Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66857b86-bc5d-3cf0-bf93-6f2a73e83550.roa
File:                     66857b86-bc5d-3cf0-bf93-6f2a73e83550.roa (raw, json)
Hash identifier:          KhNyeDnC2YhS7u4ojnYhYms2yqlNujE+b0SjCcWUUsA=
Subject key identifier:   53:FD:6F:98:4D:90:C0:BE:D4:99:BB:73:C6:64:8A:79:6C:85:81:25
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EA7945841309B5C86DA6DA2A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66857b86-bc5d-3cf0-bf93-6f2a73e83550.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     44901
IP address blocks:        2001:470:28f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:58:41:30:9b:5c:86:da:6d:a2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8196c551-9d73-47dd-91eb-1193b00a8af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:15:ac:44:24:8b:a7:a6:ee:eb:f7:56:ad:74:
                    d8:c0:90:e2:ee:6d:a8:4d:f0:37:c6:4a:87:e6:6f:
                    e8:30:53:ea:8d:2c:b6:18:4b:5b:30:de:c1:8c:36:
                    f5:25:3a:42:c8:d8:21:76:8e:d2:91:6f:f8:96:53:
                    f1:3b:47:1a:be:78:a9:1d:8b:b8:44:d9:1e:b0:f1:
                    01:32:6a:0a:9d:a6:02:45:d3:9b:4f:60:fe:e0:86:
                    ea:d6:5e:c5:f3:f0:9a:06:4a:36:8b:64:7b:ee:bf:
                    55:8e:a6:67:af:7e:47:6e:22:d7:8f:5b:80:2d:f1:
                    38:c3:9f:47:c0:a5:66:2f:c8:c7:81:2a:ea:2a:a5:
                    fd:7a:c9:da:00:65:00:d5:77:44:7e:bb:60:f6:44:
                    23:56:76:31:bb:3d:bb:d6:fe:c5:ed:1c:b1:97:0a:
                    36:fe:7d:8c:92:b8:f1:f1:77:00:ad:f9:f4:ba:2d:
                    64:ba:01:31:ca:23:55:2d:7a:6c:62:82:b0:df:88:
                    6e:40:1e:3c:fd:31:52:d6:a4:3e:07:85:e1:74:b7:
                    fe:50:d8:40:f8:a1:7e:3b:fb:db:b5:89:e5:52:c4:
                    69:f0:85:a4:f3:02:34:c8:7b:64:22:9d:9f:61:58:
                    22:e3:36:f7:bf:83:d4:59:ce:ea:a3:e7:54:01:20:
                    f9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FD:6F:98:4D:90:C0:BE:D4:99:BB:73:C6:64:8A:79:6C:85:81:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66857b86-bc5d-3cf0-bf93-6f2a73e83550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:28f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:2a:c4:33:a8:bf:94:f4:e7:4d:75:b9:07:41:95:dd:a4:2e:
         71:8b:51:ef:9b:1d:39:83:42:f2:5f:ca:95:5f:d8:63:40:bd:
         c2:a1:a8:aa:13:a5:bf:e3:99:1a:1d:c6:9c:a0:99:e4:ac:7d:
         1c:b3:5d:43:32:84:f2:2d:71:dd:00:2e:59:dd:fc:85:02:02:
         d2:73:b4:f4:ae:ce:12:fa:6d:c9:28:96:12:19:bc:59:68:b1:
         a0:96:2c:7b:96:29:40:da:b1:7a:c6:b1:fb:38:5a:41:2d:03:
         88:75:32:7c:75:da:50:97:38:87:b1:f1:52:71:ec:7e:67:09:
         cc:52:38:16:3f:4b:a1:40:2c:1d:fd:4f:ca:c7:0d:8f:b8:29:
         03:8a:f4:55:65:4c:16:79:21:83:9d:98:07:a3:d6:60:17:1b:
         ea:e2:d2:bd:3d:fb:4c:36:f8:22:8f:f2:9b:aa:b1:65:ba:27:
         01:5d:76:52:54:cf:91:9a:ba:e0:f6:70:54:57:f5:4e:72:89:
         f2:b4:86:76:4b:f1:49:cb:bc:7c:22:88:a6:a8:67:48:c9:7b:
         2f:50:58:17:81:24:cd:4c:7a:0d:86:74:20:ae:eb:9e:10:50:
         12:e9:f9:57:5e:c0:bd:79:54:ca:b1:46:6f:3a:07:06:98:b5:
         b7:45:da:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 02:12:32 2026 by rpki-client