Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/50923e3f-f020-39d3-9f32-2eebd72fdaad.roa
File:                     50923e3f-f020-39d3-9f32-2eebd72fdaad.roa (raw, json)
Hash identifier:          aLL0wmvBCRbgEr4T1PQYnal78dYZQ9S+o+uLOHci1iQ=
Subject key identifier:   D8:8E:91:A3:10:CB:88:80:6C:AA:6B:71:C8:0B:70:91:5C:BB:9E:A1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E709F6EE0424577A430D1BCC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/50923e3f-f020-39d3-9f32-2eebd72fdaad.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     198408
IP address blocks:        2001:470:4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:6e:e0:42:45:77:a4:30:d1:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=16a8d4dd-df07-401e-8548-69bb55a54cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0a:0f:86:ac:1a:1f:44:31:86:02:f4:80:ff:
                    fe:a6:81:06:9e:0f:ea:f4:fb:37:24:0c:ff:9b:90:
                    2b:b4:28:54:38:75:e5:5b:a6:ce:fc:b6:dc:ff:71:
                    c2:8c:4c:45:6e:55:29:f2:eb:1d:40:32:41:dd:bb:
                    92:d5:de:0a:68:aa:c6:63:44:4a:73:4a:bc:b0:63:
                    9f:c6:ba:ca:32:c4:f4:cd:63:ec:df:c0:32:28:00:
                    29:4f:be:be:5f:0e:d9:ce:89:bc:6d:62:18:84:62:
                    c1:ad:04:1d:ec:2e:ae:b5:15:3e:30:04:0e:6d:c4:
                    a9:d9:6f:f9:d8:42:8c:cb:2d:2d:c9:a3:18:2b:5a:
                    9f:2c:ce:b3:8a:a9:e5:a5:3d:66:37:fa:3a:92:98:
                    f1:9c:bd:d8:a8:bf:59:2a:67:eb:71:8e:d1:e1:ae:
                    50:16:c9:6c:88:2a:09:48:4b:c3:41:ed:82:be:b1:
                    68:ad:2e:c2:77:1e:b5:82:df:85:54:6b:40:e3:9d:
                    62:af:60:9a:d5:8a:d6:11:ea:e1:c8:bc:9a:c7:ec:
                    57:e7:24:8f:f4:3c:06:ea:1b:2c:cf:e2:47:1c:bf:
                    ba:e1:e0:f8:4b:3f:54:d7:a6:d8:7c:d0:3c:63:16:
                    e4:e9:72:4b:c4:e4:3b:6b:99:7c:70:86:49:f8:66:
                    22:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8E:91:A3:10:CB:88:80:6C:AA:6B:71:C8:0B:70:91:5C:BB:9E:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/50923e3f-f020-39d3-9f32-2eebd72fdaad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:de:72:71:66:6e:d8:1c:0c:7c:92:d1:1a:1c:e0:49:8f:c9:
         68:1a:92:31:be:05:38:d0:2c:66:8b:dc:65:c0:b6:6f:47:39:
         cb:5b:88:ad:79:1f:fe:08:c5:b4:1b:3c:1f:c3:36:08:d7:42:
         bd:5c:57:b2:7c:f6:29:82:e8:e7:c2:a9:91:8e:83:e9:70:9d:
         3e:24:6d:99:9a:e9:2d:d7:ff:3d:66:42:34:2d:be:6e:88:45:
         f6:56:39:49:15:94:da:84:03:05:1f:41:8a:06:9e:c2:aa:1a:
         4d:94:f8:53:7f:67:a2:8c:29:4f:71:72:8b:b4:d6:c5:1f:46:
         93:c0:12:ad:3c:4b:63:40:6b:fb:32:af:86:79:a9:dd:0b:ed:
         c9:f3:96:14:89:28:57:1e:71:9e:36:5f:8e:a7:39:0c:02:b7:
         2d:7a:ef:a9:ac:ef:86:22:ce:a8:7e:d7:08:49:f2:a9:59:f6:
         ed:64:7f:41:18:ff:dd:a1:c2:56:68:20:ff:c6:e8:00:52:21:
         2b:6e:46:08:0f:4c:69:ce:77:ea:dd:99:63:aa:b8:b1:f4:b7:
         7f:75:e1:12:a1:98:83:38:c6:10:57:a2:c6:7c:06:e2:73:eb:
         32:4c:42:a0:a5:58:f0:9c:33:91:f7:19:72:1a:e1:ab:33:c2:
         8a:52:13:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:46:46 2026 by rpki-client