Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3a3ae63e-8bb9-3349-b9b8-b130c99e315e.roa
File:                     3a3ae63e-8bb9-3349-b9b8-b130c99e315e.roa (raw, json)
Hash identifier:          GroUkbvmUTp5blL47/jqpYczX/Zagi1OJPdaKfhoqak=
Subject key identifier:   6F:0A:07:32:0D:8D:1F:25:3C:04:97:23:25:63:DE:92:B1:CD:76:CC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F130243C0844C99D04B2FEE00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3a3ae63e-8bb9-3349-b9b8-b130c99e315e.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     34187
IP address blocks:        2001:470:4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:43:c0:84:4c:99:d0:4b:2f:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=674f21ca-738b-40cb-a9d0-9c7c11fb3ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fa:c3:de:0a:f5:2e:b5:6e:e0:41:a8:a0:bd:
                    3b:db:71:f5:3a:d7:97:0d:c5:a3:29:06:74:8a:17:
                    f2:8c:cb:45:d9:a6:a9:bc:fc:6c:61:c5:be:89:7f:
                    52:35:2d:8b:73:c9:27:6a:87:12:85:2f:e0:3c:ba:
                    30:d6:af:b9:c7:9d:c3:07:64:44:b8:cf:9b:ac:15:
                    a3:40:92:6c:d2:17:31:7b:02:bd:8e:db:d8:5e:01:
                    27:0b:11:bc:32:eb:06:82:b8:42:37:8f:00:26:1f:
                    09:ad:0e:99:47:04:f6:8c:3f:18:0a:d9:9f:02:23:
                    47:77:14:02:5e:e4:ac:2d:b6:04:44:91:9e:c7:13:
                    34:59:26:d8:2b:e7:5c:10:e7:e3:2b:30:b8:dc:9b:
                    03:ad:d5:5e:7e:97:f3:eb:85:27:dd:b9:4c:2f:5b:
                    70:45:1f:89:b9:f9:30:7d:a7:d2:c2:c1:4a:92:97:
                    85:8f:70:2a:a0:1e:08:fc:97:42:d4:6a:35:6b:79:
                    cf:59:f9:f8:b1:b2:cf:f1:f3:66:56:d9:d4:0b:5b:
                    9d:91:c3:69:65:a3:7d:bc:ab:5b:11:2d:fc:c1:87:
                    43:60:c5:85:e6:f9:c3:54:cd:7c:97:d0:ef:c1:31:
                    76:c2:5d:d1:b7:93:7f:07:e7:ec:f5:d8:92:ac:67:
                    19:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0A:07:32:0D:8D:1F:25:3C:04:97:23:25:63:DE:92:B1:CD:76:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3a3ae63e-8bb9-3349-b9b8-b130c99e315e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:85:75:ec:72:d3:95:56:0b:85:1b:ff:d0:72:7c:a9:f8:e1:
         48:34:d0:c5:e4:a6:75:cb:de:6d:23:13:81:15:2b:a3:ec:10:
         e1:46:1a:cd:60:57:8c:8c:2a:69:60:9f:fb:fd:52:88:40:6e:
         6e:09:b1:98:70:b6:64:a2:d2:f5:ef:65:32:3f:ac:89:6e:76:
         8f:ae:f8:73:6f:07:0a:01:ee:d9:d4:7c:53:8b:41:a3:3c:79:
         ae:a4:dd:29:f0:c9:9f:b6:ca:92:16:28:c6:a3:b8:0b:a3:25:
         40:07:3f:52:ca:8a:38:26:a4:2e:c0:87:2e:70:7c:74:b2:cd:
         13:24:be:69:e2:21:cd:7d:13:07:82:75:49:f0:47:3e:ae:60:
         91:c0:1d:02:8c:5c:98:4b:71:8d:80:4c:98:c9:c0:e4:7e:f2:
         73:3b:3b:6c:4a:27:8a:46:d4:da:52:5e:f0:43:31:22:f1:bd:
         41:99:19:b0:76:d0:e5:f1:53:f0:72:52:83:2b:cd:75:55:68:
         21:a3:16:54:bc:73:c5:ef:2d:69:3e:a0:89:a5:05:1b:1a:0f:
         ce:69:d7:17:81:33:f5:70:90:9f:95:aa:f4:cb:aa:85:3c:19:
         a8:d1:3b:df:4c:93:e2:39:21:19:62:01:01:0d:ac:6b:ee:a0:
         48:e1:0f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 09:05:28 2026 by rpki-client