Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a6db7fac-0b7c-3753-83a0-b8777778a3f4.roa
File:                     a6db7fac-0b7c-3753-83a0-b8777778a3f4.roa (raw, json)
Hash identifier:          K0zO1ZYIxJagcgegZZ29B0JeIuPhBoV4Upqye4IeHJ8=
Subject key identifier:   25:EE:37:30:76:E6:8B:DE:B7:20:F1:3C:6F:B0:20:70:E6:DC:59:08
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC9235A64047663AB7CF2180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a6db7fac-0b7c-3753-83a0-b8777778a3f4.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     393350
IP address blocks:        2001:470:58::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:35:a6:40:47:66:3a:b7:cf:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=cc26db14-800b-4d39-9df1-4bb23c5ff001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ad:c2:ec:a5:a8:33:bd:5a:6d:f6:55:74:83:
                    68:f4:4f:cd:8c:2a:2b:76:72:8e:e5:de:b2:06:06:
                    db:0b:fe:54:2b:70:68:ce:d4:b9:40:6a:8e:e1:a3:
                    0b:e4:82:73:38:88:53:ff:fe:64:9e:f2:43:b4:e4:
                    6c:2d:cb:3b:b4:54:da:b9:25:f9:67:b3:b9:4d:f7:
                    7f:85:36:80:54:26:36:bf:80:76:a5:89:a2:07:90:
                    e2:f5:46:fb:02:5d:58:1b:a5:36:9c:e5:f8:44:34:
                    55:0c:5f:28:2e:26:45:70:65:47:c8:32:22:1f:7b:
                    56:d8:71:08:17:35:50:78:b9:13:ac:7f:42:8d:2e:
                    98:7e:9d:98:7c:08:2b:f4:fe:5c:47:1c:78:8b:1b:
                    9d:50:dd:90:cf:6b:cf:5f:a2:29:31:39:ed:56:cf:
                    13:37:72:dd:4b:6e:75:03:5e:57:ab:bb:8b:48:35:
                    23:3f:ea:05:d6:cb:b9:18:23:e1:39:39:5a:6d:28:
                    32:38:cd:57:12:fc:fb:7a:51:2c:8f:b2:c1:72:d5:
                    c7:d1:70:7f:f7:8f:7d:2f:c1:79:b3:1f:7e:ab:30:
                    60:76:6d:d6:8e:33:ca:97:8c:7f:8f:e9:0b:c1:6a:
                    c1:07:19:ce:0c:a1:1f:89:26:7e:51:e9:3f:3c:cd:
                    33:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EE:37:30:76:E6:8B:DE:B7:20:F1:3C:6F:B0:20:70:E6:DC:59:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a6db7fac-0b7c-3753-83a0-b8777778a3f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:58::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:49:52:ae:59:d2:30:82:e3:56:58:a9:f6:d4:68:f3:b4:55:
         85:7d:ff:5f:b7:51:3c:5e:9e:e8:82:fb:09:c4:a1:5a:e1:2a:
         82:45:d2:6b:13:04:5f:cb:7a:58:f6:d3:90:25:8c:b7:df:bf:
         95:3f:e8:24:99:4b:86:b8:ae:35:fc:99:ba:45:87:94:0a:23:
         65:02:26:3f:ea:cc:83:8e:d6:63:4f:67:7f:05:59:e8:97:a1:
         5f:0f:62:f1:61:80:21:95:9b:a2:01:9b:44:1e:81:c8:f2:cf:
         5c:51:07:00:81:2e:5b:f2:20:44:a0:3f:bd:93:d4:18:46:f5:
         08:8b:6f:0c:8d:d0:25:54:c9:5b:2c:71:88:f3:da:86:09:a7:
         f9:83:fb:53:d5:31:55:ce:8d:40:05:19:66:ea:36:2a:3c:b4:
         d7:a3:f3:4d:c7:df:3c:ff:f0:ab:ba:3b:ac:2d:b8:5e:26:13:
         fe:4a:38:69:57:54:da:74:af:13:33:5d:f1:2d:57:13:29:e0:
         a9:30:91:91:46:fc:d5:aa:33:3a:07:9c:4a:78:5d:09:05:ae:
         e4:d4:10:44:ee:98:0b:de:32:03:e9:b7:b3:29:29:10:86:8e:
         3a:30:d3:6e:33:0f:6f:56:2e:10:91:0e:33:fa:bc:38:1d:ef:
         54:b8:87:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 04:35:16 2026 by rpki-client