Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61590fd2-ce3b-31ed-b7d3-c07d7a2fa68a.roa
File:                     61590fd2-ce3b-31ed-b7d3-c07d7a2fa68a.roa (raw, json)
Hash identifier:          kGIQIbv1M8j4qlwbROjfQQESzvPYccC9nEatg8g+/xg=
Subject key identifier:   43:E9:82:FA:00:60:47:C9:21:92:01:7A:59:77:8C:46:C8:E6:E0:18
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EC0A75676C57A71E66C3BE8F0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61590fd2-ce3b-31ed-b7d3-c07d7a2fa68a.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     58061
IP address blocks:        2001:470:37e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:56:76:c5:7a:71:e6:6c:3b:e8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=79cc6812-ec0d-4c3d-a556-2708ce35e194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:cc:ab:98:3d:0f:e1:bf:53:07:ea:7b:09:68:
                    f8:9e:70:7b:fc:29:8f:44:b3:5a:02:e2:23:5f:5b:
                    1e:2b:29:2b:e9:09:32:9c:d1:d0:00:c1:91:fa:80:
                    3e:e3:25:39:ee:f0:2b:08:f3:1c:f7:0e:e5:3e:66:
                    e4:4a:38:a3:d3:26:f2:9f:cb:98:a1:0b:2d:3a:79:
                    8c:b5:f3:65:45:22:b5:0d:11:2f:f8:db:42:db:b3:
                    68:d9:d2:b1:f5:6b:f6:25:28:3e:04:89:fa:57:9d:
                    5b:60:ee:d3:df:b5:85:6d:9b:53:0a:1a:27:55:9b:
                    6a:fa:37:87:3b:41:8a:d8:fb:0f:ae:12:3c:de:11:
                    de:6d:60:57:00:68:78:f8:2d:49:ef:82:af:39:7c:
                    99:fb:cb:d8:62:43:17:51:38:bd:bf:27:b6:8e:6c:
                    ab:f7:ba:9f:8f:0d:63:e1:43:8e:c5:14:39:8a:b8:
                    8c:ba:59:28:04:99:af:95:a0:3e:ac:0b:a1:e6:81:
                    1e:cd:30:4a:50:c3:ae:7d:f5:e2:f6:5b:4c:69:84:
                    7b:ea:28:15:17:3c:b1:ac:af:4e:28:ed:c7:3f:9a:
                    1e:fb:44:00:be:ce:37:bf:b6:c4:59:6d:ec:c0:db:
                    dc:e9:9f:29:89:a9:6a:00:94:8d:98:3b:d7:86:eb:
                    3a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E9:82:FA:00:60:47:C9:21:92:01:7A:59:77:8C:46:C8:E6:E0:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61590fd2-ce3b-31ed-b7d3-c07d7a2fa68a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:37e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:9d:43:02:0d:d8:29:93:4d:3d:1a:79:14:b5:75:88:91:9f:
         5c:f5:e8:9f:92:32:6f:ed:13:c0:5e:ab:3a:83:cb:1e:33:36:
         ad:32:74:0d:27:8d:e0:99:03:da:91:b6:04:bf:60:26:bb:b7:
         ca:81:fa:9b:c2:9c:57:f2:b0:59:93:fd:e1:62:7f:4e:b8:d1:
         f1:a4:d5:15:3b:71:cd:f9:98:f2:99:cc:d5:0c:7b:bf:3a:22:
         52:79:ab:71:47:85:d8:3e:87:96:c0:12:a2:13:8d:5c:af:71:
         db:18:24:e8:c1:fc:fd:c0:eb:28:a4:1d:29:92:72:f6:36:e8:
         d5:63:52:75:3f:63:a0:d5:ff:22:58:cd:90:7c:51:36:df:90:
         fd:44:72:aa:ff:25:5e:a0:bd:84:69:66:52:c3:77:26:f2:08:
         55:ca:1e:2a:a5:de:3d:93:8e:15:ef:aa:25:e5:02:e9:61:55:
         c3:65:3e:1f:52:af:80:37:7b:ff:45:d4:4e:ad:65:db:ab:e0:
         40:d0:b0:86:08:d3:b6:46:59:8a:12:7d:18:1a:9b:aa:ad:30:
         2e:aa:bb:fc:4d:33:9e:fd:fa:5e:25:fd:f9:99:2f:fc:d3:98:
         48:93:40:bf:15:40:88:dd:44:0b:cc:44:4b:f6:ef:ff:3b:04:
         7b:90:2f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 03:41:09 2026 by rpki-client