Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/da5d775c-e5be-3fb0-9c53-2fca5b4a63df.roa
File:                     da5d775c-e5be-3fb0-9c53-2fca5b4a63df.roa (raw, json)
Hash identifier:          wk4wiyse5uuXXK6YcVoT7He0hd/rTDQYlJeS+LqSKlk=
Subject key identifier:   0A:CD:FB:F6:29:33:BF:C3:FD:78:DD:C4:1F:3D:05:95:91:8A:23:C0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC9242EDC5C968921BDE7900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/da5d775c-e5be-3fb0-9c53-2fca5b4a63df.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     47485
IP address blocks:        2001:470:30c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:42:ed:c5:c9:68:92:1b:de:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=3618f6c6-cde4-44a8-b6ab-d12041ce2a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:9c:a6:89:99:58:15:26:52:5f:40:60:81:
                    d8:7f:91:48:f0:d1:58:3e:e0:17:ed:34:89:32:37:
                    4c:02:a1:ce:35:85:8a:8f:40:42:38:d0:74:72:8c:
                    b0:9a:a6:c6:65:c3:4e:82:b7:0e:0b:b0:5a:c7:7d:
                    3a:d3:4f:e7:2e:a1:84:2a:16:10:9f:cc:f4:e1:60:
                    6f:1f:06:f2:e9:49:88:f6:b8:bc:28:5c:54:ef:f4:
                    07:b6:4b:85:a2:42:93:f1:86:2f:33:1c:02:13:ff:
                    b9:b8:82:2f:14:21:43:28:cb:8d:16:47:bc:62:d3:
                    1d:7d:9d:ce:36:b7:33:26:1f:72:30:f6:1c:bb:c5:
                    73:91:03:49:ca:d2:da:f1:03:5b:fa:e0:e5:e7:3a:
                    2f:39:94:87:26:dc:7b:de:7f:e5:6b:0b:0d:69:aa:
                    99:d3:92:52:c1:4a:61:c3:66:c5:39:e0:44:a9:f2:
                    ee:1c:bc:25:94:62:6a:e3:b3:93:07:f0:9a:26:c4:
                    a5:6b:b6:b8:c2:4f:88:a8:3e:e1:ff:84:56:52:86:
                    90:ba:64:e6:28:31:70:b7:53:77:d8:6c:0a:d6:c7:
                    68:21:bb:53:5d:87:51:27:c5:7a:80:f8:86:65:7f:
                    7b:b6:03:f1:68:64:21:7e:e1:25:35:4b:d3:3c:be:
                    f4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CD:FB:F6:29:33:BF:C3:FD:78:DD:C4:1F:3D:05:95:91:8A:23:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/da5d775c-e5be-3fb0-9c53-2fca5b4a63df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:30c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:1c:e3:60:7d:17:75:32:74:92:f8:4b:d5:88:c1:46:8c:56:
         be:e1:ad:25:91:8d:e8:10:bb:f7:61:3d:34:22:36:a4:da:e5:
         29:f6:92:d9:3a:5e:82:c0:eb:37:bd:f9:1a:17:88:2a:43:2a:
         51:b9:42:83:0c:20:c9:0b:57:18:74:a5:53:e6:11:19:6e:61:
         29:1d:bc:a5:b8:55:d3:90:e6:91:88:b0:4e:b2:98:46:87:7a:
         0c:8b:54:d3:98:80:43:a4:21:1d:84:33:8b:69:04:f1:aa:43:
         4b:4f:7f:36:d4:af:ec:9c:2f:b9:80:3a:ff:e1:57:48:65:54:
         e0:93:26:f7:5f:2c:55:35:15:69:51:2e:3c:15:14:15:b1:02:
         22:05:75:d0:32:64:ba:a5:db:19:5b:4b:2c:3b:28:45:43:9b:
         71:38:10:42:0f:eb:56:2b:6a:86:d4:fe:67:59:1f:9d:52:0d:
         cb:cd:d5:c2:1e:ee:b2:25:68:2c:94:6f:ca:c9:34:04:bf:36:
         1b:72:75:7f:80:fd:27:9f:96:9d:e4:65:2b:3d:ce:b7:0f:b5:
         7c:49:80:78:d9:95:60:01:4c:cf:aa:74:c5:26:a6:cf:3e:99:
         bf:8b:35:9c:e9:f4:8d:b0:9c:ef:01:a3:d0:92:ea:e9:d7:6c:
         ae:74:f2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 07:50:53 2026 by rpki-client