Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/498411bd-b8d1-354f-a6d0-c463cc98ee1e.roa
File:                     498411bd-b8d1-354f-a6d0-c463cc98ee1e.roa (raw, json)
Hash identifier:          aOuLoCTok15K9113rxYxDmQvnwLLQ44cX1fdZ007QXQ=
Subject key identifier:   A8:C7:C5:D2:43:F7:22:E4:31:C4:67:A9:61:68:C4:EA:8D:B7:CD:1C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC921F889097D3D87108F700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/498411bd-b8d1-354f-a6d0-c463cc98ee1e.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     54243
IP address blocks:        2001:470:c6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:1f:88:90:97:d3:d8:71:08:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=879515f6-e658-43e1-a148-102be27455cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:be:e6:18:10:2a:58:a3:5b:be:1e:fc:85:f0:
                    eb:85:84:91:55:a6:ac:79:bd:61:eb:8d:d1:37:d1:
                    34:2d:8a:84:63:c6:03:38:c4:30:37:de:85:80:0c:
                    b4:b1:be:71:44:7a:26:c2:75:5b:38:9e:a5:b8:5b:
                    ab:66:67:14:39:f8:ed:c8:1c:8d:b8:23:ae:dc:47:
                    44:28:a5:b5:ba:24:1d:c1:36:20:d7:fa:c9:69:d0:
                    21:af:c0:13:34:33:ff:a3:ce:37:b6:12:b9:d5:47:
                    91:99:7a:a5:d2:77:72:84:07:3a:44:10:2d:24:65:
                    ee:2a:71:95:f6:72:e7:f2:a3:3c:42:e0:da:75:7e:
                    3a:94:9a:47:1a:45:d3:f8:fb:4e:c0:4e:40:79:db:
                    22:d2:3f:6a:0a:c3:f4:3b:75:b8:5e:ab:b0:63:d4:
                    68:e9:93:cd:4c:23:0b:18:d4:95:b2:84:98:61:5c:
                    41:55:7a:4a:00:42:4f:60:83:9b:d2:60:42:1e:91:
                    c7:37:8a:98:6b:ac:b6:34:e6:6f:a2:ef:77:ac:f2:
                    d6:3b:77:6f:ec:66:a9:ae:a3:0c:28:a7:b7:6d:18:
                    57:e2:32:29:ca:8d:54:87:c7:52:ed:67:5d:ac:79:
                    02:6b:26:57:67:ea:ac:15:5f:27:52:95:05:a3:ab:
                    bb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C7:C5:D2:43:F7:22:E4:31:C4:67:A9:61:68:C4:EA:8D:B7:CD:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/498411bd-b8d1-354f-a6d0-c463cc98ee1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:c6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ad:6e:91:2d:28:cd:e6:d7:2c:d3:dd:b9:13:ff:3a:61:48:
         5b:d5:37:2e:62:81:ba:4e:85:5f:12:2e:d0:c4:fc:b0:5e:39:
         04:82:40:66:d8:1c:62:d4:6e:c8:8d:5a:da:5c:93:b1:a0:37:
         bd:da:72:ac:89:97:4c:d7:5b:d6:3f:8c:51:fc:f9:f9:05:4d:
         c4:40:93:da:8d:0d:fc:8b:2f:ae:d7:1f:27:a8:4b:2f:3c:fc:
         38:1c:c4:37:f0:6a:32:3d:dc:43:06:c4:fd:64:9a:0c:ba:4e:
         15:81:7f:00:9e:42:b6:39:ee:cd:32:b0:f8:c0:6c:10:88:3e:
         d8:0f:68:03:cc:e4:0d:db:29:b4:97:21:60:e2:00:5a:06:a2:
         7e:4d:64:1f:66:13:02:19:0c:20:f9:c2:e2:20:72:92:13:4f:
         94:ba:aa:4f:95:96:5c:88:4d:9e:49:51:71:f0:af:cb:b2:34:
         4f:89:9c:47:d6:c5:8f:d8:af:15:3f:0a:03:90:c7:71:11:20:
         9b:7c:10:4b:bb:aa:5a:c4:07:32:d4:51:fd:09:23:ed:cd:6a:
         90:51:3a:2a:aa:5d:0b:08:9a:96:6d:72:c3:bf:72:51:fd:8c:
         21:56:d5:aa:60:06:90:38:4d:40:75:78:24:dd:e5:c9:78:08:
         af:07:03:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:37:43 2026 by rpki-client