Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/36088fd4-f9c2-31a1-8a0e-440e2f397d16.roa
File:                     36088fd4-f9c2-31a1-8a0e-440e2f397d16.roa (raw, json)
Hash identifier:          aaN298AZMw/FX0wxUaR2nx0a6ylDLIeRK30EDwoUv6s=
Subject key identifier:   97:D4:09:28:54:46:2E:AF:81:63:F8:88:DF:D9:C9:43:79:99:12:7F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E709F710E1098FC9AEABBBBE0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/36088fd4-f9c2-31a1-8a0e-440e2f397d16.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     48082
IP address blocks:        2001:470:4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:71:0e:10:98:fc:9a:ea:bb:bb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=879feb6b-d7c8-480e-ad9b-b37dfaa837c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:22:46:aa:92:1c:c8:11:14:f2:ac:a0:ca:
                    4c:c0:f6:0d:30:fc:22:61:1a:55:26:9d:e3:95:b3:
                    77:7a:ab:7e:d0:0d:5f:37:77:0b:1c:f6:d5:c1:82:
                    6d:ff:2f:f8:9b:97:64:0d:ce:57:e7:b8:b1:9d:51:
                    82:64:98:ff:6e:03:00:b9:4e:12:b6:a4:eb:2b:9e:
                    b2:c3:61:ae:98:92:1a:b0:0e:5f:01:70:80:f6:25:
                    30:6e:98:7c:36:05:0f:16:66:33:d1:06:80:06:17:
                    fd:e2:90:0d:1c:74:2b:e9:da:b7:52:7f:89:5f:7e:
                    28:3b:49:c0:00:12:23:8d:5f:fc:f0:e9:c3:e8:58:
                    8e:d7:ed:7f:25:c9:ba:ba:b0:16:0b:6c:2d:3e:4d:
                    1b:f2:54:f0:85:65:68:5c:5c:66:cf:45:9f:c1:ad:
                    ba:e2:80:09:e0:5e:83:02:eb:ba:25:1a:88:64:64:
                    d8:c0:26:3d:19:08:42:21:71:28:d2:45:d3:8c:51:
                    fe:e8:b1:4d:ac:64:8a:2b:5a:a3:2e:3b:9d:72:8a:
                    e9:47:8e:67:b4:e4:ff:c4:1a:0e:3a:3f:9d:65:1f:
                    83:c5:83:3b:17:c9:1f:38:58:52:ba:51:38:c4:d9:
                    24:69:11:4c:80:bd:64:a5:55:40:33:d9:67:a6:46:
                    03:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D4:09:28:54:46:2E:AF:81:63:F8:88:DF:D9:C9:43:79:99:12:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/36088fd4-f9c2-31a1-8a0e-440e2f397d16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:fc:f1:a5:77:1a:7b:d6:78:af:e5:3f:6a:34:3f:ad:0c:8e:
         bd:3b:60:10:eb:4b:48:34:d8:10:50:fc:0f:ab:c2:74:01:13:
         61:a7:0e:12:43:6a:8e:a1:5e:65:a7:fe:fd:bd:09:33:6b:b9:
         bc:44:3f:34:91:fb:46:59:a6:fc:11:f5:06:dc:d9:4d:4d:43:
         e7:d0:6d:a7:ad:96:cc:c2:dc:84:8d:45:ad:33:f8:8b:bf:b0:
         1a:07:ba:9a:5b:8c:95:b6:46:c7:b6:2a:5c:c4:fe:8f:33:14:
         6a:34:c5:b8:bb:14:b2:9f:c6:b7:bf:c8:83:ce:1a:4d:5e:90:
         d4:8f:71:ac:45:c6:93:91:1f:59:9f:13:16:26:13:3b:d2:7a:
         fd:34:5f:66:9e:66:60:c6:07:e6:17:39:e4:f7:5d:69:e3:7d:
         88:34:23:f5:af:6d:c4:85:cf:1f:ca:1c:d8:06:0a:67:9c:91:
         5e:6b:fc:06:36:ff:a7:b1:2f:00:e4:4e:a2:de:f2:f1:52:82:
         c2:4c:e8:6d:27:af:55:31:e7:0b:c7:5d:8b:90:d3:2f:8f:bb:
         75:6f:53:d4:cf:39:b7:59:4c:0e:9a:13:de:b8:db:c7:e9:df:
         66:05:46:a1:fd:9c:fa:49:37:22:69:b4:31:71:31:cb:5c:a0:
         b9:19:7d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:19:53 2026 by rpki-client