Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d60b0e8e-4115-3d36-a398-e1512939127f.roa
File:                     d60b0e8e-4115-3d36-a398-e1512939127f.roa (raw, json)
Hash identifier:          XjCDXMTXZexwYIkodZRf9t8CK9cC75HtXRO3CKvPdYA=
Subject key identifier:   22:16:B3:C4:6B:3C:04:5A:8C:18:00:1F:B8:E2:97:09:6A:C1:B6:3E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EA799849FE16970D0A9007660
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d60b0e8e-4115-3d36-a398-e1512939127f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     136493
IP address blocks:        2001:470:446::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:84:9f:e1:69:70:d0:a9:00:76:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5e61b0fe-095d-4ba6-b143-3cca64022448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:73:e8:d1:d7:fc:b3:4f:65:e2:d2:26:a9:3f:
                    79:ca:7a:e3:9f:3f:c1:80:46:dd:d0:6b:e8:d1:a2:
                    54:bb:db:80:cb:a9:67:77:60:0a:e5:c3:a4:54:86:
                    bd:93:30:a4:3a:27:be:6f:5a:44:8b:06:5e:51:47:
                    e8:b0:a2:41:4f:48:53:fc:b4:a0:9c:c4:aa:20:0c:
                    9e:26:0f:83:fc:94:e1:f7:ae:99:58:8e:e6:35:76:
                    fa:a9:d3:66:7d:71:0d:05:46:eb:1e:b3:aa:2f:8f:
                    88:63:ab:22:89:f8:56:64:3a:f4:85:0d:a5:51:09:
                    bb:6d:ef:ec:b8:c3:32:19:ee:6b:f8:9f:3f:32:8c:
                    80:57:93:8e:27:57:69:9f:f2:bb:39:ea:b8:3f:83:
                    47:01:31:1a:04:f5:74:e6:9d:4a:bd:72:c0:d5:22:
                    bf:f5:6e:9f:0b:0b:88:4c:4c:6e:ce:12:2b:2a:10:
                    6b:34:8f:f6:69:61:df:05:91:44:fb:a9:67:92:31:
                    ec:5e:ab:2c:b6:36:0f:14:25:16:b1:2f:ec:b8:66:
                    e2:04:3d:82:3a:50:fb:07:5e:f9:ef:bb:6b:23:f1:
                    13:16:7d:ee:91:bb:f5:55:ef:a9:f9:e6:8b:ba:c3:
                    3d:03:6e:a6:29:01:8b:d7:61:7f:c3:2b:cd:47:97:
                    80:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:16:B3:C4:6B:3C:04:5A:8C:18:00:1F:B8:E2:97:09:6A:C1:B6:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d60b0e8e-4115-3d36-a398-e1512939127f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:446::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:36:62:84:61:c3:7d:fb:fe:53:40:5e:eb:9b:c5:55:c7:ba:
         f2:5f:94:f6:21:5f:4a:d9:1c:f0:f3:2a:b8:77:d3:8a:9f:04:
         e2:32:3d:0b:43:fc:51:84:c0:eb:c9:72:01:6a:09:9e:40:cd:
         ae:d3:38:7e:22:16:47:d2:f1:90:9a:ef:b7:1a:cc:92:3f:ec:
         48:86:5c:4b:20:b2:92:4e:ea:48:3b:8b:74:6c:5c:d8:6d:7f:
         61:cb:df:da:72:f1:bb:49:82:5d:6e:fe:48:a7:0f:b9:2c:41:
         8a:74:ae:68:a8:72:38:06:38:f7:46:b1:f1:9b:6f:30:80:71:
         5a:e2:7d:45:3c:e5:67:ad:2f:e2:04:93:52:2b:4b:75:35:6b:
         58:63:7b:6e:d6:4c:25:bf:fb:45:9e:d0:ad:65:07:de:39:a1:
         af:dd:6f:f6:d0:a3:5e:d9:22:ce:71:76:01:03:b6:fd:7d:2a:
         72:3f:08:73:88:76:c4:67:c6:ef:42:34:07:87:06:82:61:a3:
         e6:a4:f4:65:98:62:8c:d3:b9:01:df:5f:68:07:e1:47:d7:07:
         72:e8:92:d6:f3:16:7d:3b:4b:f7:88:43:13:4e:7a:02:4d:25:
         fb:be:ea:8b:89:88:32:1a:54:ed:1a:74:9a:9c:11:54:5c:84:
         9e:2e:0b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 08:27:49 2026 by rpki-client