Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f82aed81-3a12-35e3-ad36-bd3f6556b32f.roa
File:                     f82aed81-3a12-35e3-ad36-bd3f6556b32f.roa (raw, json)
Hash identifier:          Eajx4N96h6qFW3DEtuH8DqZV8zqTe1MJ+rvw304/jM0=
Subject key identifier:   C4:D4:AC:82:E7:41:02:B1:AA:45:8C:32:1A:FE:F6:95:95:8F:41:E0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F1302449E385C73A847558CC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f82aed81-3a12-35e3-ad36-bd3f6556b32f.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     44209
IP address blocks:        2001:470:4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:44:9e:38:5c:73:a8:47:55:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=6e458388-0f14-4949-afcc-bd064ede178a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5b:00:ca:10:e0:41:06:38:a4:36:e3:c1:2d:
                    6e:6e:6b:aa:2e:f9:a7:4d:0e:05:92:f0:0e:64:0f:
                    8a:65:34:12:c8:7f:cb:10:49:21:bb:78:e2:80:fb:
                    68:ed:c8:a7:d3:be:bf:e5:6b:b5:11:4b:19:c7:65:
                    66:09:48:d2:d7:56:70:95:6b:6b:62:c3:f4:cd:df:
                    8f:da:b4:99:0b:f5:8c:0c:97:e5:e4:ec:2f:73:5d:
                    bc:dd:a6:73:35:af:d9:82:78:d1:15:7c:87:25:5b:
                    c1:0b:b3:81:47:7e:38:ff:8b:92:1b:f5:8e:db:19:
                    05:34:e3:6f:de:1f:65:e3:4e:73:de:0a:ca:2a:a6:
                    5d:f6:b1:46:5e:8e:70:95:51:89:a7:61:ff:6e:d8:
                    94:fc:6a:dc:99:89:f8:20:be:94:ac:f6:6f:05:09:
                    1a:e3:ca:63:b7:3f:ba:e0:34:42:12:75:92:8a:10:
                    67:66:bf:b7:16:18:95:9c:c6:9c:b4:69:89:36:04:
                    fd:8d:80:53:09:2c:1e:27:54:7c:b5:17:54:34:8f:
                    82:56:5b:ce:46:f1:04:e9:5b:ed:dc:86:47:ac:15:
                    01:b9:d1:8a:f3:41:bd:82:2b:d5:b1:04:cf:4e:ca:
                    62:8b:0d:36:a1:7e:de:2f:0e:0b:53:08:f7:60:25:
                    8b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D4:AC:82:E7:41:02:B1:AA:45:8C:32:1A:FE:F6:95:95:8F:41:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f82aed81-3a12-35e3-ad36-bd3f6556b32f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:57:53:47:69:2c:74:c9:64:57:b8:cd:7e:d1:d6:10:89:c0:
         f3:ee:54:72:1e:cb:67:81:65:cd:93:1b:bf:e1:30:72:ba:a7:
         86:e7:04:d2:2b:be:b3:0e:bd:3f:dd:84:af:6d:94:30:3f:8b:
         2f:02:0a:3f:0d:aa:63:be:75:dc:aa:27:c9:c5:b6:06:fa:1e:
         4f:70:a2:04:e6:ab:60:ef:7f:1c:54:42:e2:1f:cc:c0:c5:81:
         d5:ed:6e:d4:ef:46:06:e2:e1:ad:c9:4c:6b:53:1d:76:6f:fd:
         17:e1:11:b8:d8:ac:08:0c:98:74:21:3f:9a:e1:3c:22:6d:8c:
         68:81:03:66:e4:7c:a2:d9:d3:de:83:73:b4:aa:89:4c:30:a7:
         4b:e6:48:39:7b:60:ea:f1:80:51:5b:8f:71:90:ef:0b:17:ab:
         81:f1:11:89:48:3f:cb:05:a0:a2:62:1b:c9:ed:eb:71:2f:39:
         fb:a8:a5:d7:b6:2b:fd:8b:3d:27:e6:3d:c9:01:4c:a2:00:b8:
         6d:5c:0d:e8:ad:a5:78:9b:c9:c6:4d:0b:ee:31:57:c1:59:ab:
         a3:4f:14:a4:a2:67:5b:d0:84:e0:b1:06:0c:32:30:26:44:62:
         93:25:ba:5d:83:53:b9:c0:78:5f:f4:e2:e4:36:76:8b:35:e4:
         54:49:ae:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:52:23 2026 by rpki-client