Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5139b17c-60f3-30dc-b04e-9e056ee507d1.roa
File:                     5139b17c-60f3-30dc-b04e-9e056ee507d1.roa (raw, json)
Hash identifier:          GD1YAMZTW2V3Aa3aAGrk7Bg6O3KNT284n/THF2a9CGE=
Subject key identifier:   02:EB:1B:87:CA:07:9D:98:ED:11:71:2D:BC:BD:D7:89:F2:31:DA:1A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC9221DA22D8BF1C9B0E7140
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5139b17c-60f3-30dc-b04e-9e056ee507d1.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     395517
IP address blocks:        2001:470:164::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:21:da:22:d8:bf:1c:9b:0e:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=d0014298-3c23-4edc-9f20-50a925146b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b2:6e:78:ce:f7:30:69:72:da:ed:4e:64:34:
                    c3:4f:d6:b2:3f:01:33:90:c6:b7:c6:6d:1b:e6:8c:
                    55:7b:04:2a:2a:53:63:c6:7c:2c:65:90:73:cb:7d:
                    c9:cb:e0:26:51:e5:45:00:a5:99:a8:35:31:2a:36:
                    be:78:b7:17:0b:21:38:a3:31:16:67:55:93:d6:a4:
                    a6:be:33:7b:94:ec:4d:4d:00:7a:fa:f2:7a:f4:ae:
                    01:b8:d3:ef:0f:43:6a:91:88:e9:2d:32:e1:4f:3d:
                    93:0a:3b:e1:17:ce:27:83:a1:00:34:1b:4e:44:11:
                    66:78:52:e2:f4:27:8a:3c:15:af:af:7b:49:6d:a3:
                    ba:2a:e5:f5:1e:84:aa:9c:17:f3:42:5e:69:8f:25:
                    77:ac:12:23:1a:86:94:22:80:7e:1d:b8:1e:cb:97:
                    62:53:3e:57:dd:eb:59:b2:18:e6:3e:19:c0:cc:50:
                    f6:d2:af:27:35:ba:e8:21:c3:b9:96:95:1c:02:89:
                    46:03:b6:10:36:55:08:93:f4:8f:b4:fd:15:4e:52:
                    31:31:4a:ce:4f:10:99:7e:8f:2b:5a:94:91:36:63:
                    83:71:3e:f6:c8:e9:a4:df:52:a9:39:a1:39:f8:14:
                    28:1f:65:63:47:06:b7:c6:a3:fe:c6:5d:30:d8:8e:
                    b0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EB:1B:87:CA:07:9D:98:ED:11:71:2D:BC:BD:D7:89:F2:31:DA:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5139b17c-60f3-30dc-b04e-9e056ee507d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:164::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ec:61:51:b9:52:67:ff:0d:f4:14:6d:81:b8:e4:8e:1a:7e:
         a1:20:81:54:57:b9:7c:fe:a1:10:75:5c:e9:c9:15:6c:c4:e4:
         59:bc:ee:03:ea:5e:f7:c7:f6:9e:c8:dd:8f:a6:e2:3a:68:e3:
         98:b3:bc:08:43:38:d1:49:1e:b4:27:ef:a4:6c:9c:2b:f8:3c:
         fd:15:3b:c9:71:2a:bf:cc:2c:be:a7:60:d4:f1:a3:2d:36:2a:
         71:4f:b3:4b:cf:7b:c9:1c:5d:ed:66:be:a1:35:c2:41:c9:d4:
         95:c4:7d:9e:a2:63:35:89:3c:b2:26:61:d0:f3:ec:38:f5:f1:
         cf:91:4e:62:c7:0d:e2:dc:9c:bb:a1:22:e7:3b:8b:c8:c2:98:
         d5:cd:2c:0d:68:aa:88:31:dc:52:0d:6e:9f:16:93:02:bc:62:
         b1:97:40:46:88:f8:f2:9e:bc:2b:bf:49:9c:0d:e0:18:3a:d1:
         8c:cb:12:b2:24:f4:89:60:33:cc:be:52:61:cb:ac:e7:24:c1:
         9e:94:8a:0c:bd:2f:f8:42:f0:27:23:37:22:ee:d2:51:ed:d1:
         c6:bd:5e:9f:d4:c4:fa:2a:56:40:32:46:a3:ca:f4:72:21:3f:
         51:e6:d4:07:65:4f:38:74:d1:ad:51:88:85:70:92:9b:04:42:
         9c:67:fa:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 07:51:57 2026 by rpki-client