Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e0536046-8af6-3763-9efa-b99e4c8f07f1.roa
File:                     e0536046-8af6-3763-9efa-b99e4c8f07f1.roa (raw, json)
Hash identifier:          z92o4Toz0fRSN50tcVQQq+mFPt7s83Obdf+BLHQHUf8=
Subject key identifier:   5C:23:B2:00:2A:34:9E:1A:76:E0:8B:31:5A:E9:2C:15:32:BF:82:A2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC923C72E800D12563E76DA5
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e0536046-8af6-3763-9efa-b99e4c8f07f1.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     9790
IP address blocks:        2001:470:214::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:3c:72:e8:00:d1:25:63:e7:6d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=a1536dde-ed2a-416c-a814-428af6673eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5c:78:5a:1c:30:d4:43:ea:06:68:1f:e2:ff:
                    13:d9:82:f4:c0:25:81:d7:4c:ff:57:55:36:86:89:
                    40:b7:05:3d:ea:b9:2d:98:87:cd:06:37:93:e5:b3:
                    10:19:8b:69:7f:53:85:64:e6:42:76:7b:d9:47:30:
                    05:fc:61:7f:7d:9b:3a:9e:1d:61:4e:21:d7:24:fc:
                    c7:e5:b5:2b:d0:e1:31:50:f8:fe:38:99:45:0e:88:
                    84:ed:85:3b:3e:c5:0a:38:81:1d:12:ea:08:1e:5f:
                    55:95:0b:0c:57:e2:aa:0a:00:34:e6:df:4b:75:fa:
                    23:bd:89:ec:2b:31:47:ae:4b:98:92:a3:90:62:6e:
                    10:9b:27:dc:be:d6:29:02:dc:99:00:8c:96:5e:8a:
                    5f:15:66:2e:e4:2e:d4:3a:b7:75:0c:af:d6:77:8c:
                    42:78:53:02:ec:07:95:89:31:e5:c2:75:ec:3e:55:
                    d3:2d:48:d2:b9:ee:da:ba:ee:1d:5f:5e:42:02:97:
                    fb:88:03:cb:13:a8:6b:47:89:67:ff:5e:e6:d6:be:
                    4c:38:16:74:e0:13:8e:b6:12:d0:70:19:4e:d4:af:
                    5b:94:05:36:59:0f:46:61:e6:f6:63:c2:2d:a4:4b:
                    ab:70:6e:b1:d6:ab:f2:41:7a:3e:ac:8a:e2:eb:89:
                    b3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:23:B2:00:2A:34:9E:1A:76:E0:8B:31:5A:E9:2C:15:32:BF:82:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e0536046-8af6-3763-9efa-b99e4c8f07f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:214::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:88:55:40:4a:72:af:26:42:e1:54:cf:1a:1c:a8:3b:f1:7d:
         44:23:4b:60:9e:db:f1:8e:dd:93:e2:6a:3c:72:d7:e2:c7:33:
         19:24:9b:82:0d:d9:1b:b1:f7:65:30:a1:55:9f:d7:41:90:97:
         c8:57:1e:75:24:f0:36:cc:f4:fa:bb:90:94:27:3d:b6:21:93:
         eb:95:69:54:82:cc:7a:28:93:ba:8b:d5:cb:99:d6:b8:32:da:
         ea:b4:af:ee:48:d8:4a:d8:98:e9:2b:16:07:d6:16:05:ef:c0:
         27:7d:df:1f:b3:b5:af:cc:c8:d6:26:08:b5:8a:a9:73:d9:ef:
         a3:f1:b0:5b:96:75:87:71:40:a0:0e:eb:c6:37:7d:0f:ca:79:
         b7:79:87:87:bc:80:cc:12:d4:f2:21:c3:73:73:57:ce:68:8c:
         dc:3b:7b:99:37:d8:40:b7:d3:c9:e2:df:fd:b9:47:00:9f:e4:
         ad:9e:e0:ea:67:22:58:f8:1e:90:86:b5:75:b5:8c:74:d9:0f:
         9e:40:49:88:d1:6e:1c:af:59:14:b5:cd:a6:3c:24:e9:68:a5:
         f7:e6:cc:b3:d7:76:cc:92:90:ff:c7:d6:6d:d4:47:ed:c3:98:
         88:5d:65:83:d3:46:5f:8f:7b:35:69:dd:39:03:2b:b4:7f:bb:
         3f:c1:d0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 07:51:32 2026 by rpki-client