Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f2a078c-c1cb-31bc-befc-fe0d707c0bd8.roa
File:                     5f2a078c-c1cb-31bc-befc-fe0d707c0bd8.roa (raw, json)
Hash identifier:          J+jgeJ5d7VZ/apzW+BDTnLGh8InrvCxN/qFz0Curyjw=
Subject key identifier:   1D:48:F5:14:D1:4E:55:06:4A:62:E5:AE:5D:D5:72:8A:68:72:C7:51
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC922AAD9C071D0EE4C6A780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f2a078c-c1cb-31bc-befc-fe0d707c0bd8.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     25820
IP address blocks:        2001:470:2f5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:2a:ad:9c:07:1d:0e:e4:c6:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=2eb878f4-4b3b-48e1-8e85-921773c9c44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8e:be:1e:33:6b:90:6f:cd:21:80:9d:69:18:
                    26:13:cb:d4:a2:d7:52:ef:51:56:8d:11:30:6e:82:
                    47:0d:d0:c6:b8:fa:f5:ae:23:23:ed:7f:4b:70:25:
                    4e:2d:08:87:f6:ae:6d:42:bb:4d:6a:b5:ce:f4:1f:
                    88:fe:63:38:51:6e:8e:38:53:60:88:1d:90:e8:26:
                    17:98:f0:8c:9c:e2:96:65:24:4c:97:ad:52:7f:8b:
                    7a:c6:25:30:30:d2:6e:98:dd:6b:2b:7a:5f:b8:3d:
                    69:11:85:2f:c0:d6:a1:29:e7:3f:0e:19:b3:b7:01:
                    0f:d9:a2:a0:33:2b:cd:1f:c9:af:a3:63:c5:71:a6:
                    a1:92:d8:ae:7f:01:10:b7:05:88:91:2e:20:99:f9:
                    18:fb:3f:36:6a:fc:29:10:0a:fb:a4:64:73:d4:30:
                    f6:64:73:36:ac:08:da:6c:e8:94:36:a5:3b:02:88:
                    1f:ea:65:4b:0c:55:77:b0:45:f6:75:e7:b2:31:b0:
                    72:2a:df:1f:e8:09:f3:3f:19:73:48:7b:fb:73:be:
                    53:6a:95:98:69:27:0d:f9:4c:ec:ce:d3:4a:c2:22:
                    6b:c2:52:f8:90:cb:5f:f1:49:dd:6e:10:df:29:62:
                    78:bb:c0:04:ba:a0:35:6b:b2:47:f2:57:95:cb:6e:
                    4a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:48:F5:14:D1:4E:55:06:4A:62:E5:AE:5D:D5:72:8A:68:72:C7:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f2a078c-c1cb-31bc-befc-fe0d707c0bd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2f5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ce:28:47:a1:f1:f2:e4:1c:60:77:78:fb:8d:12:e5:f6:b5:
         6d:0a:3a:77:6f:06:17:49:fb:55:5d:9f:9d:b3:8d:a8:0d:4e:
         fa:0e:d9:ac:1b:d7:63:ce:2f:91:32:8e:5d:8d:0d:35:3f:15:
         85:6c:12:ae:39:26:a2:b7:ab:1b:f1:f7:bb:a8:78:5b:3a:82:
         f9:f3:f8:09:d7:0c:32:98:fb:f2:a5:ed:55:6d:ea:b6:20:96:
         6f:f7:a3:2f:76:9c:91:a1:72:78:a4:c7:e3:ca:8b:d7:ea:7a:
         d2:3d:a9:42:87:11:a4:1d:e2:22:53:df:ad:f4:e2:69:eb:81:
         5b:90:92:04:9f:af:de:6c:97:81:80:62:71:f6:70:3e:fb:a7:
         6c:a6:5a:b4:8b:5b:6c:35:e7:36:ee:f2:9e:be:a0:7d:c7:8c:
         b6:8e:d5:01:af:a2:23:27:95:44:ae:68:44:ff:49:88:5b:ac:
         86:90:9d:f0:8c:12:f2:1c:77:51:00:fd:13:66:f7:dc:b4:5f:
         54:a1:5a:2a:cb:c1:8a:1f:fb:5c:61:72:34:69:4d:60:26:95:
         6e:26:9c:e3:9c:2d:b6:71:60:bc:95:6e:96:5e:30:c5:c6:27:
         57:b3:a3:e3:45:21:b0:88:8b:ae:63:46:ce:5e:da:f7:b3:e1:
         39:03:3e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 04:35:04 2026 by rpki-client