Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/59fbc2c6-efae-36fa-92bd-3af546584c6f.roa
File:                     59fbc2c6-efae-36fa-92bd-3af546584c6f.roa (raw, json)
Hash identifier:          zcRjTs1JjWwTO84bjQ3OjTQOK/1+1L25N6Y5bu9gHEQ=
Subject key identifier:   2D:F7:12:A5:D6:BD:39:95:FF:B3:38:C5:9A:C8:BE:1F:0F:DB:95:BF
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EABB6F504939F0B252E115B80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/59fbc2c6-efae-36fa-92bd-3af546584c6f.roa
Signing time:             Thu 30 Jul 2026 13:00:12 +0000
ROA not before:           Thu 30 Jul 2026 13:00:12 +0000
ROA not after:            Wed 28 Oct 2026 13:00:12 +0000
asID:                     26070
IP address blocks:        2001:470:46e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ab:b6:f5:04:93:9f:0b:25:2e:11:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 30 13:00:12 2026 GMT
            Not After : Oct 28 13:00:12 2026 GMT
        Subject: CN=195facaf-822e-4fec-8170-ca3225642e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0a:1b:d6:3b:02:41:79:4b:6f:02:ab:cb:4c:
                    09:19:f3:36:84:8d:75:9e:51:6c:7c:33:d5:30:ff:
                    9d:4a:e4:f9:26:05:6e:b3:fd:06:c0:ae:5e:eb:d5:
                    a9:66:fc:e5:1a:6a:9e:78:59:0c:9f:58:26:80:52:
                    39:2a:b1:37:7a:38:84:d9:72:46:ac:92:5d:20:f7:
                    80:9c:63:0e:04:e4:d1:9b:b9:fc:ea:20:0a:92:db:
                    6d:e4:96:6b:86:23:1c:05:7b:38:53:76:05:70:e8:
                    cd:ac:30:f6:9b:31:04:81:ee:fe:5c:20:65:e5:7c:
                    e5:2d:14:83:82:34:ff:21:11:1d:6b:78:b7:ca:e3:
                    80:00:d8:06:ca:08:be:a5:07:ef:b7:bb:d9:68:b2:
                    69:df:6f:e6:9f:a9:4f:b4:7b:51:0d:af:db:ef:45:
                    32:ab:4a:e5:a3:24:13:a7:5a:3c:15:a0:ea:18:58:
                    63:84:d1:c2:6d:0c:d2:f4:94:d8:5c:99:52:7a:93:
                    66:05:84:27:4b:7f:5d:a9:32:80:a7:9c:7c:15:97:
                    0b:74:84:20:c7:1f:31:2f:3b:c2:8f:0d:03:bf:55:
                    5b:26:57:89:33:58:2b:f6:f4:23:6a:da:6f:bc:14:
                    0f:70:bd:d4:6d:dd:95:e3:30:39:19:07:87:45:d3:
                    5f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F7:12:A5:D6:BD:39:95:FF:B3:38:C5:9A:C8:BE:1F:0F:DB:95:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/59fbc2c6-efae-36fa-92bd-3af546584c6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:46e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:c8:43:3f:7d:8d:27:4d:b6:60:52:11:60:c1:30:5c:16:70:
         4a:9e:5e:2b:e4:27:22:f9:0c:bc:04:78:d4:da:6e:19:a1:e5:
         33:01:b1:2d:05:56:d5:3b:69:5a:11:d6:14:3a:c1:9b:03:f2:
         a5:95:84:d9:be:3d:d4:26:44:04:1d:be:c3:7b:eb:ef:45:a5:
         5d:aa:d3:21:f9:5e:2c:fc:72:58:db:81:80:d2:97:4d:ce:82:
         4a:4e:37:ee:8f:63:b1:c7:a8:1e:6b:6d:7b:2c:37:05:b3:62:
         82:dd:76:a7:df:c6:35:88:18:aa:ee:9e:b0:42:e9:bd:70:fb:
         30:12:aa:81:c2:f4:0f:96:c1:51:88:4b:ee:58:89:d4:ca:4a:
         6f:b7:af:5b:d7:9a:99:f7:c5:b9:a9:07:ff:82:25:ca:45:6f:
         6b:e4:a8:4f:fe:17:a4:e4:e3:c7:6c:37:11:4c:ba:19:ca:36:
         17:27:54:e2:c0:21:1f:52:f3:8c:18:ac:95:bd:4c:91:08:6b:
         60:43:21:90:49:93:16:40:8b:87:51:16:b3:01:c5:03:89:65:
         3d:30:8d:87:5a:bc:d8:76:67:fa:d9:7a:da:fe:bf:8f:b8:6c:
         6e:4e:79:7b:c6:67:7d:07:92:a2:2e:75:59:36:35:f5:fa:fc:
         48:3d:90:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:46:33 2026 by rpki-client