Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f533b757-90c1-3678-82c6-e7b0640b2d6d.roa
File:                     f533b757-90c1-3678-82c6-e7b0640b2d6d.roa (raw, json)
Hash identifier:          HuAB/LpyUMA2effh8mw15UK3WK+a2mfgwRewXfQwY28=
Subject key identifier:   63:55:84:97:10:6B:6F:26:44:40:5A:E7:55:5E:D6:7B:6E:CF:B1:9D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584ECA6C6616244CFABCDBA929C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f533b757-90c1-3678-82c6-e7b0640b2d6d.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     396298
IP address blocks:        2001:470:351::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:66:16:24:4c:fa:bc:db:a9:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=c6f874a5-0a6c-4766-8efb-0fd489d1a98e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ec:cd:33:f1:02:b0:a6:58:7d:5f:2c:a5:c2:
                    44:40:28:80:86:bc:a9:87:a3:3c:b8:2a:3d:ad:78:
                    17:73:8c:f5:ea:dc:4f:92:b8:5c:68:1d:35:5f:50:
                    12:6c:9b:ee:a0:2c:7a:f3:13:a5:d0:5b:16:c2:ad:
                    71:5e:c5:cc:02:3c:8b:d5:ff:5f:0d:eb:0d:48:6d:
                    6c:f0:43:a5:0a:b7:b1:98:87:67:b6:b8:4a:70:0a:
                    5f:09:09:01:41:e8:b0:66:49:54:2e:42:53:50:34:
                    60:81:45:db:54:8e:b4:16:93:bb:47:5f:ea:be:31:
                    35:e2:6f:2a:ae:2d:16:26:9d:92:df:19:19:d5:4b:
                    08:bb:ac:91:2d:c2:08:98:c3:63:07:dc:f3:70:51:
                    87:04:0f:54:5d:04:ec:fa:b4:47:68:8a:21:bd:88:
                    99:3b:59:3f:dd:db:3e:8f:b8:2a:e2:94:37:7a:c4:
                    1f:29:b5:14:17:f2:94:54:df:56:94:22:5f:e1:28:
                    cc:52:31:f8:0b:f8:8f:1f:17:22:00:cc:33:29:93:
                    fa:73:80:d3:52:6b:12:89:d1:6b:51:99:a8:51:6b:
                    59:a0:d0:0e:4c:e2:72:f3:47:86:e5:69:e1:ee:24:
                    e3:7a:78:1d:8c:a1:d4:ba:6e:f5:57:b8:6d:0b:f7:
                    35:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:55:84:97:10:6B:6F:26:44:40:5A:E7:55:5E:D6:7B:6E:CF:B1:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f533b757-90c1-3678-82c6-e7b0640b2d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:351::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:b7:47:3e:71:8e:cb:af:85:06:72:2d:60:f0:6a:90:49:ab:
         3c:fe:b3:58:41:0d:11:3c:f5:b9:86:47:79:26:5f:a8:63:6a:
         e8:c8:22:c3:bb:c7:99:fa:64:98:52:9d:d2:60:f3:55:7f:59:
         38:2c:89:c0:16:77:d8:c9:4a:e3:fd:01:b9:9b:4e:62:a5:15:
         7c:92:6d:da:98:47:6b:78:6d:06:96:bd:68:cf:c6:dd:a4:d7:
         e4:0c:25:ee:a5:f5:f5:4a:9b:0c:27:94:60:9a:74:58:a0:88:
         36:9e:e0:23:ce:b0:50:19:29:57:75:ba:d5:10:bd:d7:42:77:
         2b:54:e9:c3:b5:71:29:1a:fe:e8:29:11:f6:2b:04:89:47:9f:
         b1:40:54:a5:34:be:e4:04:50:7e:f8:c9:90:5b:5a:21:72:42:
         60:47:8a:67:aa:f6:94:89:cc:e5:a6:48:4c:28:08:31:75:a0:
         a1:3d:1b:88:a1:38:fd:2e:c3:62:71:32:b2:28:0a:f2:f8:43:
         ef:1e:98:f6:be:50:a0:9d:56:62:19:82:3a:03:e8:26:f5:b0:
         e8:b4:a9:0b:08:66:58:6e:81:23:8b:04:f8:cf:45:64:6f:af:
         dc:16:ce:1d:fc:b7:f9:61:46:e8:a2:d2:5c:32:a8:5b:f0:ad:
         05:b9:57:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 04:14:42 2026 by rpki-client