Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6f48079d-ee93-36f6-8a89-6030c6824691.roa
File:                     6f48079d-ee93-36f6-8a89-6030c6824691.roa (raw, json)
Hash identifier:          kAvBd7ztzbtAlDfSfaoGY4vj+2/DJOMn/dEZAXQUSdE=
Subject key identifier:   9E:59:79:FD:0B:92:7E:F4:3C:49:DF:3E:15:99:9D:92:F7:5F:14:90
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F3E48093257EA6E0153EE0720
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6f48079d-ee93-36f6-8a89-6030c6824691.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     394545
IP address blocks:        2001:470:20a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:48:09:32:57:ea:6e:01:53:ee:07:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=c47db868-08f9-4c0a-8b4b-72af68b5b8c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:35:61:16:3c:98:d3:b5:8b:c5:6e:d4:f8:
                    69:f7:d1:28:cc:a4:a7:e6:89:37:29:f1:8e:6b:67:
                    10:64:f2:28:45:c5:4a:12:17:e8:b9:24:aa:26:ae:
                    0a:7f:3e:0e:0b:5a:ec:fb:e5:66:b5:7c:d6:02:56:
                    6c:82:f2:5b:53:40:30:bd:78:fe:d8:ef:25:19:1e:
                    2c:44:b8:a8:c6:a2:a4:a6:33:56:06:fc:27:21:c5:
                    06:9d:3a:a1:55:4f:d5:bc:1f:83:d7:42:ed:f1:b4:
                    bf:77:44:8a:85:43:82:45:85:a2:f7:52:fb:fb:c8:
                    30:b9:0c:82:b7:6f:0b:46:77:54:1d:93:9c:9a:0d:
                    8f:c9:9f:be:fa:a9:c2:e8:20:d7:0e:2f:e9:90:89:
                    78:86:a6:df:06:8c:cc:85:ce:5d:dc:e7:9e:49:e5:
                    1d:3f:15:8c:50:ad:14:81:4c:45:ae:bd:29:c3:23:
                    f0:5f:84:c8:22:01:9c:6d:e5:49:39:96:08:6a:58:
                    42:5c:c8:7b:a0:9b:ce:08:e8:84:f7:61:65:83:2b:
                    72:31:5c:94:5b:fe:f9:aa:4a:3b:9a:b5:d4:f6:16:
                    3d:c9:88:12:2b:2a:27:ca:a6:68:0b:23:55:5a:f1:
                    87:cb:af:1d:28:c7:b1:35:be:2d:39:55:12:08:c4:
                    3f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:59:79:FD:0B:92:7E:F4:3C:49:DF:3E:15:99:9D:92:F7:5F:14:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6f48079d-ee93-36f6-8a89-6030c6824691.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:20a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:20:ff:19:fc:29:00:f8:76:e3:4f:fb:86:37:34:a5:47:cf:
         5c:2b:80:41:8f:bb:32:81:4c:e2:3e:1d:f0:d6:3e:70:e9:65:
         c7:13:d3:b5:a0:5c:6a:da:08:9f:c2:bb:41:0b:85:32:df:cd:
         95:05:0c:99:fc:a8:64:7d:03:e5:51:01:eb:f5:44:4a:5a:20:
         44:e6:a1:3b:fd:56:23:a3:2e:e2:a2:3f:c8:55:4d:6a:fc:62:
         91:60:8a:8a:8b:b8:a2:7e:02:d9:66:99:b4:b6:d7:4f:e4:40:
         a3:db:ab:2f:a9:d1:72:f7:13:89:08:22:29:aa:e9:98:1e:22:
         7f:43:7f:7d:37:66:a1:59:83:a7:1f:4d:30:37:3d:be:09:61:
         79:22:e6:21:14:9d:56:b8:94:82:a5:f0:d8:5e:da:f8:bf:78:
         bd:7a:6a:11:de:d3:90:ca:06:e8:99:1e:21:3b:61:d5:eb:c9:
         28:6c:d2:e0:3d:ac:93:25:8f:8f:ed:f3:d2:d0:72:b1:51:d9:
         94:d5:93:22:16:4f:a6:cf:df:11:47:9d:0c:1d:2d:32:c0:3a:
         c0:06:3c:4d:22:a8:75:d4:c5:38:4f:a1:87:51:36:72:22:0e:
         6a:29:32:22:c9:fc:55:b9:8c:18:6c:a8:2f:92:3c:c4:92:22:
         6d:09:07:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:24:39 2026 by rpki-client