Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1dfff41-259a-363f-8767-1c74571560ee.roa
File:                     f1dfff41-259a-363f-8767-1c74571560ee.roa (raw, json)
Hash identifier:          4Koq8ojoMk8/YsBszT5VI+yjPsL7NYKsQCWhOv8CCtc=
Subject key identifier:   F7:F3:91:44:A2:ED:9C:39:5E:84:08:E5:62:C9:EE:96:C0:C5:FD:11
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC924185C83C37DF1333D690
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1dfff41-259a-363f-8767-1c74571560ee.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     41568
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:41:85:c8:3c:37:df:13:33:d6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=5496cafc-4fe2-4dad-80f5-dd23de7e2f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cb:08:f6:0a:7e:4e:af:14:c5:9e:32:1f:04:
                    9f:de:86:4c:0e:71:f5:38:5d:12:8d:b2:5c:da:8a:
                    9c:23:c4:fe:f9:f9:2d:da:44:d8:08:bf:66:c0:d5:
                    90:fb:c3:b3:b7:70:ef:aa:f8:38:ee:a3:e1:5f:9d:
                    57:a8:1b:39:e2:c0:86:cc:83:76:5a:a1:f9:34:8c:
                    1a:73:b4:b3:12:4e:dc:14:c5:e3:42:72:48:88:4b:
                    5e:7e:62:6a:15:f1:21:f3:e1:96:ef:2f:2a:8e:d4:
                    d3:40:a4:7e:ef:f7:2e:1b:41:0e:c8:4f:ba:6d:bc:
                    c9:b5:99:4a:56:15:85:d1:7c:fe:c8:06:1d:d5:07:
                    12:27:f5:f7:0d:05:9a:b5:36:4b:2d:28:ee:c2:71:
                    1a:55:40:69:92:2e:63:37:23:c2:3a:8f:3a:91:37:
                    39:6e:e9:16:bf:e0:37:ed:ba:33:8f:f5:6a:a7:f2:
                    5f:0f:af:ec:52:bd:28:f6:d7:8a:7c:b6:60:50:61:
                    5d:f6:d8:dd:09:26:67:ea:42:28:1a:fa:eb:77:2b:
                    55:5d:1b:cd:33:54:00:a9:04:dd:5d:e0:23:8c:2c:
                    7e:00:c0:f5:cc:de:8e:40:bd:63:6c:40:a6:4d:7d:
                    49:3f:99:8c:f1:41:90:21:ee:b2:d0:9b:64:4b:32:
                    a6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F3:91:44:A2:ED:9C:39:5E:84:08:E5:62:C9:EE:96:C0:C5:FD:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f1dfff41-259a-363f-8767-1c74571560ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:57:d0:8c:2d:d4:b8:5c:1f:05:67:2c:a1:39:ca:00:f9:22:
         59:0f:fc:1a:c3:d7:6c:1a:0d:a8:92:0e:3a:6d:f7:07:d3:68:
         d5:56:5e:d9:ed:0d:23:4a:84:24:55:6c:d0:e0:a8:22:8d:5c:
         14:86:7c:7d:f1:32:ec:d6:f4:9a:22:a4:04:3e:d9:f5:ef:8f:
         66:29:c9:2f:13:d8:00:ba:38:2d:49:05:75:fc:c7:51:80:11:
         90:4e:46:7f:14:6f:c7:02:48:22:b3:e6:32:1c:5c:2c:b1:9b:
         d1:6b:7b:79:89:4c:2c:69:12:46:d4:64:9f:35:c4:4a:44:06:
         2c:ed:8f:37:e5:f3:85:1b:11:ac:c1:19:ce:42:85:3e:3f:40:
         1f:6e:05:1a:e1:5c:ab:2a:23:f4:ca:98:cb:2e:a5:85:f4:19:
         a7:70:a2:75:c6:28:1d:a4:5d:ff:85:3f:a0:dc:bc:34:a1:6a:
         da:cf:63:3f:ce:1b:70:68:0f:9f:ed:42:df:e4:5d:5a:b1:34:
         70:56:81:f4:cd:02:52:4f:31:17:ae:b2:35:f2:0b:ec:e4:e9:
         c7:30:03:f7:f8:17:8c:75:db:28:7a:e8:33:ed:1e:dd:bf:e0:
         e2:78:7d:50:ff:15:09:2f:73:74:c2:6e:9d:76:c2:94:b8:07:
         7d:ca:93:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 23:00:57 2026 by rpki-client