Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/539d8fb8-7def-3a33-8209-7937a9a22bae.roa
File:                     539d8fb8-7def-3a33-8209-7937a9a22bae.roa (raw, json)
Hash identifier:          3LD/s80OFdHi31X3rWQdb9QZLRV55Kbv/TFwb5FRUR0=
Subject key identifier:   59:93:B6:2F:D7:C6:B3:7F:05:55:C7:CF:DD:75:6D:28:19:94:91:E4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC922507D641886AC46EFCC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/539d8fb8-7def-3a33-8209-7937a9a22bae.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     62206
IP address blocks:        2001:470:23d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:25:07:d6:41:88:6a:c4:6e:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=f55859bf-a2c4-4ea6-97a0-7d9939740dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:60:d8:dc:e0:80:e0:26:41:83:30:e0:81:d8:
                    ed:de:70:54:ea:ad:5a:48:e9:e6:84:9d:46:18:e2:
                    13:22:22:4f:a0:ab:96:21:7f:3b:a5:68:5e:43:62:
                    0e:2a:38:53:4b:ba:1a:a1:8e:78:d8:8c:41:19:87:
                    42:67:9b:0c:1c:43:31:c0:da:6e:63:e9:c5:85:6a:
                    9f:b7:8a:da:e4:b6:13:80:9f:dd:d6:fa:8b:e7:58:
                    01:f5:b2:8b:c8:46:e9:ec:ae:51:1f:d2:a9:32:16:
                    44:67:5f:36:d2:d9:51:b5:61:51:35:54:77:d5:2d:
                    50:90:15:d2:58:1b:d3:8a:f2:08:80:b4:55:fb:a6:
                    dc:0f:f4:26:1e:9e:23:e1:a1:05:d0:a0:1e:c4:61:
                    ed:bc:c8:e7:ad:a6:9d:06:75:b8:bb:db:fb:2c:2e:
                    ff:57:65:78:af:61:f2:fd:9d:7d:d2:df:57:30:87:
                    ca:c8:c0:90:05:94:12:5d:4e:f0:b8:10:7a:ac:26:
                    45:c1:59:43:66:0d:57:1c:8e:36:e4:30:dd:b4:b2:
                    5a:83:24:49:d5:4b:e5:a3:c3:b5:81:0a:90:91:67:
                    20:e3:e0:58:f8:0e:6b:0f:9e:df:e9:97:5f:b9:c3:
                    73:b1:04:10:89:83:4b:5e:30:be:34:60:98:04:8c:
                    fd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:93:B6:2F:D7:C6:B3:7F:05:55:C7:CF:DD:75:6D:28:19:94:91:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/539d8fb8-7def-3a33-8209-7937a9a22bae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:40:72:f2:ba:8c:aa:d6:1f:2e:38:86:b1:51:20:7b:c8:70:
         29:13:51:0c:da:00:75:d4:63:c1:da:de:de:a1:77:89:0c:b6:
         f2:1c:c3:24:ff:49:61:c9:4d:fe:70:16:fa:7e:ce:d5:58:81:
         95:fd:53:a0:36:7b:35:fa:4a:e7:38:41:4b:c8:d5:8c:2f:1e:
         b2:dd:ce:5a:91:5f:fa:38:5c:82:e1:16:a9:67:e1:f6:61:d2:
         de:13:de:26:a7:34:d7:ce:e9:2e:b5:58:ab:7b:87:40:c4:8b:
         6a:0a:54:fd:98:2e:d4:d5:62:72:3a:5b:6d:b1:fc:58:f5:0e:
         62:49:94:2f:19:ba:e0:57:6a:29:01:ef:a0:c6:6f:6d:d7:19:
         a3:58:51:f3:ad:ac:eb:55:04:e9:32:3d:24:11:47:dd:1b:5a:
         a4:cb:f9:ac:bc:56:a3:4a:bf:f3:d8:1c:68:2d:4d:49:37:90:
         f9:9c:b7:a1:20:57:29:b6:dd:53:ba:5a:37:c7:fc:d9:c3:0f:
         dc:77:64:03:69:f9:b9:5a:65:b7:46:7c:b8:d6:4e:c1:16:83:
         79:96:58:62:3b:65:98:c5:c3:93:df:06:98:58:a8:43:e0:7b:
         d7:ca:f9:00:42:9d:6f:58:f7:e7:b4:e7:e1:98:24:a6:7a:64:
         1e:60:24:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:19:41 2026 by rpki-client