Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb4f2049-ba62-3c87-888a-febe4a159ee0.roa
File:                     bb4f2049-ba62-3c87-888a-febe4a159ee0.roa (raw, json)
Hash identifier:          EMKj9f1Fwd2nMZnU5Ex/LQ93sKajE2v/1WRWWxCyXyY=
Subject key identifier:   F5:32:BD:08:BD:21:68:EF:6C:6F:E5:83:58:E2:18:ED:36:7A:48:26
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EA7996BC17CA2705B1FD94A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb4f2049-ba62-3c87-888a-febe4a159ee0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20648
IP address blocks:        2001:470:390::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:6b:c1:7c:a2:70:5b:1f:d9:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f755a0a4-9f17-426b-8be8-ce99119d8506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:47:be:93:76:fe:07:6d:20:d2:3b:6e:52:ef:
                    a5:b1:ba:17:e6:f6:af:83:21:f5:9c:d9:31:db:54:
                    bd:92:f1:45:09:6d:ca:8c:54:8d:2a:5c:5a:16:1b:
                    d2:bd:21:e8:1a:0d:f8:7b:15:f3:8d:2a:4e:0c:05:
                    10:2f:f4:f4:24:79:ba:dd:7b:08:22:dd:40:21:58:
                    2e:41:e2:7d:cd:3f:86:7f:87:26:4a:4e:05:84:75:
                    82:c1:ac:b2:c3:bc:4f:fc:66:cf:b5:7f:bf:bf:cc:
                    5e:28:d3:22:00:f8:9e:1e:e6:f1:ba:fe:99:60:8a:
                    11:d8:7d:63:eb:9f:1a:59:81:31:71:40:fe:5f:a5:
                    61:32:c0:51:71:08:a1:58:4b:c5:d2:d8:88:94:5d:
                    9f:c1:91:29:f1:eb:d5:ba:de:be:1c:7e:a2:71:42:
                    41:91:c8:54:aa:fd:60:95:fb:f3:bd:31:b3:0c:40:
                    11:4b:2a:50:37:17:25:f3:cf:bc:1f:ac:03:f1:d8:
                    1e:61:52:26:1b:1e:62:55:60:26:d1:38:35:95:fe:
                    2d:b8:04:e6:2c:57:91:d3:4f:16:2d:10:69:29:f5:
                    25:ed:79:36:f0:84:96:c1:12:ff:2d:5d:dc:89:f7:
                    c2:19:98:03:7c:eb:3e:45:52:74:96:ae:7a:d9:75:
                    5c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:32:BD:08:BD:21:68:EF:6C:6F:E5:83:58:E2:18:ED:36:7A:48:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb4f2049-ba62-3c87-888a-febe4a159ee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:390::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:9c:86:b0:99:cc:69:c9:d8:a0:67:74:4d:10:80:1a:73:8c:
         30:f0:ba:c0:26:53:37:27:fa:8a:65:0d:d6:8a:72:05:64:dd:
         04:97:74:27:d9:96:31:69:74:53:c9:a8:1f:f4:d7:6a:45:07:
         43:4f:7c:d7:a4:83:e3:c7:9e:8e:12:96:80:f3:63:bf:44:9b:
         54:bf:a7:f8:f3:35:72:10:f7:c6:2f:79:fb:23:60:40:a9:61:
         1c:f4:32:d3:22:ad:89:02:e6:c0:30:3f:89:48:f6:db:ea:a0:
         0d:c6:8b:25:78:14:c9:5e:6b:2a:cc:78:c1:bf:ad:bc:b0:af:
         23:cf:62:49:fb:76:70:0a:c2:7f:17:fb:c8:6b:d1:d9:12:95:
         e5:57:38:73:dc:4e:7b:f9:8d:9a:c2:e5:4f:f6:6f:79:c9:74:
         ba:b0:26:a6:e8:95:69:ec:e8:aa:ca:79:a3:b7:f3:ed:b2:98:
         1d:d7:ca:e3:58:b0:bc:25:b6:e3:07:eb:51:4d:82:51:f2:7d:
         e2:45:f7:e6:93:7d:96:42:ed:6c:87:91:90:3e:00:f5:f9:4a:
         b5:2f:f2:19:89:7e:15:5e:71:9b:c3:9e:00:55:fc:22:7d:6f:
         71:f1:a5:a7:33:32:47:1a:c4:0b:99:61:13:c2:01:b6:e9:de:
         27:6a:35:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 1 01:51:04 2026 by rpki-client