Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9e802ec-913c-3469-9c8a-e761c3349df2.roa
File:                     a9e802ec-913c-3469-9c8a-e761c3349df2.roa (raw, json)
Hash identifier:          YrDhFnhACM5K0WYt+xESSjB8BqQ/2Fuht4uGb5qHdlQ=
Subject key identifier:   F7:39:A8:2E:6C:97:18:62:AD:B4:9F:3C:CC:30:D8:DA:BE:37:7C:23
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC9227C896F0F3F54125DA80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9e802ec-913c-3469-9c8a-e761c3349df2.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     15577
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:27:c8:96:f0:f3:f5:41:25:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=74510c2b-df69-4de8-9a38-83f6b07e0327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ed:5b:1b:1a:a8:75:8b:9b:60:7e:81:67:09:
                    1e:c6:24:b7:3d:04:0e:92:38:3d:e9:ba:cc:bb:40:
                    50:8a:e2:a1:77:b2:f7:3c:21:55:06:5f:46:18:9d:
                    8e:13:14:5f:cb:86:41:63:ba:3d:4d:d3:df:2e:ab:
                    8e:a8:0b:2f:89:a1:0b:12:12:ef:47:8d:b8:da:e8:
                    1e:78:c1:cf:6a:bd:6c:ef:77:b5:cf:b9:17:96:7b:
                    43:5b:d8:b7:95:d8:79:21:65:d9:8b:ad:bb:a9:3d:
                    26:26:34:45:47:26:76:d1:11:ba:10:ce:08:9f:84:
                    95:2c:6d:fa:21:26:7d:30:98:f6:66:04:03:16:12:
                    b1:b6:ce:4e:af:2a:9a:98:6b:b0:4b:49:93:6c:68:
                    db:c0:65:3e:66:c2:18:32:01:2b:da:05:b8:b5:57:
                    5c:48:ec:dd:0c:0e:0d:07:2d:f0:b8:32:17:e7:90:
                    ef:72:19:7a:14:f4:ae:23:59:be:4f:7c:f1:a4:9e:
                    f4:7d:67:19:e8:6a:a7:64:8b:74:4c:c7:a1:9b:a7:
                    b7:b7:10:2a:4b:94:73:60:f7:13:a3:47:8f:6c:0d:
                    31:85:21:54:b4:ba:d6:20:04:8b:82:a2:1d:34:11:
                    e9:de:7a:eb:ee:95:e6:14:d0:dd:07:9d:a4:76:41:
                    9f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:39:A8:2E:6C:97:18:62:AD:B4:9F:3C:CC:30:D8:DA:BE:37:7C:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a9e802ec-913c-3469-9c8a-e761c3349df2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:98:a2:bb:d7:99:d9:3e:6e:25:a0:2a:a8:62:bf:d7:8d:ae:
         1a:26:00:c0:f2:22:65:8b:ef:c8:b5:aa:cb:51:51:1b:54:d0:
         5f:a3:15:79:53:e9:4e:a5:19:f8:2f:ca:73:28:c8:75:61:2b:
         6b:04:e8:86:6a:3f:e9:8e:8b:10:3c:04:e8:17:bf:13:90:2e:
         8e:d4:3b:0f:86:7b:18:7d:a8:0c:c0:75:dc:96:71:4f:69:74:
         e1:ca:73:ac:fd:9f:52:1b:5b:54:d3:e3:ba:cc:25:45:4d:f8:
         7a:df:20:0c:26:33:95:bf:2c:57:da:44:90:3c:4e:c0:a3:92:
         99:04:d0:df:90:30:10:94:c5:aa:9a:10:f9:99:9b:22:c2:82:
         69:e8:44:4e:f3:8c:5f:8d:5f:41:c9:b2:27:23:c8:85:e0:22:
         f2:91:3b:f3:e1:ba:21:c1:c7:c5:b1:9c:6e:be:e3:1f:7d:4d:
         8a:5f:53:38:68:a9:5f:ac:8a:3f:76:e0:8c:5a:fc:bf:e9:53:
         b3:9e:8c:ce:a6:50:9f:5b:a7:17:cb:72:ea:a4:1b:1e:9e:8f:
         e8:8b:4d:97:7c:0b:74:b2:1c:ab:fb:10:fb:6c:2c:b2:a2:d0:
         a1:da:5b:61:bf:27:dd:de:3d:56:a8:ad:b7:c1:ed:7d:d4:69:
         9d:58:f0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:56:28 2026 by rpki-client