Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0044e76-f3b1-3724-9750-1131ab4b8be3.roa
File:                     d0044e76-f3b1-3724-9750-1131ab4b8be3.roa (raw, json)
Hash identifier:          1PWPG2rXft/7onyNLWOS1qiWbJWEfcnlElFOIzVvUnc=
Subject key identifier:   00:49:F9:41:E6:79:5E:2D:34:0E:FD:C0:16:62:0A:67:15:C8:E2:BF
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EA788366021F63B680A1BC380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0044e76-f3b1-3724-9750-1131ab4b8be3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22018
IP address blocks:        2001:470:421::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:36:60:21:f6:3b:68:0a:1b:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=032e1618-12d0-4dbd-8db2-44bba46fb261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:98:44:fd:c4:50:0b:cc:6d:db:1e:10:d9:c7:
                    b6:e4:76:e0:1a:e3:d8:5e:26:61:8e:06:92:77:61:
                    35:05:1a:32:91:82:71:bf:8d:9e:48:81:ae:d1:f2:
                    b9:6e:0e:08:f9:d6:e1:51:5c:73:e7:4b:ed:7e:a4:
                    db:57:1f:8e:a4:1a:31:42:cf:a4:fd:be:ae:70:c4:
                    e7:78:7e:80:aa:ec:bb:a5:95:ba:95:d4:ad:07:12:
                    5f:9f:d2:64:47:95:19:f3:4f:29:f1:29:77:19:57:
                    12:32:54:95:ba:88:86:6e:c1:e1:69:10:11:d6:8f:
                    ac:cf:d5:62:35:bd:e2:c1:58:56:14:f2:ed:fd:cd:
                    90:28:96:8c:eb:08:a7:6c:d5:d0:a8:17:bc:81:be:
                    01:63:8f:7c:93:c2:4d:fa:27:37:e5:84:84:87:5f:
                    b4:81:1f:87:26:58:a7:f8:11:93:48:bd:88:d9:be:
                    1e:74:3d:5b:3f:3a:f7:75:e9:c6:cc:5d:81:28:21:
                    01:4b:aa:67:53:0d:4f:51:0a:e9:0f:9c:35:b4:de:
                    a1:2f:f5:c7:55:c1:88:ab:63:9c:81:ac:53:39:cc:
                    72:28:b6:b6:18:e6:9b:5f:15:45:ae:77:dd:23:0e:
                    b1:24:c6:eb:40:17:94:9a:d9:ab:d3:e3:74:e7:d2:
                    61:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:49:F9:41:E6:79:5E:2D:34:0E:FD:C0:16:62:0A:67:15:C8:E2:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d0044e76-f3b1-3724-9750-1131ab4b8be3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:421::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:9e:07:80:b7:f2:68:c4:d3:1c:72:be:9a:c0:a6:40:ad:71:
         01:a2:e7:6c:66:40:04:cd:0d:ec:36:36:af:6d:76:61:34:2c:
         eb:51:0a:f9:8b:97:f9:8b:08:eb:48:dc:c4:63:0c:9f:43:cd:
         31:a9:d6:b0:d0:52:fb:13:c1:f0:7c:bd:ee:3f:aa:fb:33:03:
         d2:09:01:8b:69:c0:0c:de:bc:be:be:cc:96:90:b2:ff:45:1b:
         90:b6:e3:2b:d3:3f:17:e2:e7:81:07:67:a5:cc:39:08:02:02:
         94:21:d5:ad:be:8f:7c:03:9c:7a:5d:00:9f:d2:37:2d:e8:29:
         79:27:08:e7:4e:19:fe:de:fc:37:52:4d:51:33:af:cc:fa:b2:
         41:76:a8:72:86:2f:10:fe:e8:02:a3:74:6e:c7:6d:e4:d0:1c:
         59:d0:5a:ae:44:a7:b4:e1:e9:85:b2:6e:8c:7e:78:2a:f8:3b:
         f8:f3:19:05:61:48:1f:e6:c0:32:8c:7b:d4:6c:02:94:a8:b1:
         b6:c5:51:26:d0:4b:32:a6:30:50:34:80:c8:ba:08:1f:04:04:
         30:21:ef:45:0e:1b:af:43:62:75:79:22:4f:c2:ac:ee:64:bb:
         d4:5e:53:28:ce:12:8c:0f:71:2a:21:e0:74:77:e3:63:87:fc:
         16:0b:4c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:47:14 2026 by rpki-client