Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f33952d-c6fd-37e3-baa7-aec441faac2e.roa
File:                     1f33952d-c6fd-37e3-baa7-aec441faac2e.roa (raw, json)
Hash identifier:          +uJ8UYXXLjl4kjfYPAEKGvpH8GkEyDv7h5XArRlfq7U=
Subject key identifier:   D6:50:9C:77:70:A0:03:8C:6B:3A:9A:4B:00:77:FA:CA:23:51:4B:71
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F4974775E08DF1B8F3D5EF940
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f33952d-c6fd-37e3-baa7-aec441faac2e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     40105
IP address blocks:        2001:470:52c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:77:5e:08:df:1b:8f:3d:5e:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=450fc968-1f5c-4aec-a050-5eb7a1149488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2c:5d:0e:71:a7:6f:89:4b:52:c7:12:5a:a2:
                    20:88:c9:03:8c:52:63:82:2e:99:8d:56:7e:2d:e2:
                    8e:27:2a:b7:9d:78:d8:a9:69:61:e9:0f:51:db:78:
                    27:b1:13:da:6b:05:1e:64:eb:a0:a5:a0:6b:1f:66:
                    65:c9:59:7e:bb:65:38:86:57:9d:a0:ad:85:f9:ca:
                    4f:c9:a5:8d:4c:0c:a3:6e:d2:2b:b6:9e:6f:03:0c:
                    30:fa:ca:0a:e4:f1:43:5a:cb:d2:ec:38:9b:a7:48:
                    19:83:9c:b4:36:34:22:d2:be:07:65:2d:07:93:c8:
                    0e:15:5a:07:9a:eb:93:71:51:65:99:23:01:67:25:
                    ab:4c:82:1d:29:30:32:eb:8a:ef:0f:d9:1e:85:6d:
                    bc:fc:bd:f9:5d:13:b6:fc:b2:be:85:ff:f3:2e:02:
                    7d:6e:bf:d2:7a:db:c0:74:0e:d5:9a:92:5f:17:da:
                    5c:b5:14:a2:2d:0e:1b:2c:ae:c8:7a:22:69:d1:a9:
                    2a:05:f3:d8:6c:49:45:d8:29:3f:80:79:03:cd:c2:
                    50:8f:3c:61:d1:14:0d:24:2c:98:cb:66:26:33:a1:
                    78:22:3d:84:0f:e3:bd:76:23:68:52:d9:ce:e8:7d:
                    7a:21:1b:36:c1:1d:41:57:29:ba:cb:3c:e3:8e:ec:
                    65:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:50:9C:77:70:A0:03:8C:6B:3A:9A:4B:00:77:FA:CA:23:51:4B:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f33952d-c6fd-37e3-baa7-aec441faac2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:52c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:6f:56:2a:61:5d:3a:37:19:d3:02:e7:14:94:eb:96:1c:e1:
         d8:31:75:ac:53:f4:6e:ee:93:b4:1e:0e:8a:ca:08:66:1d:41:
         b4:1e:b8:60:b8:50:23:da:5c:95:2a:b0:44:7d:60:b0:81:c6:
         1b:8d:5a:03:92:b2:30:11:1c:72:e3:25:e9:52:5f:c2:bb:17:
         8b:49:01:f8:5a:36:1a:df:af:44:7e:04:9b:f4:9b:20:f8:4e:
         bf:7c:80:54:61:72:fc:08:5f:4b:87:ae:a0:d1:96:b1:79:32:
         d3:f7:5a:6d:2b:0d:21:73:41:f7:ec:b2:a8:68:25:42:84:64:
         f2:be:71:ec:d6:76:dd:07:13:c8:0e:78:80:62:91:e7:f5:ce:
         21:97:ec:4b:36:96:42:8d:f1:24:db:98:e3:e4:2b:2b:28:b4:
         43:7f:65:7c:b5:0f:25:07:cd:15:15:2a:54:2b:12:c9:a1:cc:
         22:2f:b6:66:d2:65:7e:5d:3b:a1:9a:18:61:6a:35:7c:1a:d0:
         f9:12:69:4b:99:cb:fe:ae:aa:91:12:94:2e:de:9b:6f:07:54:
         a5:6f:8a:23:13:d0:71:2f:a9:bf:12:13:e9:74:77:12:69:73:
         d4:7b:00:12:84:96:58:fa:6e:27:0b:24:02:3d:b3:ec:6f:a6:
         02:a1:05:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:27:41 2026 by rpki-client