Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/719b4d27-de77-3261-8c3e-9fd298419c22.roa
File:                     719b4d27-de77-3261-8c3e-9fd298419c22.roa (raw, json)
Hash identifier:          TAS85IFUTUCf2mW9s8LJLuDP73Skocw67WKeqmwGm+0=
Subject key identifier:   FE:92:A7:8B:2A:72:FE:66:3A:4B:19:86:8E:86:0F:04:5C:66:D6:50
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC921BADE75B3115CF35DC80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/719b4d27-de77-3261-8c3e-9fd298419c22.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     53597
IP address blocks:        2001:470:85::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:1b:ad:e7:5b:31:15:cf:35:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=a9c7d24c-dfd8-4497-b3bf-1d8ce0b44e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:53:eb:01:61:7e:bf:3c:78:3b:ae:e4:e0:b5:
                    bb:6b:f1:4d:eb:93:5b:2a:8c:3f:80:5b:a9:77:75:
                    47:c0:49:00:11:fb:51:41:79:5d:d5:fd:cf:ee:d5:
                    5e:d1:75:2b:64:cd:dd:74:11:a6:7f:8a:3e:c7:70:
                    54:60:52:dd:a0:34:32:ad:c0:9d:1f:7d:0c:87:3f:
                    ae:fc:93:e1:c1:95:31:bf:ba:62:34:91:2f:33:1c:
                    7d:09:f9:33:9f:47:af:6c:0d:c7:d0:24:07:b5:df:
                    e5:7f:29:1b:2c:68:37:30:95:c9:86:5d:32:7c:45:
                    62:4c:60:57:6a:ab:d7:52:43:80:c0:b8:05:5a:4b:
                    95:99:32:11:1f:d7:53:30:0e:88:a1:5b:48:1e:41:
                    bf:aa:4a:6d:48:97:64:ab:ba:16:ad:67:dd:3c:d8:
                    87:e6:3d:ef:27:38:d4:ac:ea:c8:0c:f0:aa:02:ea:
                    58:12:77:67:99:92:77:c1:e1:36:03:64:66:74:a1:
                    f0:bd:09:b8:72:31:0a:3e:b5:bf:fb:c0:e8:75:98:
                    00:e5:c4:fe:9f:4d:55:54:44:86:59:3f:ee:b1:e1:
                    3d:4f:32:6d:61:43:88:15:1b:c3:97:81:da:d1:21:
                    a7:33:e7:ea:e5:65:fd:b3:b6:61:01:ac:82:11:37:
                    3b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:92:A7:8B:2A:72:FE:66:3A:4B:19:86:8E:86:0F:04:5C:66:D6:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/719b4d27-de77-3261-8c3e-9fd298419c22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:85::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:56:6f:5e:69:1b:e6:65:c8:07:6b:d5:8e:4e:9d:13:a2:83:
         76:f6:d2:1b:16:23:20:e5:0e:32:08:db:2a:5a:f6:02:62:de:
         a4:a6:66:0b:18:00:e4:3c:57:e4:6f:e1:3f:f6:93:88:a4:bb:
         02:e3:f8:6a:f4:a0:9b:be:ce:9a:57:85:c9:c7:5d:46:a7:db:
         fd:9a:ff:9e:3d:aa:71:81:80:16:8d:53:7a:2f:cd:76:ba:4c:
         26:ee:4b:34:a1:92:55:03:2a:62:1c:4a:9f:42:9c:34:7e:cb:
         b2:d7:81:74:8d:54:5e:7e:cc:89:3c:2b:e9:44:38:f5:03:6a:
         39:10:f8:2c:0d:af:44:25:78:e6:58:1f:dd:84:dd:ec:52:10:
         23:67:a6:4e:bc:7e:bd:d4:67:a1:da:ae:23:49:de:a8:d3:3e:
         54:07:5d:56:83:72:57:da:f7:49:9b:e0:0f:ea:e5:06:d9:17:
         b3:6b:46:89:37:0b:0b:76:98:7b:da:d7:0a:45:ea:64:06:e7:
         b4:9a:ab:d1:b7:ba:0d:16:07:41:67:88:2b:65:01:50:ac:9f:
         2a:11:fa:4b:49:34:4c:31:d8:65:74:e3:78:ef:29:db:f9:a1:
         89:a9:e0:ba:1d:bb:0a:42:bb:1d:ad:b5:d6:11:5c:e9:2b:d5:
         bd:fe:d7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 04:22:48 2026 by rpki-client