Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9fef6eab-8e6d-3692-8faf-fb73a6b2f429.roa
File:                     9fef6eab-8e6d-3692-8faf-fb73a6b2f429.roa (raw, json)
Hash identifier:          NmS0sR3qtht9+qUZ0mDtjpg8m/CW+aqEWr2Ou5grlx0=
Subject key identifier:   07:49:A6:9B:19:AB:5D:B0:F1:46:55:EA:20:FD:8B:A8:69:DB:11:3B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EA797AC815DC1EBB3BE69D280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9fef6eab-8e6d-3692-8faf-fb73a6b2f429.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     28458
IP address blocks:        2001:470:3a6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:ac:81:5d:c1:eb:b3:be:69:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=59e2e0ac-ac02-4b33-80c4-70a6f33a2e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:82:4c:ad:cc:28:0c:14:5e:47:63:fc:4e:64:
                    74:a2:bd:54:e8:13:15:6e:94:f6:9a:09:64:ca:14:
                    c6:e7:a2:34:1d:b8:87:e0:96:1b:12:14:6e:d9:ab:
                    9c:72:ed:e2:9c:6f:e3:2f:77:99:d9:2c:ee:0a:cd:
                    7b:2b:63:50:22:90:34:26:9b:85:6a:04:d3:82:76:
                    1e:7a:63:b0:a1:a6:06:53:8a:5b:d4:d5:92:cb:45:
                    33:66:46:8e:91:09:09:97:44:4c:12:c0:99:ca:99:
                    14:97:09:78:ea:dd:b2:3f:36:03:02:32:c8:a2:30:
                    0a:be:20:2f:3e:13:d1:f0:7c:a9:33:80:83:e7:0c:
                    b5:6e:c8:1d:77:a3:6b:80:98:1f:00:2c:c5:10:82:
                    0a:34:29:a1:37:dc:18:07:d7:9a:35:62:b0:2e:05:
                    d9:e2:ce:39:7e:19:99:93:39:31:d6:a0:0e:f9:2f:
                    66:d7:5c:1f:52:68:22:c6:42:b0:ea:8b:13:f2:85:
                    a5:5e:a3:65:01:a1:f2:db:58:5c:f8:4f:c9:8b:ea:
                    23:4a:b3:fe:26:5b:8c:33:dd:f4:5f:29:38:20:c5:
                    e8:ab:6c:b5:4e:8a:53:49:3b:85:24:72:e8:85:5e:
                    35:11:0e:2f:8a:6c:32:4c:52:4b:ab:b3:b3:a1:8c:
                    1d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:49:A6:9B:19:AB:5D:B0:F1:46:55:EA:20:FD:8B:A8:69:DB:11:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9fef6eab-8e6d-3692-8faf-fb73a6b2f429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3a6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:3a:bb:09:7b:6d:1c:9a:db:5a:bb:ef:63:c2:d7:82:b2:0e:
         ae:57:92:5b:3c:c8:5e:b2:4f:c5:e7:6f:49:bb:2f:f8:d4:40:
         52:aa:4c:11:36:66:5c:b8:41:5a:e2:7a:03:95:0b:a6:93:92:
         46:95:bb:5d:8d:1d:c4:19:c7:91:d6:52:1a:7e:a7:60:3f:6e:
         ee:78:18:ef:76:c0:b1:6a:0a:da:5f:39:4f:d3:d4:fa:4b:06:
         b8:2b:d1:94:d0:8b:cb:47:e8:97:42:df:30:6e:e3:0c:a7:06:
         67:75:ad:80:a1:c8:f3:e5:d0:a2:df:a9:ea:3a:50:da:f3:77:
         d8:b4:4c:cc:99:2c:5d:d6:55:38:98:fd:a5:ac:ff:c5:7c:1c:
         10:f1:5c:ce:28:bb:ca:13:91:bb:b1:55:5f:06:49:a0:fe:8b:
         44:39:c9:43:6b:aa:bb:0e:ea:d7:85:da:58:4b:50:db:c9:98:
         77:2c:92:31:90:93:49:57:d2:33:c3:65:bd:7a:6b:27:fa:7d:
         1f:e8:63:92:e8:54:e3:70:c3:9d:30:31:7f:6a:d9:39:53:1b:
         a8:99:80:5e:9c:fe:84:6b:76:e0:b2:30:8a:e3:7b:19:4a:d0:
         9e:b6:76:8a:10:fc:d3:d9:ca:fb:d9:b9:4d:eb:e5:f8:b6:f3:
         51:bd:f6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 02:11:45 2026 by rpki-client