Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9279784a-e287-3e5a-a06c-8b203dc09481.roa
File:                     9279784a-e287-3e5a-a06c-8b203dc09481.roa (raw, json)
Hash identifier:          jbny0Ox8zRgSBu0iG1G2M9mLwwWDEgBaOqbUVUFnw7s=
Subject key identifier:   0C:A8:6D:02:15:19:2D:08:0B:2E:82:D1:F1:6F:55:75:A2:1A:5E:91
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F0ED242C9CC702E411C168000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9279784a-e287-3e5a-a06c-8b203dc09481.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     25619
IP address blocks:        2001:470:31::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:42:c9:cc:70:2e:41:1c:16:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=c5c1ce5a-cdcd-414e-9eb9-51500a153205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:af:11:16:38:cf:ac:7a:9f:95:15:d2:e0:d3:
                    73:71:52:9d:92:39:2f:22:04:0a:00:ec:fe:3c:8c:
                    2b:6b:dc:37:77:bd:06:c4:5e:f2:49:6e:43:5e:1f:
                    1e:57:20:2a:ec:f7:e4:ae:87:dd:11:c9:10:42:ec:
                    d1:da:f7:f3:45:91:91:ab:e1:31:91:1b:9b:61:b6:
                    40:4f:55:b9:fa:8b:3d:ae:e3:3d:62:17:fd:43:dd:
                    8b:0f:19:1f:34:c7:e5:35:de:d0:1a:df:65:50:19:
                    17:72:e6:6c:a3:15:b6:fe:92:fd:11:1b:4a:d9:10:
                    52:6f:76:e1:5a:42:7f:ec:02:40:49:29:fb:04:45:
                    12:73:95:c0:ca:b8:32:d4:fe:5c:41:40:b1:8c:96:
                    89:85:69:f9:9a:37:07:5e:41:89:c7:17:d1:50:79:
                    70:dc:36:39:f4:60:ab:1f:ef:41:6b:7d:22:a9:b2:
                    20:8a:3c:0c:0b:16:6e:4d:5d:42:ec:93:61:36:0b:
                    56:00:18:03:04:1a:11:dd:5a:d2:8a:be:a3:53:e3:
                    4d:16:40:7f:1d:b8:24:77:93:58:b0:08:05:f4:9d:
                    dd:26:af:08:1f:09:6c:81:70:ca:1e:0c:84:fb:14:
                    f7:93:ad:09:05:eb:64:c4:23:57:2e:d7:65:6a:6d:
                    90:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A8:6D:02:15:19:2D:08:0B:2E:82:D1:F1:6F:55:75:A2:1A:5E:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9279784a-e287-3e5a-a06c-8b203dc09481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:31::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:e9:d8:22:ad:3b:19:75:be:f0:a4:0b:40:08:f5:f9:f2:4b:
         b1:af:7c:90:4a:be:53:45:62:d0:b9:9c:7b:f1:19:d4:ab:a6:
         59:fb:68:ba:c0:53:b3:a2:f0:4c:af:07:0d:55:d0:99:7e:72:
         31:df:13:f2:86:55:cc:07:1d:03:e8:4f:0e:ab:e9:01:18:6a:
         d9:c5:25:eb:8b:eb:55:91:0e:e5:a5:e7:b6:68:09:ab:f9:5f:
         10:3d:dc:8c:37:8e:ca:95:12:b5:d5:8d:77:7e:e5:2d:8f:e3:
         db:1b:e1:9e:03:1a:15:41:67:d4:fe:6e:6a:fe:ef:e3:78:ed:
         97:fb:bc:5d:92:10:d2:5d:73:ed:65:c2:92:13:9b:a9:1f:cd:
         c7:c5:62:d2:bf:73:93:26:ee:52:80:84:d8:fa:18:0c:ac:bc:
         bc:0b:04:bd:1e:31:8b:10:13:c2:01:89:bb:6c:69:70:18:d0:
         89:e8:48:fa:fe:6f:27:cc:9e:47:3a:2c:2d:98:23:44:0e:a5:
         a8:aa:c0:da:4f:a2:db:be:6b:b5:e5:28:09:4d:cf:55:3b:58:
         dd:88:91:79:b8:2c:bd:27:b1:c3:91:f2:98:03:6d:65:d7:25:
         f7:d7:9d:a2:c1:c2:01:d6:1a:05:d3:91:87:86:d9:90:61:d5:
         8a:dd:3b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 08:28:54 2026 by rpki-client