Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/17dfd8b9-9e14-3b87-ad5b-0c7ac0187b5b.roa
File:                     17dfd8b9-9e14-3b87-ad5b-0c7ac0187b5b.roa (raw, json)
Hash identifier:          uQbXmG1+ph6MwF4AqHnV+rbTnp3o5V/MKDurVtj3Yt8=
Subject key identifier:   F2:37:CC:A5:4B:54:E5:06:BA:4D:E5:D4:4D:6C:13:8F:6B:B4:89:86
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC92184CB4721E800389C1F0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/17dfd8b9-9e14-3b87-ad5b-0c7ac0187b5b.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     12266
IP address blocks:        2001:470:2b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:18:4c:b4:72:1e:80:03:89:c1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=47ca8095-efc3-4ff7-946d-63cf4def940b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:96:3d:ea:4a:b6:28:41:6e:6b:43:c1:e8:86:
                    89:85:4a:a9:3d:ef:5b:8c:e1:aa:a4:d1:3b:8c:04:
                    91:17:09:18:89:bc:e2:6f:dd:6e:f0:b0:38:f0:a7:
                    71:74:74:81:d6:69:64:e7:79:2d:1f:09:9a:f3:2d:
                    1a:d8:60:36:9e:f8:53:a2:a2:9c:25:6c:e0:e5:bd:
                    0e:7d:b6:71:6b:e6:16:5d:01:9c:da:a6:a3:ae:fc:
                    89:3e:9f:db:64:9e:c1:fa:5e:58:ff:1b:f9:bd:bd:
                    d9:3b:bd:db:d8:fa:12:4d:0c:0c:2d:f8:87:30:e8:
                    94:3f:be:ed:32:ad:d7:5f:af:08:24:a9:8d:f7:a7:
                    a1:59:8b:8e:8a:98:de:b4:8c:6d:80:20:ad:d7:37:
                    33:3f:ff:8f:9e:19:af:a2:45:d0:64:aa:b0:23:9f:
                    a8:c4:fb:00:16:2b:76:18:9d:c9:ce:bc:c9:84:75:
                    6c:53:76:99:48:c5:1a:62:01:1d:4c:16:d4:73:f0:
                    d2:44:e5:59:a8:ed:c9:74:4a:64:cb:8d:7c:52:79:
                    74:ba:1d:be:f9:3f:20:81:35:12:fb:7f:c6:72:a8:
                    19:b5:98:cd:24:55:69:b5:ed:90:17:c8:12:d2:9c:
                    98:7f:78:34:47:f9:13:ea:4c:82:91:9f:dc:58:30:
                    67:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:37:CC:A5:4B:54:E5:06:BA:4D:E5:D4:4D:6C:13:8F:6B:B4:89:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/17dfd8b9-9e14-3b87-ad5b-0c7ac0187b5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:6a:03:e4:cd:8b:db:bf:c8:1d:41:e7:b9:05:d3:ef:7c:65:
         f3:68:32:c4:9d:00:fd:ba:8b:be:fb:c6:fa:17:c6:ca:4e:eb:
         c2:4c:b9:e3:7d:14:34:3c:6e:14:fd:e9:85:0d:5f:a0:f2:95:
         07:e7:7b:1b:70:1f:a8:e4:81:ec:2f:11:5c:c2:54:90:50:65:
         dc:d6:7e:72:2c:9b:83:f1:60:e1:c9:26:b6:c3:13:0c:53:d4:
         f2:4d:f6:a1:9f:1d:f6:87:d1:79:7f:31:b0:39:17:06:31:ba:
         41:5a:b6:7d:31:d0:19:d3:3e:1a:58:ce:29:cd:be:7c:e3:5a:
         6d:3b:ec:59:fa:a2:da:93:b2:c2:a8:3e:96:43:f1:c4:0c:81:
         b6:b1:a0:ea:95:6a:e2:13:92:c5:bf:38:92:76:b1:7b:03:0c:
         2b:49:75:f3:88:7a:1a:cc:7e:28:4c:2c:2e:07:31:9f:4e:16:
         59:06:d7:55:dd:0a:09:dc:46:31:62:a5:51:71:c0:6d:f3:0f:
         08:27:b5:d6:e1:8d:5f:4c:20:97:f1:ad:b6:f5:b4:8f:fc:dd:
         86:fe:c8:be:dc:38:6e:f0:0e:81:d2:81:32:48:fe:e0:83:b3:
         2d:c6:13:d4:32:07:bc:96:6f:6e:cc:c0:37:02:ff:fd:84:e3:
         3b:df:86:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:10:56 2026 by rpki-client