Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0bce4f9f-fb49-366b-bb1e-bd36c2af2d7a.roa
File:                     0bce4f9f-fb49-366b-bb1e-bd36c2af2d7a.roa (raw, json)
Hash identifier:          OzYdE9E8Xewh2H15bJKudCZrkkwPpoZnfnDKeZBN7uw=
Subject key identifier:   49:69:E9:7E:FA:53:D2:00:B1:21:FA:5A:16:9D:4B:00:60:33:D0:BD
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC9221CF4D167C06D620DC40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0bce4f9f-fb49-366b-bb1e-bd36c2af2d7a.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     36610
IP address blocks:        2001:470:16e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:21:cf:4d:16:7c:06:d6:20:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=62b3dca9-9e36-43f6-ad2d-5bfd7aa0b164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6b:52:ed:10:84:4d:02:75:27:de:6b:eb:7f:
                    8e:63:f1:1e:b7:23:4b:51:a8:95:4c:1b:52:52:a6:
                    76:28:39:45:d2:82:c7:4b:52:d9:d1:d8:21:93:27:
                    83:a2:04:87:1e:4b:b8:c9:b0:4e:8c:23:22:5e:8e:
                    16:57:38:8c:5a:35:b0:78:68:ef:8a:11:fa:e8:0f:
                    13:f9:69:1d:c5:39:cd:dd:89:d6:69:1c:92:52:5d:
                    ce:f0:0d:a1:ce:3b:05:0b:54:db:77:7b:a0:df:ff:
                    ee:c6:23:10:fc:2d:69:da:f7:e7:bb:61:58:4e:20:
                    a5:76:63:5b:22:38:81:af:b3:42:af:ba:c0:e9:de:
                    f4:0a:bf:43:3d:c7:1f:97:1c:09:3f:02:53:50:8e:
                    82:73:f0:b8:48:8e:74:6c:2d:2e:3a:30:e1:1c:ed:
                    16:11:98:74:de:9b:98:bf:3a:39:a6:ab:a2:b7:92:
                    0e:cc:4a:5c:a6:86:82:45:6e:49:9d:6a:9a:9a:c5:
                    68:22:fc:f4:bb:48:71:3a:40:46:97:f3:4f:79:92:
                    95:67:1b:90:e9:3e:ee:0a:49:ee:08:11:de:3a:4c:
                    6a:fd:40:d8:50:ee:38:41:8d:cf:17:6f:d9:1a:fa:
                    f2:ad:4b:bb:ea:3b:e1:08:c4:b3:15:83:58:33:54:
                    e3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:69:E9:7E:FA:53:D2:00:B1:21:FA:5A:16:9D:4B:00:60:33:D0:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0bce4f9f-fb49-366b-bb1e-bd36c2af2d7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:16e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:9c:fc:1b:f4:75:5a:2b:44:89:2a:e1:b0:49:ad:eb:e0:f4:
         66:9c:ee:4f:0e:16:c4:8c:44:8a:60:4f:93:ea:29:c6:3d:a6:
         3f:12:96:a6:a9:4f:87:62:d0:60:ed:e1:02:5f:3a:fa:db:b7:
         7b:f6:4d:5e:bd:ac:cb:03:c3:fc:3b:63:80:81:ad:0a:a8:5f:
         02:22:12:b0:be:89:56:70:22:5e:2b:7a:31:69:c1:09:60:44:
         e3:37:1b:cb:db:d5:9c:7d:12:11:fd:a4:00:45:01:ef:09:d0:
         b2:bc:b4:f7:b6:c4:b3:ef:82:c9:ba:26:ec:a3:7e:66:0a:45:
         e0:ed:9a:91:c6:50:c7:c3:77:ff:7d:32:18:e6:55:22:73:ba:
         2f:62:23:9a:85:02:df:c1:81:b6:29:82:1a:00:e3:af:61:78:
         c3:55:a0:bd:ab:64:7e:29:34:a2:46:9a:02:3e:77:cf:fd:d0:
         fd:30:90:aa:d6:17:40:da:93:46:52:e9:19:70:c5:a3:b5:65:
         ee:9e:58:96:87:fe:73:81:e4:0c:da:e0:83:d8:f8:11:e8:6b:
         8f:82:b2:7b:c1:18:d2:e4:cd:aa:f1:d9:04:e2:e8:34:1e:2a:
         33:3e:43:a8:71:20:45:ad:88:8e:a0:34:32:bc:34:40:03:37:
         bc:76:84:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:57:39 2026 by rpki-client