Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0d2f5f9d-c2b7-39c0-bae2-c98476e7bab8.roa
File:                     0d2f5f9d-c2b7-39c0-bae2-c98476e7bab8.roa (raw, json)
Hash identifier:          8N51hVrm5rivGlM/OhcW7ah9ONN9lmGcoaVnVwH5Kj8=
Subject key identifier:   B7:95:7C:AC:79:45:02:68:B5:BC:F7:01:96:1F:BD:3D:54:A5:CB:7A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC92266D9A406BA775889DE0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0d2f5f9d-c2b7-39c0-bae2-c98476e7bab8.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     38949
IP address blocks:        2001:470:129::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:26:6d:9a:40:6b:a7:75:88:9d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=2cb24c73-a495-4e3c-904d-695e9e2167e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:80:f9:b9:e3:0d:29:85:ca:43:e2:73:99:79:
                    e4:76:91:d2:5f:4e:94:a4:c4:0f:cd:0b:67:cc:3a:
                    d6:3e:6b:f2:a1:ac:f6:4d:26:81:08:b7:73:d1:cb:
                    ae:b4:c6:47:f6:e3:86:26:1e:43:88:59:d0:05:7f:
                    2e:fc:df:a3:b1:5d:d2:b3:af:40:ec:15:aa:79:ad:
                    fc:73:0a:b8:38:62:90:ab:9c:71:5a:2b:25:49:14:
                    96:e1:a5:47:6e:ba:af:ae:58:72:ba:50:aa:da:c8:
                    42:14:cb:43:58:06:33:b9:f7:d8:8a:1a:43:a7:a4:
                    9a:42:c7:0f:cc:2c:66:32:45:ea:a2:e8:50:9b:78:
                    b0:51:06:a4:ed:a9:ec:97:6b:34:01:ce:21:be:4d:
                    bf:a5:b1:2d:a6:b9:46:b2:76:9c:9b:13:a5:12:4a:
                    63:65:0e:fa:97:20:22:44:c2:69:6c:37:f5:48:20:
                    ff:8d:20:7c:28:5a:12:cb:d9:c6:f6:5c:49:e3:b7:
                    6a:1a:1e:c1:b0:d4:c4:c9:d0:1c:bc:3a:3e:f5:a4:
                    8c:93:52:81:75:a0:5a:c3:ab:61:c1:8e:27:db:72:
                    4a:8c:24:f4:7b:e3:1b:6d:a5:13:82:de:43:d1:80:
                    d2:df:75:f9:ab:9a:f0:bf:ea:7c:eb:30:22:5d:91:
                    d6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:95:7C:AC:79:45:02:68:B5:BC:F7:01:96:1F:BD:3D:54:A5:CB:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0d2f5f9d-c2b7-39c0-bae2-c98476e7bab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:129::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:27:5f:af:28:fb:7d:fc:a1:2f:6e:70:66:95:27:d3:db:97:
         c0:4b:ca:cf:1b:a2:45:ac:dd:1e:ee:e3:e0:a6:65:1f:8b:f8:
         a8:c2:11:7c:60:0e:38:ba:0c:ea:f1:41:3d:fa:7b:34:6a:bf:
         65:24:bf:d2:7b:95:70:a4:34:40:70:75:a6:42:6e:13:d9:e3:
         44:dd:9e:e9:7f:33:06:57:65:bd:f3:bb:82:00:eb:bb:c0:83:
         51:86:63:ae:02:e8:a9:f4:18:b1:4c:b7:ec:b1:b8:44:f8:b8:
         83:d8:47:05:e3:04:7f:5c:30:94:d0:bd:c8:cc:e3:05:84:2e:
         3d:db:49:ab:35:37:7d:65:06:dc:c6:54:38:0f:9c:d4:9c:64:
         f9:15:a1:95:18:41:52:72:b0:80:1f:1d:cd:c8:6f:60:7a:f0:
         8c:9b:99:48:fa:f8:c5:19:4c:a3:ca:e8:bc:9e:00:94:8e:4d:
         46:df:a2:10:79:fa:39:00:60:54:be:16:90:0e:2c:3b:6d:02:
         43:de:e4:53:03:95:94:5c:43:64:21:c1:01:03:50:4b:82:55:
         f5:ae:e3:e8:79:81:36:aa:8e:03:8c:91:16:f2:e4:f7:5c:15:
         d5:d8:3c:57:bc:87:33:fd:9d:42:c1:23:41:c8:ac:bd:d4:ad:
         1c:fc:89:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:51:33 2026 by rpki-client