Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4ff0136f-20e2-3b44-9f67-46a114ee9d14.roa
File:                     4ff0136f-20e2-3b44-9f67-46a114ee9d14.roa (raw, json)
Hash identifier:          yqPZnB5SkDA39Pg6/lbe6o0D8fFwT0tUf1TSxPrVW30=
Subject key identifier:   75:58:46:43:5B:21:33:E6:52:C4:7C:41:47:32:E1:D1:A8:7A:C6:B6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F18978D3F7036B236AF2DD800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4ff0136f-20e2-3b44-9f67-46a114ee9d14.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     202306
IP address blocks:        2001:470:504::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:8d:3f:70:36:b2:36:af:2d:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=0764776b-7a7e-4385-bed3-5c8353056855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e3:b6:af:0f:ef:6f:d4:f0:70:40:65:ce:ed:
                    96:df:ee:3b:82:d5:b4:f0:b9:a3:b9:2b:57:d3:8e:
                    e3:d7:4d:88:aa:99:fe:a0:31:fa:a5:d3:d1:ec:9e:
                    7d:99:b4:cb:4f:49:36:fd:06:28:39:4a:f3:28:d1:
                    91:e9:5d:07:5e:c7:10:1f:2d:de:b6:e1:ec:9c:44:
                    0b:e7:0b:54:f7:de:62:18:2b:fe:4e:d8:d8:ea:5a:
                    99:a1:7f:c5:eb:57:15:7d:bb:46:1b:b8:69:62:c9:
                    54:da:e2:d3:84:3f:b3:ad:d8:ae:67:6e:91:7c:77:
                    4d:b7:cc:33:94:e0:15:ed:26:8a:58:63:34:c8:16:
                    c4:96:25:e7:61:3d:07:5a:83:62:af:23:00:d4:4e:
                    ed:7b:4e:58:02:e8:d7:97:3f:f1:1e:9b:ab:71:98:
                    13:72:b1:b1:88:a0:05:8b:e7:ea:26:dc:20:15:18:
                    f7:44:76:7f:7b:91:35:a6:02:b9:3a:c8:e6:fc:98:
                    16:95:d9:46:dd:c0:bf:12:b4:bb:60:4f:52:0d:39:
                    94:a1:d2:d6:d6:a4:f2:2c:f8:13:ad:95:d6:3a:92:
                    09:6d:da:f6:29:73:b1:32:26:28:28:4d:f8:fb:07:
                    ee:64:b8:f2:81:62:a5:13:5d:d8:15:72:8b:c3:85:
                    1d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:58:46:43:5B:21:33:E6:52:C4:7C:41:47:32:E1:D1:A8:7A:C6:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4ff0136f-20e2-3b44-9f67-46a114ee9d14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:504::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:2f:1c:e0:55:40:a1:1c:6b:c3:6c:64:c3:91:5b:b8:a8:dc:
         18:7f:cc:a5:6a:07:db:80:14:09:84:72:10:ce:42:b3:0a:37:
         9d:68:e3:75:b1:3d:a9:c0:ca:13:fe:ec:2a:85:fa:0a:64:2f:
         f4:e5:39:b8:3a:a7:9b:bf:cb:83:6c:99:ff:a7:f9:0f:38:6a:
         b2:44:21:85:b1:10:0d:81:03:e0:5a:80:c5:84:57:ea:f8:19:
         e8:43:6f:6a:e9:af:fc:2f:54:2b:a8:0f:59:e6:a3:90:3c:78:
         b3:01:0e:1f:b5:3a:e5:99:f5:18:06:81:fd:e3:df:73:8e:8c:
         a6:d2:dc:4f:8c:0f:9f:af:e3:e9:95:5f:ae:ac:72:16:91:3b:
         fc:a8:a8:5f:49:4c:64:3c:68:ba:1a:6f:b4:d1:c4:8c:37:42:
         35:ed:c8:95:3e:e0:00:1c:29:f8:d4:e6:e0:bf:e2:1c:b0:27:
         38:46:1d:1f:80:3f:06:e3:5b:97:86:7f:38:92:a1:16:a0:e5:
         60:28:ff:be:ed:53:ad:1b:ba:fa:0b:77:27:65:26:b1:36:77:
         fc:3e:49:94:64:dc:f6:07:db:5f:80:96:be:36:90:ee:64:a7:
         13:d2:7f:98:4d:1a:33:54:d6:99:9d:d0:24:e7:39:a0:7a:4e:
         c2:83:7a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:27:43 2026 by rpki-client