Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d005338b-0108-318a-9989-f9d35f20ee23.roa
File:                     d005338b-0108-318a-9989-f9d35f20ee23.roa (raw, json)
Hash identifier:          sQLKyUangoeEPYO319herfuA2jCteZPVmKOFVEw2ISM=
Subject key identifier:   AD:6C:B0:3C:65:A5:A9:C3:46:D5:91:3E:AC:59:BD:F1:8B:BC:7F:97
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC9217535DA540F58AD08700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d005338b-0108-318a-9989-f9d35f20ee23.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     11255
IP address blocks:        2001:470:b3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:17:53:5d:a5:40:f5:8a:d0:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=e36e1fe8-2afe-453f-85de-dea1d9266c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:16:a5:6a:7d:f6:9d:a9:2c:db:c2:52:fc:2e:
                    e5:31:1e:fd:6b:d1:21:8d:c0:be:7b:65:2d:fc:75:
                    19:2f:d6:51:e3:3c:18:cc:9d:cf:8f:08:04:a5:b8:
                    12:11:0f:c7:49:6e:41:75:5a:e8:cf:b9:74:21:9b:
                    f7:67:3c:c9:be:6c:b9:75:16:f2:12:fd:de:d2:8b:
                    d5:e6:85:e9:ae:3d:dd:3a:b3:a4:5f:4a:4d:a7:b1:
                    a9:aa:3c:88:d4:8e:a2:4d:b0:ac:6a:76:df:6e:80:
                    8f:6a:bb:85:e7:93:2b:17:3c:1c:60:e0:43:23:13:
                    61:1e:a2:bb:32:8f:3a:d9:c2:d1:b2:ff:cc:2e:69:
                    fc:59:fa:a1:bc:67:1a:8d:ab:3f:d8:e5:25:a4:14:
                    b6:74:3e:ac:68:fa:54:37:fd:5e:0e:27:cb:8f:84:
                    6f:a5:16:95:19:0f:ee:80:77:76:99:8e:86:00:7d:
                    3b:eb:75:9c:93:1d:3b:ee:8c:58:2e:a8:50:c8:9d:
                    fc:24:7e:e7:f9:ff:a6:da:8f:1f:79:2e:25:79:79:
                    01:d6:34:4f:6c:cb:2a:d5:c6:29:28:eb:b5:05:f4:
                    ff:9f:1a:4d:09:bf:aa:4a:2b:d3:01:3c:3f:ea:bc:
                    f4:9c:3c:0c:09:1f:01:14:29:1f:7f:e7:ca:c0:b1:
                    93:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6C:B0:3C:65:A5:A9:C3:46:D5:91:3E:AC:59:BD:F1:8B:BC:7F:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d005338b-0108-318a-9989-f9d35f20ee23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:b3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:59:34:4e:e3:3e:37:f3:53:b0:af:7e:71:9d:bc:9b:00:6a:
         ad:e1:57:18:a8:7a:85:ad:e5:2b:dc:84:80:05:a1:41:d4:8a:
         d3:63:ad:c3:e2:3c:9a:38:df:35:2c:5e:fe:a7:10:69:f3:c0:
         d4:c0:e8:8a:fe:f4:09:a3:c1:f1:8d:0d:54:56:77:c3:3a:93:
         1d:64:21:2c:81:4a:6c:db:61:da:c1:bd:dd:aa:e6:38:8b:b5:
         70:f7:9b:dd:4d:de:b9:0c:aa:fd:39:a9:5f:0b:10:9b:d3:99:
         1d:81:88:7f:42:94:60:c4:26:52:cd:11:24:1a:6c:32:24:f4:
         a4:ee:6c:6d:21:e2:44:49:b6:f8:f2:f9:f6:50:9f:7a:22:04:
         58:72:6d:b6:aa:01:45:9f:99:12:e3:1f:ec:2b:34:2f:ac:a0:
         fd:42:1c:a9:5e:b5:c3:b2:50:a0:4d:b2:c7:26:3f:46:ca:67:
         2e:b4:23:72:68:39:8c:64:94:48:ab:91:a4:e3:de:15:52:7a:
         34:08:e0:de:1d:3a:c4:cf:e0:2f:b8:7a:e7:9c:fc:50:c2:d8:
         bb:78:6f:96:f3:be:33:fe:c2:fa:11:a3:d1:bc:3b:a7:5d:a5:
         8f:dc:af:dc:b1:16:3a:34:7e:d6:69:bd:86:37:52:2f:1f:3d:
         19:37:54:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 07:53:17 2026 by rpki-client