Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0028bac0-09a4-3c52-b8f5-014585427ee4.roa
File:                     0028bac0-09a4-3c52-b8f5-014585427ee4.roa (raw, json)
Hash identifier:          haVOE5n5m7w4AlU0SyfhtoNZuY8kTbGLlkpVkoIViZQ=
Subject key identifier:   4F:BB:91:73:A0:41:2F:61:D1:66:D0:9F:52:B0:EB:97:9B:DD:9E:A2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F49892A6A86114ED2669AB880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0028bac0-09a4-3c52-b8f5-014585427ee4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401772
IP address blocks:        2001:470:484::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:2a:6a:86:11:4e:d2:66:9a:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6ac340e8-4754-41af-953b-e743ccf4a9a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fe:50:8e:7b:35:95:51:31:9d:af:f5:bf:ae:
                    db:82:19:97:66:ad:25:14:a5:63:8f:df:e2:7b:92:
                    2b:46:29:20:e0:4c:d5:62:03:b8:36:37:0b:8b:de:
                    b4:a5:dc:bc:69:75:75:32:ae:7b:f3:c1:1d:1f:74:
                    39:31:39:73:1f:c5:74:82:98:a3:d0:35:f7:57:ef:
                    5f:44:b4:23:14:8c:ac:57:8b:64:88:a4:a8:75:49:
                    a5:18:80:8f:bd:36:fb:74:35:40:d4:da:5d:96:4f:
                    32:fc:1e:69:74:05:08:f4:71:9e:b8:e4:11:00:bf:
                    7b:74:cd:5b:69:ab:d1:3c:5f:c0:9b:63:71:78:49:
                    33:3a:5d:26:d1:5f:41:19:cf:ba:a4:76:52:d2:f7:
                    43:98:f0:1d:bb:43:a1:06:bb:2a:0d:da:16:d2:4c:
                    83:9a:27:5e:b0:be:1b:6d:fd:30:e5:72:4b:6c:cf:
                    34:91:53:6f:a4:1d:f3:3a:4b:2f:e1:c8:8e:70:c2:
                    54:6f:b0:af:8b:12:aa:39:a5:f9:6d:dc:87:43:a1:
                    72:e9:04:bd:6a:58:86:f5:e6:23:38:ec:9d:d0:5c:
                    bf:7e:43:fb:f3:4b:4e:e2:60:c5:00:7b:34:ca:05:
                    34:8a:71:d2:9f:df:b9:b0:10:ba:4f:d9:57:b3:70:
                    96:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BB:91:73:A0:41:2F:61:D1:66:D0:9F:52:B0:EB:97:9B:DD:9E:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0028bac0-09a4-3c52-b8f5-014585427ee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:484::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:4c:85:e6:bc:e6:01:d7:98:65:4e:2c:c4:1d:14:ba:19:6f:
         98:59:31:f5:4f:bd:12:06:fd:4a:9e:13:7c:0a:85:17:fb:10:
         63:0a:3c:2c:29:18:bc:fa:66:b6:75:af:2a:9a:71:ab:48:13:
         9b:9d:f7:db:33:1c:e8:01:3a:26:3e:68:ed:88:2d:1c:fa:9f:
         fb:6c:a3:5a:29:a5:4d:ba:80:2d:0f:2b:29:5c:c2:3f:04:78:
         2e:8b:cd:b2:3c:22:cd:16:7d:d5:05:6d:c5:da:cb:1c:18:02:
         5b:7f:e0:46:9f:ae:3c:fc:e0:9a:01:e5:91:e1:f9:34:4e:03:
         8a:87:db:4c:8e:b6:f8:f5:ee:82:4c:75:cd:04:5e:75:ac:05:
         76:6f:69:7a:16:e2:ee:4d:3a:d7:bf:bb:c6:29:64:93:ba:9d:
         7c:41:1d:88:c5:77:19:43:56:5b:ba:64:59:e3:77:e0:16:d1:
         6b:76:22:a4:91:72:87:e5:aa:aa:13:f2:a1:f3:aa:e4:a7:62:
         59:17:ab:9e:37:48:49:b8:be:de:51:a4:10:f9:86:ea:26:05:
         d6:02:65:4e:85:6d:a7:23:ef:f4:06:4f:40:d6:19:d0:54:fa:
         83:e8:8a:6a:23:70:88:a2:5f:53:87:aa:d7:97:68:84:9c:1b:
         c1:56:01:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:04:00 2026 by rpki-client