Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee2f6253-b116-36a8-9d89-83a5483292ca.roa
File:                     ee2f6253-b116-36a8-9d89-83a5483292ca.roa (raw, json)
Hash identifier:          TpBt96C3+EKH/bxiEaSex89d3G9USTq4UOOIsukGktw=
Subject key identifier:   F2:91:5B:7E:61:4E:7F:B4:7A:30:DA:89:ED:EB:5D:66:57:65:C6:15
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC923B8BFE838B3C99B26100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee2f6253-b116-36a8-9d89-83a5483292ca.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     22682
IP address blocks:        2001:470:1ed::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:3b:8b:fe:83:8b:3c:99:b2:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=614aacf4-5734-4243-8198-333b497a695c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1a:eb:e4:18:18:d6:b7:97:a7:f0:83:3a:cd:
                    38:09:b5:e6:05:22:8d:2d:4e:96:18:db:b6:3d:25:
                    a6:97:80:2d:be:e4:98:76:e0:d6:77:fa:65:37:b1:
                    f1:e9:01:5f:a7:e8:14:12:18:f0:3e:2b:a1:2e:7b:
                    2c:b4:42:b8:1e:33:13:49:1e:58:ce:ab:e6:7d:13:
                    13:2d:3a:9f:79:18:9c:e7:73:3e:7a:e4:5d:13:88:
                    40:34:e6:fa:45:54:95:e2:6a:e9:ba:ff:f5:cc:66:
                    9b:4f:7d:d9:21:67:c4:a2:dd:d7:18:a0:f2:82:58:
                    ae:35:09:af:b1:fa:7a:71:42:6b:b3:0e:6f:c4:b1:
                    99:a2:e0:81:d8:91:27:32:a7:25:a1:55:53:ed:1d:
                    56:7e:ad:96:85:e4:87:3d:8b:35:9b:e8:24:63:03:
                    3a:f1:5a:55:b6:6a:26:af:95:84:c8:fd:c2:2d:d4:
                    be:f5:29:d1:e9:52:a0:0d:86:b8:80:82:d1:71:da:
                    67:28:f8:13:1f:42:cb:ca:42:59:6f:28:11:c1:2e:
                    6e:55:1f:9b:c3:d5:28:06:83:5b:1c:04:0c:e7:bd:
                    b7:83:0c:02:1c:45:06:61:a5:19:f2:dc:b0:1b:1a:
                    dd:e4:5e:ba:c0:be:a1:83:c6:44:71:07:4f:21:d3:
                    47:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:91:5B:7E:61:4E:7F:B4:7A:30:DA:89:ED:EB:5D:66:57:65:C6:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee2f6253-b116-36a8-9d89-83a5483292ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1ed::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:58:a5:28:9c:27:ba:8d:37:11:f5:4e:20:ae:0e:94:b3:56:
         4d:37:76:9e:f2:c8:45:40:a8:69:8d:52:86:4c:2f:99:57:cd:
         96:92:33:74:cd:1d:ef:1d:83:34:8d:36:6d:85:4e:2b:fc:00:
         9f:cc:00:07:29:4d:7f:04:d6:20:96:e7:7a:7c:1d:68:81:bb:
         f5:9d:33:19:5d:f0:b4:ee:b2:1e:e3:47:c8:10:eb:21:36:b5:
         24:8f:72:d4:2f:36:0a:62:b2:7d:9b:b9:7d:35:3b:7b:d9:24:
         ae:aa:98:bc:8f:ef:dc:67:3a:f0:f6:8a:f5:eb:0b:d2:4c:85:
         93:79:da:3a:18:ed:93:5d:53:80:f4:9c:22:ef:7f:fd:71:e5:
         b6:9a:96:57:4e:77:f8:da:d4:a8:d6:e6:60:ba:20:a0:74:33:
         2e:b2:0c:8f:e3:ba:50:6a:73:c4:42:43:20:ee:c6:03:36:09:
         8e:7f:7f:00:d5:96:f1:1e:1f:d4:69:07:05:db:3e:21:e5:e9:
         71:d2:d3:42:09:57:e8:07:69:b1:3f:e7:b5:8f:da:cb:61:d8:
         a8:f5:14:e8:b9:e5:34:a8:94:1f:a2:6c:84:11:80:26:58:1f:
         16:00:d6:4f:7d:b8:e6:a4:70:e1:f9:80:93:e2:0e:21:54:bf:
         58:55:99:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 07:52:14 2026 by rpki-client