Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2f80b3f-9d4f-37c5-97e6-6d1596c866f4.roa
File:                     a2f80b3f-9d4f-37c5-97e6-6d1596c866f4.roa (raw, json)
Hash identifier:          yFr8wJV6GdX3rv4yDc/QsVV9s/ymSeFkAN0zMfrWTdU=
Subject key identifier:   07:0D:8A:E4:D3:B9:D0:F9:F0:91:40:AA:3A:19:71:76:19:05:95:E7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F4974989FB8528ACD2F5FDF00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2f80b3f-9d4f-37c5-97e6-6d1596c866f4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     27424
IP address blocks:        2001:470:404::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:98:9f:b8:52:8a:cd:2f:5f:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1a8411f0-7f33-44fa-8815-f03ff12de96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bd:cf:fc:6a:4e:c4:9d:8c:ff:8a:3f:57:c8:
                    4e:2b:af:6d:e9:8a:8b:bc:7b:d5:78:2b:f5:11:28:
                    69:ec:dc:20:67:f5:3e:16:93:a8:ee:b1:97:7c:a7:
                    5c:ea:64:e7:eb:9d:0f:ff:92:2b:89:b0:2f:ec:8a:
                    d0:8a:38:e6:26:ef:4f:56:00:57:45:a7:cc:4e:c0:
                    f3:a6:e9:70:3d:29:67:8e:bd:10:be:1e:b7:5c:dc:
                    44:43:41:7c:6a:f7:93:55:05:c0:be:9e:84:c5:17:
                    6c:ba:f6:eb:d4:0d:88:77:a4:a2:c5:0c:90:17:27:
                    a5:1f:75:53:2c:a4:13:31:07:09:5d:26:8a:5b:17:
                    9c:08:c6:fd:7b:30:e6:9f:76:aa:28:95:91:d7:0c:
                    21:22:38:3e:16:ef:d1:64:e6:bf:5a:7a:17:7d:a0:
                    09:0f:41:f2:39:bf:51:01:3a:59:2f:8a:0c:5c:7e:
                    ac:02:95:e4:1e:eb:35:d0:5b:ab:ca:cd:61:19:e1:
                    09:73:4a:7e:72:52:e7:bc:f1:21:2f:48:e4:d5:52:
                    a9:2f:b0:af:67:c6:5f:21:e3:fc:e8:04:70:77:ff:
                    ee:6e:ed:ec:d1:c8:95:54:11:fa:9e:2c:a4:d3:3c:
                    c5:c5:13:f0:dd:e6:5d:d1:9d:91:eb:6a:8c:a9:5c:
                    b3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0D:8A:E4:D3:B9:D0:F9:F0:91:40:AA:3A:19:71:76:19:05:95:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a2f80b3f-9d4f-37c5-97e6-6d1596c866f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:404::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:12:f0:e9:ab:ae:df:90:9c:34:41:87:4e:d8:0c:ac:21:9f:
         45:d4:79:1c:69:6a:81:64:65:d6:82:07:30:4a:46:6e:2d:e3:
         bb:10:0b:43:40:c1:27:50:d6:74:ba:02:b2:ae:0a:51:8d:37:
         eb:3e:36:57:6e:73:4a:fc:1a:2a:a8:d6:84:6d:a0:ed:10:52:
         68:85:3d:15:0f:e0:11:af:68:34:4e:95:69:f3:21:e2:72:1b:
         21:e3:92:18:c6:21:fd:97:49:1a:3c:dc:37:f6:dc:a7:ec:12:
         9a:e9:a4:98:07:fa:74:73:d3:a8:eb:6a:5e:9f:7b:63:9f:b6:
         d9:18:ae:fa:8d:71:f7:30:ab:3c:d8:71:e1:6c:ae:5e:cb:b3:
         70:1c:c5:a4:96:f2:b0:82:71:ad:ce:8b:76:7d:33:30:c6:94:
         07:8c:c5:93:af:b3:f5:e8:4f:ad:30:83:bc:f3:d4:cc:68:92:
         28:0b:62:6b:7d:49:2d:b0:24:81:4b:48:02:88:ad:59:37:a8:
         14:88:8a:ad:7c:6b:b3:4a:70:19:30:34:90:5e:b0:d5:3f:86:
         64:05:70:d3:a9:60:fb:f3:8b:dc:e4:1a:d8:4b:3d:fb:4a:ee:
         8b:88:7d:45:17:0f:27:39:c9:da:c7:0b:2a:c7:4e:15:68:81:
         fa:7a:4a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:37:14 2026 by rpki-client