Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20418ba-2263-31a3-a778-0086187b3cd6.roa
File:                     d20418ba-2263-31a3-a778-0086187b3cd6.roa (raw, json)
Hash identifier:          s6eNzVBbGb8ZNO+4eCkH7pw5YZ0HOQGR5JoFWBapnEo=
Subject key identifier:   E9:12:4E:C9:D9:0A:2C:BE:76:3E:FC:43:FC:C0:89:74:FB:6F:C1:0F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EAFE6F03DA350CB87895A2E20
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20418ba-2263-31a3-a778-0086187b3cd6.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     58309
IP address blocks:        2001:470:542::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e6:f0:3d:a3:50:cb:87:89:5a:2e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=5810e3b7-88db-40c1-ab2e-302fb93d3a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c7:8d:48:d2:c8:17:78:1a:16:d5:0e:87:59:
                    59:2d:0c:e8:bb:1c:eb:cd:b4:e6:82:7e:3e:97:2d:
                    5c:5c:16:54:7c:4c:35:20:ed:1f:16:e2:c6:12:28:
                    d9:4f:4e:e4:fe:b8:5f:07:04:63:95:ae:42:52:ba:
                    da:2d:28:1b:b9:25:a3:a1:15:6c:89:39:e9:11:99:
                    04:05:e5:6e:c1:76:c9:04:60:cd:c5:51:8e:94:df:
                    27:ba:fc:c8:2d:b6:a6:e7:a6:f1:5a:a2:de:f0:ff:
                    74:79:6e:7a:75:d0:c8:a5:e1:8c:6b:d1:4f:aa:2d:
                    3c:cc:cb:27:dc:fe:be:74:03:1e:ed:7a:8e:19:09:
                    d3:07:8f:88:c2:1f:48:76:d5:c3:6e:ab:e0:87:08:
                    b8:31:f9:6d:8a:91:06:6e:57:6f:9a:b6:24:08:70:
                    85:00:4d:71:13:7c:11:0d:00:79:a7:fe:48:13:60:
                    20:bc:25:13:f9:c3:ec:49:57:0d:c8:23:e6:e7:4c:
                    a8:f7:25:4d:62:2e:2e:ea:5c:60:b0:e2:ff:fa:1e:
                    fd:ce:94:2b:ae:81:03:d4:82:d2:cb:38:f6:49:72:
                    bc:e5:ac:e0:7f:05:75:af:1b:23:77:3a:0a:60:42:
                    dd:fd:f4:aa:77:6e:08:18:21:85:30:70:e1:c9:86:
                    8e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:12:4E:C9:D9:0A:2C:BE:76:3E:FC:43:FC:C0:89:74:FB:6F:C1:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20418ba-2263-31a3-a778-0086187b3cd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:542::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:76:38:99:71:e7:21:f2:65:61:be:22:98:2f:4d:27:cd:c2:
         31:db:14:b5:fa:19:12:3a:13:cd:d3:e6:e2:49:a3:be:d3:07:
         1e:27:0e:ae:3b:71:34:1b:84:4e:6c:73:9e:e4:da:71:e6:e7:
         6c:41:1a:32:45:61:6c:aa:86:69:7e:00:cb:86:2a:d0:c6:ae:
         87:97:77:f0:e4:21:82:35:1f:91:f3:50:5a:6f:0b:79:ca:39:
         84:99:c2:f2:c1:41:d8:b8:df:e9:7b:28:fd:59:75:d8:bc:71:
         50:a0:30:4f:ac:36:ea:44:73:af:46:fc:61:e8:da:48:37:8c:
         75:29:11:f0:d7:54:8c:36:67:66:f5:07:55:52:aa:06:5e:b8:
         bd:2b:60:c5:4a:b4:eb:ab:9b:51:5b:f2:7a:99:69:56:4c:ae:
         f4:92:47:b2:76:00:b0:a7:8a:68:79:75:8d:0a:61:7a:50:0e:
         98:5e:22:13:9d:8b:b2:b6:18:c0:6c:3f:60:56:d0:65:81:3e:
         2b:ed:9d:fc:d8:72:15:e6:40:a8:fc:9a:9f:e8:28:58:7f:f7:
         54:d5:2e:ba:0c:28:e5:12:ba:a0:fa:c0:80:16:20:19:6d:52:
         72:86:01:85:a7:b5:0d:ea:2d:69:83:c8:5c:24:ad:26:8f:a9:
         fc:25:cc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 07:52:59 2026 by rpki-client