Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9a5f2d8-8b7f-36de-b907-a3d969db3468.roa
File:                     b9a5f2d8-8b7f-36de-b907-a3d969db3468.roa (raw, json)
Hash identifier:          R0tpP7FijI1Hmv1NS2onr/QnJx1bUMThAxCQs4KC76I=
Subject key identifier:   FC:A0:20:D2:1D:75:49:DE:59:9B:37:48:08:C2:07:F3:1A:3A:40:44
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC922AB903DEFB201E070A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9a5f2d8-8b7f-36de-b907-a3d969db3468.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     3853
IP address blocks:        2001:470:2f4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:2a:b9:03:de:fb:20:1e:07:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=9f8b12e0-2deb-4a39-b314-9743e194100a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:02:f5:45:06:bf:72:77:4e:56:93:95:47:56:
                    5a:57:20:01:3b:7b:fa:11:e6:8d:60:b7:19:db:dc:
                    55:7c:ce:ea:fa:a3:00:67:e7:6c:d4:73:3a:20:e0:
                    2c:1d:68:0e:65:4a:fa:d4:48:fd:77:c5:e7:82:01:
                    33:f7:64:14:7c:bd:fe:4a:92:08:57:90:3a:91:71:
                    86:cc:5c:53:8e:b2:7c:5f:ee:bb:38:3c:fc:b0:5d:
                    ae:d5:08:65:78:cd:73:0c:02:53:aa:9d:a3:c9:ce:
                    51:b0:9c:2c:1a:92:31:b1:04:c4:59:5d:54:1c:4a:
                    62:52:be:1b:1b:c7:56:a3:14:8e:1a:18:00:36:32:
                    d9:b3:5a:c8:3b:9a:bb:d7:af:37:63:5e:a5:cd:f8:
                    8c:3c:a2:f9:6b:09:c5:e0:16:e9:43:9b:84:b5:d7:
                    74:64:f2:82:79:ac:61:e7:19:dc:93:cc:df:57:f4:
                    77:be:47:2b:79:23:78:05:b6:a5:a4:16:2b:0d:04:
                    64:55:a3:da:84:bc:3a:8e:45:6b:5f:9f:b1:43:05:
                    e5:62:ed:73:f4:b5:ad:88:d4:34:4e:d9:c9:88:68:
                    54:59:6f:82:0e:ea:f0:da:6f:a8:b7:bf:13:9d:e0:
                    9c:bd:db:15:32:f7:c0:7e:62:ea:f2:7b:59:62:db:
                    e3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A0:20:D2:1D:75:49:DE:59:9B:37:48:08:C2:07:F3:1A:3A:40:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9a5f2d8-8b7f-36de-b907-a3d969db3468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2f4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:6a:8d:af:fb:14:ca:76:82:3e:ac:14:36:16:10:20:b4:45:
         9c:3d:18:0a:e9:a1:60:fc:46:ba:44:00:54:dd:0d:e3:88:d9:
         1a:cc:da:5c:c6:23:a5:97:f0:c6:29:d3:c4:20:3d:03:6f:99:
         03:dd:43:b9:13:a7:26:df:f8:d0:89:0c:2b:38:42:70:8b:e2:
         c2:89:47:7a:f2:6c:9d:5e:d2:12:5d:31:90:f2:7a:93:b0:7a:
         e5:e0:20:63:77:ba:e4:6d:d2:93:2a:d4:40:2f:28:7a:c5:a5:
         f5:48:07:c0:6a:2f:15:4d:db:6a:c0:59:1c:1e:f8:de:71:6b:
         6a:c3:aa:6a:d3:bc:ad:57:dc:1d:9a:a1:72:c1:88:fe:9e:95:
         1f:31:7d:a4:e9:fb:88:f4:a8:66:e6:bb:26:c0:b2:26:61:73:
         bc:dd:ac:95:aa:9f:03:31:6b:e6:71:0b:31:f5:77:33:36:99:
         6b:8a:50:c7:0d:78:54:b6:b3:11:bd:cc:60:e5:03:87:dc:0e:
         7d:87:56:0c:a7:e9:89:df:ec:23:a8:89:45:91:92:ca:ab:e7:
         54:96:c1:86:e4:e2:36:32:53:cf:c4:80:ba:23:c4:22:5e:ed:
         40:13:ae:38:fb:81:a2:99:b3:5e:88:e4:11:e2:01:fe:41:5f:
         8d:dc:c9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 08:27:47 2026 by rpki-client