Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe7a6f31-4d9d-3c84-9e27-097ab71a8380.roa
File:                     fe7a6f31-4d9d-3c84-9e27-097ab71a8380.roa (raw, json)
Hash identifier:          RUhJvWp6zgETzQhBmy7m44W8JFhBBG2tuTO0EWIEUx8=
Subject key identifier:   99:53:03:A5:7F:B0:C5:AB:7B:0C:0A:B3:C0:D8:78:08:13:8C:6E:E6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EBDDC588767AC338872CA9780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe7a6f31-4d9d-3c84-9e27-097ab71a8380.roa
Signing time:             Thu 06 Aug 2026 01:00:12 +0000
ROA not before:           Thu 06 Aug 2026 01:00:12 +0000
ROA not after:            Wed 04 Nov 2026 02:00:12 +0000
asID:                     151360
IP address blocks:        2001:470:4df::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:dc:58:87:67:ac:33:88:72:ca:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  6 01:00:12 2026 GMT
            Not After : Nov  4 02:00:12 2026 GMT
        Subject: CN=1ddc8936-8e71-49ce-8ca5-efd53ffcca39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:c4:cd:a8:a8:d6:fc:21:5a:dd:f6:ea:ba:
                    44:50:0f:89:fe:97:03:9d:11:07:19:43:7c:db:d0:
                    18:f2:a8:ff:87:58:0d:32:84:df:f7:36:72:de:8f:
                    93:69:11:23:7c:2b:0c:1c:1d:11:2d:82:8c:47:7d:
                    00:d9:ea:8e:66:80:c9:65:00:77:39:5d:39:02:4b:
                    51:d8:44:9d:5c:77:52:ce:61:be:16:be:9d:0c:57:
                    fc:9e:a1:12:dd:a4:7c:c8:96:3f:3e:0b:de:f2:53:
                    26:83:21:ea:46:4b:12:10:30:75:b4:eb:e6:5a:0f:
                    98:af:63:a9:c0:22:48:68:ed:27:35:c1:d5:a0:b3:
                    8d:bc:37:5a:87:de:fc:f3:27:48:48:c5:4c:21:cd:
                    b7:f3:60:40:7e:d2:46:cf:2a:d0:94:a1:5d:eb:24:
                    a9:a4:39:93:91:73:48:f1:c8:e5:57:78:0c:fa:4a:
                    9b:ff:37:99:91:ac:0e:08:20:ab:72:5c:80:47:b0:
                    ff:88:cf:a9:5e:30:6b:34:72:a8:93:99:3a:98:5c:
                    cf:5d:b4:d0:2a:b8:4e:8c:7f:14:62:e5:35:10:be:
                    2b:75:e0:93:e9:e3:a5:06:40:5d:1b:f0:2f:a4:b8:
                    d3:cb:2d:cf:02:e8:7d:36:cd:48:ed:3c:ac:7a:be:
                    c3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:53:03:A5:7F:B0:C5:AB:7B:0C:0A:B3:C0:D8:78:08:13:8C:6E:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fe7a6f31-4d9d-3c84-9e27-097ab71a8380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4df::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:31:7f:bf:da:6c:f4:ff:78:48:65:a3:ae:d3:9d:d8:4c:8f:
         91:bc:88:d7:6b:df:63:26:38:1d:93:91:9b:c0:94:af:18:29:
         10:e6:b4:d4:45:d7:e7:41:7b:56:33:89:59:20:9b:4c:4b:c4:
         44:ea:0c:87:db:fe:73:05:0b:ec:12:4f:a1:36:0a:73:fb:43:
         5d:05:27:1a:71:c1:fc:41:5d:56:2a:6f:cd:18:1b:2f:00:b3:
         e4:5e:de:a8:be:b0:18:d5:0a:c1:0b:dc:13:82:c6:8f:39:64:
         18:f3:1d:56:69:26:f9:0a:98:03:30:56:5d:f5:88:be:ab:56:
         4f:c4:47:70:5a:d8:ab:c7:ab:1b:da:35:ed:c8:ab:7b:13:ec:
         51:b5:1c:41:16:bd:23:6f:08:09:50:db:7a:09:de:b3:e3:1e:
         a6:a8:ba:63:78:c9:bb:74:46:6b:dd:09:13:ef:c1:25:33:1f:
         de:6e:22:36:8c:9f:16:4d:b3:14:cd:98:c9:78:01:44:f9:2e:
         03:1c:7d:1b:f2:28:4f:00:08:91:dc:b0:89:ff:c1:53:79:c7:
         00:db:03:26:b3:ea:77:a6:1b:25:87:8a:51:58:18:cb:cb:70:
         84:30:4c:3b:28:2b:71:18:a9:86:ca:9c:36:85:05:46:a2:5a:
         41:0f:0f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:30:30 2026 by rpki-client