:c9:40:12:ba:1d:1a:15:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=72493e6e-77d2-4c2b-a877-efbb900a3079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:30:46:b9:f7:0a:ac:b9:b9:16:d2:c1:fd:57:
                    2d:69:66:b4:5a:81:f4:0f:07:30:82:5a:7c:4d:5f:
                    fc:47:d5:56:c3:9d:0c:09:25:a9:39:f5:9e:51:3f:
                    95:42:77:0a:83:ba:ae:5d:12:98:f9:74:f5:b6:9e:
                    a1:1f:6b:10:7f:2f:03:29:a5:ec:56:86:f7:da:c3:
                    ae:81:d8:f2:47:a0:69:eb:b7:3e:1b:b4:63:7e:c8:
                    97:bd:7a:db:ce:52:69:19:54:52:b8:a1:d7:f7:0f:
                    76:7b:92:db:f2:36:fd:16:31:e2:2e:f7:1d:3d:ea:
                    a7:5d:c5:d9:0a:1e:2f:01:69:01:2b:b3:07:45:80:
                    c6:7b:d9:7e:f5:a7:88:6e:3b:93:18:9f:91:46:ea:
                    09:02:a1:fa:02:7b:27:6a:d5:84:e8:c1:39:cf:41:
                    68:ef:a6:14:15:d7:11:68:08:98:8f:ed:b0:17:e8:
                    38:8d:ad:7d:21:dd:f7:9d:c4:10:33:9a:d1:5a:19:
                    b9:8a:78:38:22:9c:ca:59:8e:7a:d3:e3:23:b2:d3:
                    e1:86:96:18:4e:5e:75:d4:32:66:8d:01:04:e7:bf:
                    e0:96:b1:59:1c:38:3f:ea:4b:3a:74:5e:04:b6:3f:
                    6e:26:c0:fc:4d:50:fe:87:bf:cf:f0:4e:06:bf:d0:
                    87:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3F:EE:D2:1D:19:55:92:CF:0A:15:74:C3:CF:16:1E:3E:E7:74:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2fb1291c-da46-357c-bf54-a29a186c6fe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:47b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:95:24:0a:54:11:0a:43:65:05:de:50:68:c0:77:04:a2:b0:
         f2:ee:5c:00:9c:79:ff:b0:8e:07:da:d4:71:e0:4b:51:16:f5:
         a2:48:e1:12:b6:5c:19:95:ba:8a:93:d5:1a:97:5f:a7:55:4d:
         6b:f2:7a:a5:b3:9b:8a:3f:a5:0b:9e:81:46:a7:4f:3d:d5:09:
         5c:19:fb:bc:ee:15:ae:61:04:8a:85:ac:eb:61:f9:7a:a9:46:
         44:31:92:2e:da:32:c5:3b:22:24:d3:eb:18:94:3c:1b:01:8e:
         fb:7f:eb:b9:b8:9b:96:2b:19:b5:bc:a9:1b:71:de:3c:ca:70:
         75:6d:f2:9b:17:d9:cb:c5:a1:df:93:82:a4:85:a9:0e:8e:a3:
         f1:7a:b1:2c:a5:f5:0f:c8:2b:09:03:67:52:a5:45:4e:61:90:
         1f:dd:65:a0:4c:08:c8:62:34:f4:e3:a9:e6:6b:63:10:6a:09:
         55:ae:37:6a:3a:be:6e:82:2f:38:ab:b6:cf:0c:bf:5d:6d:86:
         dd:75:51:24:a2:98:cd:50:c4:7d:12:71:bf:4c:31:d2:07:0e:
         c9:33:b3:f6:82:6f:a7:cf:b5:2a:95:a4:a7:14:9e:25:b2:04:
         b6:3b:52:17:0f:1d:00:eb:2d:5e:14:0c:71:d8:1a:ce:d9:48:
         35:03:61:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:46:31 2026 by rpki-client