Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4f372e25-8792-3d0a-b8ec-3ab357272dd5.roa
File:                     4f372e25-8792-3d0a-b8ec-3ab357272dd5.roa (raw, json)
Hash identifier:          qTXPrkezmJ7bvyUmUs1ydtr32ewJQgb5OZ/oYCXsye8=
Subject key identifier:   AA:D5:40:0F:94:9B:57:0E:A5:20:EB:08:02:65:37:45:20:1F:A3:E3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EA788ADB41538823745D1D780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4f372e25-8792-3d0a-b8ec-3ab357272dd5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14713
IP address blocks:        2001:470:3bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:ad:b4:15:38:82:37:45:d1:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=39e5556a-d6c3-490e-81ef-e14d2b55845c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f5:79:30:6d:c0:f7:b3:c4:1c:d6:88:c2:1f:
                    dc:98:26:e8:71:66:78:b0:9b:a1:ba:d8:fb:48:9e:
                    ed:a8:fe:91:a3:48:20:24:3e:b0:97:61:c5:85:e0:
                    c4:80:9c:d8:3d:d1:a3:67:26:6f:c6:6d:36:81:3d:
                    3c:26:15:3e:0d:3e:45:45:80:14:76:de:43:b7:cb:
                    b9:a5:0a:a3:d0:35:b7:b2:f8:60:d6:db:c4:6b:93:
                    3f:06:f1:4a:9b:73:b9:3d:75:86:81:37:1b:1c:2f:
                    2f:bb:00:01:71:2e:f2:aa:03:7a:48:18:1f:50:be:
                    c5:28:70:f0:cc:77:43:1f:b9:57:4b:3b:bc:de:c8:
                    7c:2b:d2:56:17:4f:ef:f3:6b:19:3f:ba:c8:dd:44:
                    e9:5b:a1:9f:9c:ef:a4:c8:fd:75:1b:db:09:94:4d:
                    8d:2a:bc:55:e5:7a:5d:c2:af:03:66:aa:d0:92:7f:
                    e5:d2:9e:dc:b7:ef:04:df:3e:3f:b3:c3:c3:35:eb:
                    23:cc:05:ad:9a:dc:db:1c:09:87:5a:a0:27:5d:0c:
                    fc:9d:78:1e:2d:df:5a:2d:e9:e2:d7:4a:2a:cc:d1:
                    d2:42:4e:59:78:d6:f9:71:30:0f:ac:f6:ce:d0:46:
                    47:da:5e:62:e9:ac:58:6d:b6:24:aa:78:03:80:5c:
                    37:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D5:40:0F:94:9B:57:0E:A5:20:EB:08:02:65:37:45:20:1F:A3:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4f372e25-8792-3d0a-b8ec-3ab357272dd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:00:81:cf:0c:27:4d:d9:23:24:fe:13:e0:74:92:6c:65:38:
         95:3c:a7:c8:8c:d2:de:3e:e2:68:27:53:e8:92:64:6d:b9:55:
         f9:34:f5:f9:27:0a:06:fb:0b:86:63:88:e4:62:fa:d0:24:4f:
         1d:59:03:36:71:82:71:d8:29:d3:d4:13:a6:c0:f3:c0:eb:60:
         74:9a:0b:2c:59:c7:c9:7a:f7:ef:d7:ad:5b:37:43:c8:7b:d3:
         8a:a1:75:da:db:fb:9a:32:a0:31:41:c5:a3:a0:ff:e5:e8:ed:
         91:ba:91:05:c1:1e:5c:68:10:93:f0:49:4c:af:bd:72:c7:af:
         7d:db:da:3a:33:46:51:8b:39:51:27:e3:d6:bf:70:3d:90:b4:
         d9:3b:28:7c:66:77:6d:12:51:90:cd:67:8a:1e:33:9f:42:20:
         27:81:1f:6f:af:89:85:95:d1:3d:69:11:af:55:f4:af:21:61:
         82:e1:7d:a0:55:30:10:cd:33:d7:fd:61:cb:fe:29:11:08:c9:
         da:4c:b2:e4:16:2f:e6:14:06:8b:72:99:99:9a:23:32:01:95:
         3c:9b:ad:cc:99:62:8c:dc:91:82:52:ef:3f:28:40:22:65:c5:
         df:5e:8e:b4:ec:7d:d1:86:82:8a:0c:72:bb:78:01:bb:62:11:
         d5:e1:7f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 1 01:50:42 2026 by rpki-client