Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c68e37e3-fe3e-31cc-bb1f-aa94dde4cedb.roa
File:                     c68e37e3-fe3e-31cc-bb1f-aa94dde4cedb.roa (raw, json)
Hash identifier:          zijGrc9LDUzfnCbFVTgfRT5Pp3sJYNjRN/PS3B41q10=
Subject key identifier:   0E:03:AC:F2:9F:CD:B6:4C:A7:A4:60:3A:FA:01:92:42:98:AD:E1:58
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F093D005B5B4FA7A748B05B80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c68e37e3-fe3e-31cc-bb1f-aa94dde4cedb.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     35075
IP address blocks:        2001:470:21f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:00:5b:5b:4f:a7:a7:48:b0:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=2c36ac63-288a-4fa3-bc13-00b5cadd4bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8a:a1:f4:91:88:4e:3b:22:a2:f0:fd:45:b2:
                    93:9a:97:ce:de:c2:8e:10:b1:b9:e8:83:c1:90:40:
                    fb:90:87:c6:3a:c0:58:25:3c:79:71:50:60:e6:7c:
                    8f:ce:03:3f:b7:48:73:d0:3c:17:66:94:63:91:05:
                    03:c3:30:b9:e7:55:cc:3d:ad:bb:bf:e4:9d:4a:ee:
                    9f:db:7c:19:cf:de:25:f2:c3:6a:e7:3f:ec:46:79:
                    49:fd:f5:18:d0:21:fc:9b:a9:2c:b4:ec:d6:3c:b1:
                    da:fa:98:d0:3d:98:3b:16:9b:35:2a:cf:ad:7c:db:
                    94:e4:71:d6:49:ea:c7:75:3b:8f:73:ae:e4:f4:e8:
                    81:5d:c4:8b:12:30:ad:4e:ec:c3:04:ef:e2:2d:47:
                    95:22:04:c9:7d:72:64:cb:17:01:31:3b:03:6b:cf:
                    8c:99:93:01:3e:bf:05:42:65:8f:fb:51:99:b2:71:
                    95:c9:31:6c:0e:40:48:9b:9d:51:73:85:26:4f:f2:
                    34:bf:fd:d3:3c:82:0b:29:3d:f6:83:24:a1:6b:6b:
                    d3:86:d0:1a:aa:60:e8:a2:ff:f2:16:c7:02:1e:3f:
                    03:27:68:c9:43:19:59:ca:86:f8:0b:da:99:98:e1:
                    e7:2f:8e:f8:18:5e:db:f3:76:e7:3f:e8:1b:0d:4b:
                    e4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:03:AC:F2:9F:CD:B6:4C:A7:A4:60:3A:FA:01:92:42:98:AD:E1:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c68e37e3-fe3e-31cc-bb1f-aa94dde4cedb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:21f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:ef:c6:f4:1b:80:31:11:7c:4f:20:a2:98:03:74:78:a3:f4:
         44:42:5c:b5:95:ec:07:5f:57:e8:36:8f:fd:5b:a9:43:91:48:
         8a:99:6f:71:ab:1b:19:3e:7f:e8:8c:98:5e:0b:96:32:2b:86:
         8b:6e:d8:ff:ad:7c:54:32:02:ee:fd:48:14:53:8f:58:80:9a:
         c4:24:60:48:53:40:b3:78:35:da:b6:96:36:7b:b4:fa:71:69:
         75:2b:48:c0:89:aa:17:d2:7f:03:df:51:66:63:89:ae:e7:2a:
         25:aa:2d:d3:9f:ec:7e:93:d4:95:b7:ad:77:41:36:53:2d:a6:
         28:4d:5d:7c:f4:96:43:17:3b:ee:5a:dc:6b:ef:58:29:e6:d0:
         8a:4b:a1:27:57:55:86:f3:7a:dc:2c:f8:18:98:8f:8d:71:1e:
         03:d4:11:a4:22:9a:b1:a6:56:23:ca:ca:53:c8:69:6d:1d:53:
         78:10:58:f8:64:1c:f1:1e:c2:1d:bc:0e:d1:6b:fc:06:6a:4f:
         36:58:4a:af:e0:11:2c:54:1d:1d:60:26:07:79:1f:4e:ea:99:
         a1:b8:ba:d5:35:1e:c4:58:ef:58:85:82:b0:c0:48:73:74:4a:
         17:dd:81:ae:0d:b8:b9:11:16:e9:1e:47:ad:68:77:b0:a7:24:
         6b:2e:17:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:55:39 2026 by rpki-client