Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7818efff-995d-3b36-a092-c6e640d7ec51.roa
File:                     7818efff-995d-3b36-a092-c6e640d7ec51.roa (raw, json)
Hash identifier:          OKBo8Loj0Mz0kmWiAtFkGczIoWDtyaYsDD58nWBtZv8=
Subject key identifier:   95:62:1D:9D:9D:8D:50:32:4C:1C:08:E8:33:FB:2F:55:3B:08:DA:A6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EFE121731C8BEBBF6D2452B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7818efff-995d-3b36-a092-c6e640d7ec51.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     64107
IP address blocks:        2001:470:473::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:17:31:c8:be:bb:f6:d2:45:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=d8967540-b761-45fc-a095-7f4219ce0430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d9:f3:81:84:47:53:56:f5:fd:60:d5:3e:96:
                    51:86:42:7a:f2:c1:d3:d5:00:6d:1a:5a:04:34:5b:
                    5b:ae:8b:6e:39:31:59:9f:d9:79:c8:f9:57:5e:a3:
                    92:be:25:6e:2a:f7:cd:e2:4b:79:63:7a:e6:7e:a9:
                    90:49:cb:21:f1:0c:a0:cb:80:37:60:d8:9e:25:49:
                    94:80:23:09:9a:50:de:c3:25:3d:ac:10:7e:14:4c:
                    8f:dd:92:d3:bf:cc:b4:cb:7c:79:39:33:db:1a:ae:
                    e4:f0:73:0b:d7:a9:27:67:0d:18:ee:92:cc:65:83:
                    93:73:6c:af:d4:39:b4:d1:d7:3d:d7:5c:0b:65:86:
                    44:46:d8:94:3f:24:d6:1f:21:6a:6b:e3:17:dd:71:
                    23:d4:14:ea:b4:dd:31:f5:00:a8:78:e2:a8:bc:c5:
                    d6:73:1d:c6:1e:9f:97:4f:d5:b0:92:12:bf:d8:99:
                    93:88:17:5e:8b:73:4b:01:7f:7c:b4:2b:9d:3a:1b:
                    12:03:da:71:ef:5d:6f:1d:ff:be:8b:94:28:68:aa:
                    e6:7b:b6:f0:bc:14:01:3e:9d:66:20:61:30:8f:92:
                    3f:e6:ba:8c:68:8c:b4:2d:ce:2b:93:5b:24:ad:13:
                    fe:7d:e8:99:b8:b5:06:17:17:d4:51:e1:41:60:b7:
                    8b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:62:1D:9D:9D:8D:50:32:4C:1C:08:E8:33:FB:2F:55:3B:08:DA:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7818efff-995d-3b36-a092-c6e640d7ec51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:473::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:3b:bc:0c:75:f2:65:86:ae:07:23:4b:16:e5:1f:e0:5e:a4:
         f3:2e:42:ef:bc:74:ad:a3:10:f4:a1:9b:d1:da:2f:d8:44:c4:
         e9:b8:7a:9b:c6:1f:97:6a:96:47:16:4c:d9:52:f8:32:a8:ac:
         13:ef:33:63:2a:22:d5:e7:fb:d8:57:f4:95:98:0a:db:1f:df:
         c9:0b:e9:90:72:63:6e:8d:0e:3e:6b:64:9e:1d:13:0b:06:11:
         d2:59:d5:b2:a1:5b:f0:87:11:98:cc:9e:da:04:c6:4e:59:e9:
         a8:7e:73:6c:16:be:f0:cf:1b:d3:b3:48:7b:bb:26:29:e6:8d:
         f1:ec:1f:8d:76:29:73:9e:31:98:09:8c:c1:04:29:3b:bc:f0:
         63:db:3e:21:48:c0:3a:f3:29:7b:45:98:3c:51:ef:29:1c:7e:
         cb:62:36:e3:16:51:d1:a3:ae:96:50:d2:04:2e:ed:04:ab:6c:
         7b:e6:10:c0:13:73:01:68:19:fc:01:a4:6e:3e:92:7d:83:af:
         db:18:6c:c1:f6:99:16:88:af:18:6b:6f:fa:b1:f6:a7:56:2e:
         af:60:95:c6:fc:ac:2a:6a:49:ae:c2:35:8a:a6:fb:97:69:3f:
         9c:9e:59:f1:80:3c:0c:5a:d4:17:fa:78:6f:11:be:d0:5d:e1:
         14:45:e8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 07:52:35 2026 by rpki-client