Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6c830f48-aa9a-3553-9653-072921bdcde2.roa
File:                     6c830f48-aa9a-3553-9653-072921bdcde2.roa (raw, json)
Hash identifier:          3S0rLIKXaXhCVorTPOQYxSwgNnuICTQrAC3X14C8NLY=
Subject key identifier:   CA:1E:B2:C7:52:94:9D:00:5D:34:24:FA:CF:EC:36:59:FF:40:AF:52
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F4986C138A15F67BFB9B44600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6c830f48-aa9a-3553-9653-072921bdcde2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     394728
IP address blocks:        2001:470:2e6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:c1:38:a1:5f:67:bf:b9:b4:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bbbce33e-37e4-4450-a464-cb0f67eed996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:95:f9:d2:e0:06:65:01:c2:43:24:5a:b3:8c:
                    31:ce:6d:a4:6f:7d:62:a4:c7:5e:84:13:3c:05:e3:
                    59:7f:99:fb:09:f3:5d:6e:f2:1a:f4:57:44:3f:51:
                    26:49:62:6f:9c:56:0f:4d:ce:09:45:29:c5:42:89:
                    1e:a3:0f:07:ab:b7:cc:8a:f2:a6:32:ce:23:f6:f9:
                    ee:c4:b4:b2:d2:30:6c:aa:60:82:dd:e2:08:e0:2d:
                    05:a0:98:32:dc:cb:9b:28:85:b0:23:f7:c3:9f:51:
                    36:bb:3a:54:f2:0c:4e:5e:3c:ef:b7:c8:46:48:3f:
                    7f:0b:79:04:62:5d:60:c0:98:e0:58:b3:71:a1:f9:
                    26:e1:04:0f:c8:d1:a5:46:7e:c6:85:d7:b7:ed:69:
                    0c:60:27:a1:ee:6e:e5:12:c6:66:75:ae:cf:a0:dc:
                    ff:e9:6d:06:74:db:8d:97:f7:73:37:42:a1:0f:1a:
                    9b:d8:b6:fb:4b:0d:2d:e6:20:83:0e:bd:a5:51:0f:
                    9f:ce:f8:14:42:c6:5e:56:d1:4d:52:33:c4:79:8b:
                    00:43:5f:25:4d:01:c3:ac:68:d2:e0:aa:23:68:02:
                    53:ea:8f:76:06:2b:ba:fa:6b:f6:90:9e:43:2d:8c:
                    15:2f:1c:ab:36:e4:e3:33:0c:78:36:f0:4a:b7:34:
                    1c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1E:B2:C7:52:94:9D:00:5D:34:24:FA:CF:EC:36:59:FF:40:AF:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6c830f48-aa9a-3553-9653-072921bdcde2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2e6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:82:59:35:ba:8c:63:e9:8f:16:2b:9d:92:8e:f4:03:fc:f4:
         60:ad:17:a5:ce:c4:66:ec:a2:85:1f:b4:27:9e:73:ff:97:a5:
         8c:d9:d1:10:aa:ce:0c:5b:78:ba:bc:ff:91:15:35:14:6b:89:
         21:c4:d1:b7:80:3f:1b:4a:25:3d:9f:6b:17:a1:c6:2f:da:92:
         f6:1e:da:65:e8:41:77:75:84:62:87:10:c7:e1:97:83:a0:42:
         b7:97:4d:dd:88:89:77:26:46:9b:9f:68:4d:14:64:0f:c5:34:
         2e:8c:20:01:9f:be:61:3f:52:95:fb:d4:f8:c2:ed:35:9f:21:
         03:e3:03:cc:68:e7:09:d3:7d:6c:1b:b1:da:14:bc:34:52:98:
         ca:a2:f7:53:65:64:eb:ce:fa:76:ee:7f:64:ae:c3:ba:f3:cb:
         0b:b5:8f:eb:18:15:a4:e2:1b:2b:23:ee:1e:da:79:f8:b2:6e:
         ab:37:d6:22:61:ed:a2:97:0f:14:bd:a3:c0:dd:1c:aa:01:21:
         99:67:90:4d:5f:96:61:c1:8b:83:cd:e8:3f:d3:e0:04:2f:40:
         1d:2f:dc:07:83:db:53:ab:ad:3f:5d:07:43:8f:1f:2c:5b:08:
         20:38:45:27:e2:77:2f:6f:5b:26:29:da:e9:3b:74:42:80:2f:
         fe:d1:c7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:11:12 2026 by rpki-client