Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/15bd1940-76d7-3bbb-9fca-355cffcf29cd.roa
File:                     15bd1940-76d7-3bbb-9fca-355cffcf29cd.roa (raw, json)
Hash identifier:          7tuqyiqTBvG6Du8SAi7MTt8Nd6EPK035TFeF0obV93Q=
Subject key identifier:   9E:6D:67:CC:45:72:B6:45:D9:52:D1:A5:CA:5F:37:9B:71:B8:83:B5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EA7946047330B0BE17DBE9730
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/15bd1940-76d7-3bbb-9fca-355cffcf29cd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     59395
IP address blocks:        2001:470:51c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:60:47:33:0b:0b:e1:7d:be:97:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8c1ac640-d619-4dbe-b086-a1fc65dce2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:31:74:18:8f:de:42:3e:c1:c6:a4:f3:69:d8:
                    e6:be:c2:3f:52:c1:a6:e6:cc:aa:73:af:17:b6:63:
                    10:24:82:9b:b6:a1:11:ce:1f:4e:7f:6d:06:d8:c8:
                    a8:00:a1:15:63:58:bc:11:0e:05:ab:d8:26:6c:38:
                    8f:55:0f:4c:d3:d5:68:31:93:8c:88:5c:59:1c:04:
                    b6:f8:a9:b9:0a:67:70:56:48:4f:3f:7e:40:80:86:
                    e9:42:a1:97:fc:0c:86:c8:3a:a7:6d:27:8c:ec:4c:
                    89:c8:5d:95:b2:29:8a:83:d9:ad:0c:f4:f3:42:fd:
                    a4:e5:9a:85:42:4c:b3:09:8f:89:dc:af:3b:b0:66:
                    33:9b:60:25:82:0b:62:ad:c1:e0:89:f6:e6:56:c4:
                    7d:c2:c8:71:96:be:da:58:e7:b0:ef:f8:83:4e:8e:
                    7d:c1:62:d6:f8:03:47:89:74:11:9a:b1:73:89:72:
                    68:99:fe:e0:e0:ef:af:66:87:77:80:5f:19:1d:0a:
                    f5:e4:94:e7:45:10:40:37:7a:6c:ce:7a:60:13:e4:
                    ea:c8:3a:7d:75:61:0f:77:ee:07:a5:cf:72:ac:3a:
                    d5:a1:96:d9:a0:b5:84:04:49:e6:4a:01:81:07:c5:
                    2e:9d:e5:f3:d3:79:b8:48:d2:5b:36:1a:49:96:de:
                    c4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6D:67:CC:45:72:B6:45:D9:52:D1:A5:CA:5F:37:9B:71:B8:83:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/15bd1940-76d7-3bbb-9fca-355cffcf29cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:51c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:ca:9e:ad:23:11:d7:2a:eb:ee:5e:48:3e:5b:fa:3f:af:ce:
         76:b3:78:95:db:e9:a1:ed:ef:b4:42:3c:4e:43:3c:b2:08:ae:
         f6:cc:2b:88:17:bd:52:d9:ee:34:93:ba:9e:b6:77:8f:79:31:
         84:a9:09:ce:fe:ed:f9:bd:74:b7:c9:8d:cd:9e:ff:c6:02:6c:
         cc:32:91:46:fd:58:ed:89:56:6f:fd:a6:4c:c1:64:c9:27:e8:
         73:b2:ca:5b:b4:1c:16:06:91:7e:1e:e2:c4:31:04:22:20:3d:
         b4:83:32:ea:27:79:be:91:bb:66:5c:b2:55:f9:b6:67:81:2a:
         af:e8:4a:f7:5f:53:c9:e2:81:57:d1:75:27:af:0d:c6:8c:ba:
         7c:44:a7:b7:90:3f:a0:fc:65:37:94:38:19:2b:5b:25:9d:74:
         db:75:4b:d0:84:ca:7a:29:92:d5:7b:03:ed:1c:f1:d5:62:ac:
         94:7b:29:c2:45:1d:96:ca:20:08:6a:88:02:f1:60:79:82:28:
         6c:00:fe:87:15:e4:9d:20:c5:5f:30:9e:de:a1:d2:72:0a:10:
         8a:69:89:01:db:2a:eb:93:ef:d0:a2:c1:07:9f:dd:2e:dd:03:
         01:f6:97:3c:c7:71:fc:4d:96:df:d1:c3:82:e2:34:98:ed:f8:
         01:d4:b7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:40:58 2026 by rpki-client