Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2599686e-5956-3d32-94e2-2e0c93563c44.roa
File:                     2599686e-5956-3d32-94e2-2e0c93563c44.roa (raw, json)
Hash identifier:          O7UwpylszSb2zzq0PBVOvV3Hy858kVB9wCIa6GyfC14=
Subject key identifier:   78:E5:78:55:7B:C6:0C:39:A7:81:8C:0E:C1:CA:92:D1:2A:51:01:1A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F3CE2829C754535D3972C4BC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2599686e-5956-3d32-94e2-2e0c93563c44.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     3245
IP address blocks:        2001:470:431::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:82:9c:75:45:35:d3:97:2c:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=0a0197a5-ba5e-4e28-8a92-8885a6a5ff7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f3:d0:b1:df:75:1d:f9:36:22:73:c8:bc:5f:
                    b4:95:87:e5:7e:45:bf:5d:e8:b3:b9:75:7c:6e:9c:
                    34:58:8c:92:8f:fc:bb:e5:c7:f7:eb:90:f6:ad:bd:
                    c5:89:47:96:57:b6:7b:90:ae:d5:c2:3e:17:62:a8:
                    0e:4b:5f:3d:c6:be:1d:66:28:67:4c:7a:20:a9:bb:
                    6a:de:11:d9:2a:a3:7f:aa:9a:6e:ef:67:7a:6c:16:
                    2f:c1:48:fa:3a:47:88:04:2d:61:cd:60:65:c2:33:
                    c4:fb:1f:6f:a5:6f:6a:9c:75:1e:81:3e:c0:43:35:
                    77:95:2b:fd:5d:19:ab:0b:14:c6:09:21:9b:b2:c0:
                    c2:39:c2:5e:a6:58:46:21:1f:0d:f4:b6:07:ce:88:
                    8c:c0:2c:92:15:79:dc:f0:97:0e:76:a0:ab:1d:e7:
                    20:89:e5:7d:85:36:08:f7:c5:5a:25:c6:67:54:d1:
                    da:d9:0e:d0:3a:15:fe:b4:67:d9:df:22:09:d1:60:
                    8e:1f:9f:d8:ac:69:48:68:56:54:71:cb:f0:60:d3:
                    9b:2d:1a:7e:ae:68:bc:82:6c:fe:02:fe:fe:49:a0:
                    07:18:af:60:0e:17:c9:74:c0:5b:a9:cd:c1:3e:fb:
                    84:3a:ba:e6:20:3f:e0:eb:92:76:a7:82:a0:a2:03:
                    61:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E5:78:55:7B:C6:0C:39:A7:81:8C:0E:C1:CA:92:D1:2A:51:01:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2599686e-5956-3d32-94e2-2e0c93563c44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:431::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c3:00:9e:7c:e1:2f:c3:b0:f6:f8:e5:54:7c:2a:72:87:82:
         6a:3f:ef:9e:f0:8d:17:14:58:28:38:3e:6b:0b:14:c4:71:12:
         89:73:47:e0:1e:bd:d2:ad:bb:c8:29:db:2b:b2:85:ef:08:34:
         68:7f:70:27:73:dd:c8:d7:db:53:fd:46:db:82:0a:5a:f7:16:
         f6:54:e6:ab:86:14:a2:4c:38:f0:c5:99:90:9f:1b:a6:c7:00:
         97:5a:fe:a9:28:32:92:0c:32:bd:53:c7:3b:af:9b:4b:85:11:
         c5:75:7e:18:7a:01:e6:6f:6f:a3:30:e8:15:5f:bc:dc:50:53:
         23:4f:94:a9:5e:16:2a:ac:85:85:4f:24:e0:3b:02:de:39:8e:
         19:27:bb:68:1e:9f:75:d1:b0:42:bf:97:eb:2f:ae:26:55:28:
         b7:53:45:3a:16:8e:bd:d2:ab:39:5d:c6:ae:a0:f6:39:35:f3:
         b4:e4:c5:ff:0b:30:40:3f:dc:34:4b:d0:8c:89:0d:8f:95:1f:
         9a:07:62:67:8e:07:6b:8a:e1:cd:3d:36:93:8f:ee:11:f2:ec:
         1e:e1:ae:49:18:3a:3f:a3:d9:40:dd:79:13:8f:5f:44:56:99:
         e1:9b:33:33:ab:7e:0d:3e:22:f6:5c:91:0e:da:57:df:05:01:
         86:bf:13:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 07:55:16 2026 by rpki-client