Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7169f07d-51d5-3e0f-ae34-a23eadac86c4.roa
File:                     7169f07d-51d5-3e0f-ae34-a23eadac86c4.roa (raw, json)
Hash identifier:          8Zumg8PkAg5uPtQ2GzghviPZEMpJ1WF/jftuWj48+S8=
Subject key identifier:   E1:F0:0F:8B:09:2F:AB:C2:A8:D3:19:CF:D8:3E:92:63:5D:29:78:79
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDF5C8CAB0AAD60E1854FB0A8
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7169f07d-51d5-3e0f-ae34-a23eadac86c4.roa
Signing time:             Tue 18 Aug 2026 01:00:12 +0000
ROA not before:           Tue 18 Aug 2026 01:00:12 +0000
ROA not after:            Mon 16 Nov 2026 02:00:12 +0000
asID:                     49984
IP address blocks:        2001:470:44c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:df:5c:8c:ab:0a:ad:60:e1:85:4f:b0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 18 01:00:12 2026 GMT
            Not After : Nov 16 02:00:12 2026 GMT
        Subject: CN=fcf80926-36e1-44fe-a35a-36e3e346e928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3d:60:ec:fa:0c:46:1e:fc:9d:44:9f:6c:41:
                    16:f8:f9:0d:f1:44:43:b1:f9:88:fb:8a:b4:37:31:
                    d6:e1:4e:34:45:a6:f9:1b:8c:be:aa:b4:84:85:4e:
                    84:3a:f4:7d:e5:18:e3:4c:1c:ee:a9:21:fd:ee:2a:
                    31:c2:97:fc:7a:51:11:3b:4a:6c:dc:6b:b7:1e:74:
                    91:fc:60:98:a3:6e:1e:11:31:5b:7b:7c:79:50:f1:
                    e4:51:93:f5:bb:ba:63:64:cb:0b:0d:12:60:6a:87:
                    4b:ad:02:35:c5:88:56:e8:e7:69:9a:37:d1:68:d2:
                    7d:01:af:0a:01:9f:d0:1e:1b:a8:18:08:3e:aa:5f:
                    ed:14:7f:a0:c0:ce:14:2b:73:28:90:68:18:37:04:
                    c6:4d:7b:10:4b:44:42:00:ea:d2:06:26:5d:a1:5f:
                    a3:d8:25:6f:56:c0:4f:dd:67:61:35:a3:0d:1e:1b:
                    2e:70:60:2b:6d:af:28:09:6c:52:03:db:a1:dd:7d:
                    84:ae:19:ef:82:11:59:bb:d7:d4:5d:98:69:33:2d:
                    e5:82:f3:9a:3b:e8:f1:31:1f:4f:cd:3f:65:30:11:
                    80:41:f3:7d:76:ec:3c:61:97:4d:b8:3c:30:31:8b:
                    c0:6d:c4:98:8f:c5:e1:32:d5:d6:fa:47:c2:a3:8f:
                    03:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F0:0F:8B:09:2F:AB:C2:A8:D3:19:CF:D8:3E:92:63:5D:29:78:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7169f07d-51d5-3e0f-ae34-a23eadac86c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:44c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:90:49:71:02:28:ae:9d:8b:78:a1:41:7c:94:cf:0f:08:88:
         f7:a4:6e:bf:55:d0:92:80:02:a3:c8:41:ee:ef:6a:8b:e1:a7:
         1c:d0:72:d9:5d:31:71:52:b0:18:fa:9b:de:d1:e5:98:c1:97:
         24:d4:28:77:65:46:75:84:75:78:e0:e6:b0:db:bd:b7:b1:2c:
         7e:0c:31:ed:f8:59:7c:88:84:35:6a:15:77:0f:ad:a8:e3:ef:
         f5:6a:d3:70:dd:32:a5:01:29:ea:58:1f:d2:94:3a:fc:cb:aa:
         a7:f3:e6:09:11:0b:3b:99:95:fe:c3:49:f9:b4:61:48:f1:09:
         f7:3a:53:50:ae:15:7b:52:da:53:14:35:ce:f9:70:59:45:82:
         b7:2c:31:98:ee:df:fc:26:9f:d3:b0:ea:c3:f7:09:16:59:8a:
         3b:11:f2:de:01:15:dc:8e:a1:9f:47:a6:dc:e0:56:52:b0:08:
         d6:cd:d4:01:58:11:a8:b6:02:98:57:dc:d0:4d:71:e3:bc:11:
         9b:5f:ad:6f:48:95:d3:b9:84:8b:3a:49:96:36:11:1f:44:43:
         df:86:c7:a3:bb:16:44:a9:59:14:c4:86:5d:e8:11:ad:fb:fd:
         be:5a:b9:76:53:36:c6:48:9a:2b:2c:3b:a7:ba:cd:1b:5c:4a:
         21:15:00:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:48:40 2026 by rpki-client