Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb57852a-d4ba-3c84-b55a-8c2f7ae14c4d.roa
File:                     bb57852a-d4ba-3c84-b55a-8c2f7ae14c4d.roa (raw, json)
Hash identifier:          CnFahUyrBqd+YQprWe5xQk4B/0TRbazOVICNExzjFNg=
Subject key identifier:   12:A6:D6:80:DC:EB:90:E0:28:02:5A:A7:B8:D1:7F:44:0F:B4:5D:24
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EA445261B251BFC5A5DE70700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb57852a-d4ba-3c84-b55a-8c2f7ae14c4d.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     26277
IP address blocks:        2001:470:5ad::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:26:1b:25:1b:fc:5a:5d:e7:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=3bb65b62-ce9a-46f4-afce-1b890f23f0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:11:b1:86:43:b7:b6:1b:3a:10:d8:9b:cc:60:
                    cd:2a:f0:04:57:3b:d7:76:55:5c:eb:0e:e4:be:3b:
                    21:7a:d0:33:02:ac:59:d9:6a:91:f6:86:b9:36:26:
                    35:30:96:37:7b:4c:49:df:76:ed:dd:97:2c:c2:1b:
                    6a:a6:ad:58:20:37:02:90:7e:3f:ac:26:69:e4:39:
                    d0:46:83:d8:b0:c5:10:4e:21:b4:d8:c0:00:40:d9:
                    83:05:ae:9a:68:da:52:84:bd:27:b6:67:1b:40:e4:
                    10:2c:62:46:ed:08:a5:04:c5:f3:66:b6:4c:38:4a:
                    23:9f:1d:76:76:72:37:96:30:76:fa:4a:1e:ee:41:
                    d7:27:71:21:2d:8d:c6:e9:c2:5b:4f:30:a6:4a:1b:
                    39:ef:fd:f6:54:95:b5:91:25:48:4d:17:1b:f9:87:
                    84:89:de:87:a6:b7:53:1a:68:5d:fa:9f:b9:5d:2c:
                    d6:16:7c:1a:b1:6e:9a:93:45:eb:34:22:15:a5:20:
                    d7:ad:6a:9f:28:cf:34:b7:bb:48:66:74:f8:d5:99:
                    31:54:bd:70:8a:fa:9c:e0:5d:28:d8:93:5a:b8:f9:
                    7c:bc:40:87:70:08:c8:1c:91:49:24:97:e8:4e:f1:
                    96:84:3a:c5:0f:8f:83:5a:bc:8d:fc:27:f3:79:80:
                    05:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A6:D6:80:DC:EB:90:E0:28:02:5A:A7:B8:D1:7F:44:0F:B4:5D:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb57852a-d4ba-3c84-b55a-8c2f7ae14c4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:5ad::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ce:ea:f1:79:8b:3f:4c:59:0a:5e:a5:a8:8c:ce:62:01:6a:
         48:c6:2d:2e:49:e5:0b:71:0d:b4:cf:50:ab:20:bf:15:91:57:
         61:16:b3:2c:db:a1:93:dd:39:96:d9:7a:e5:71:41:e3:d4:f9:
         ae:34:7e:49:43:dd:fb:81:c4:8b:49:7e:7e:b9:a2:29:29:97:
         b1:f6:b6:89:0e:7d:22:ba:1a:52:91:9d:bb:af:8c:f1:a4:2d:
         51:b8:9f:87:54:66:c1:ab:b0:7b:8f:8c:db:33:45:ed:99:4c:
         37:7c:00:9c:d8:09:9a:a6:03:65:90:d4:ac:05:6e:cc:50:eb:
         62:e9:66:b3:a1:8c:e2:2f:d5:f0:bf:c4:30:d5:24:86:07:b5:
         6d:80:5a:cf:31:ba:af:20:1a:af:51:0f:2e:20:e3:a9:c4:9d:
         db:5d:51:de:4c:da:b5:1c:11:a1:60:23:89:af:49:c1:43:2a:
         20:ed:76:ae:ff:8a:d7:5f:61:7c:a4:cd:c5:8c:d0:de:84:25:
         7f:24:43:2d:d3:10:b6:26:47:7c:ff:cb:08:3e:40:94:36:9f:
         8c:ec:20:9e:36:b0:97:56:79:02:69:09:a4:9f:82:51:07:1f:
         65:e9:9e:e8:f4:b5:52:10:dc:7b:51:ac:8c:1d:d1:fd:48:08:
         1c:c8:46:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:55:25 2026 by rpki-client