Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/51739d06-28a2-3da8-8a6a-16bfa13bf08f.roa
File:                     51739d06-28a2-3da8-8a6a-16bfa13bf08f.roa (raw, json)
Hash identifier:          C/8AkP4ImeJGf9oDaaS20TaRq4lFtLeB5tiYDUJ+h50=
Subject key identifier:   C9:96:C9:B0:1D:1D:43:2A:78:9E:A5:EF:4A:F3:83:BE:DE:EE:1E:F8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E5E7A01453A838D312E516A00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/51739d06-28a2-3da8-8a6a-16bfa13bf08f.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     4846
IP address blocks:        2001:470:4bc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:7a:01:45:3a:83:8d:31:2e:51:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=eca93984-4564-4e6b-ac32-08c4ffabb4dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:76:f3:58:19:34:a6:6d:67:1f:44:5f:f6:0b:
                    36:68:90:69:a4:9f:c3:5a:20:b4:41:ea:15:1e:98:
                    34:ec:5b:5b:0f:c7:f1:50:59:87:48:36:18:36:e7:
                    8d:50:1e:a1:39:c2:36:1b:e3:14:ea:75:ad:d2:da:
                    c4:39:fe:50:c3:86:43:20:46:72:94:dd:6a:9c:3b:
                    e2:dc:f0:64:5a:a5:6b:3e:74:6a:f4:af:b4:b2:01:
                    1b:57:0d:5b:ec:c9:8c:c4:bc:5f:4b:9c:b1:47:11:
                    d1:dc:ce:97:5d:ca:cd:f4:e1:2b:c3:50:68:c1:fe:
                    6f:56:03:a7:33:04:01:33:8f:26:b1:7a:a5:af:c8:
                    57:20:ed:8c:e4:e7:13:82:47:22:25:38:b0:17:61:
                    1b:8c:c7:62:d4:47:14:da:cc:c7:85:1d:ea:65:9e:
                    fc:8e:de:f0:31:a4:2f:79:bf:83:51:12:23:4b:fc:
                    6a:36:c2:02:8f:dd:7b:ee:8d:8f:f1:6a:1b:7a:c6:
                    ba:5a:06:19:d3:2c:6d:64:75:44:41:13:b8:67:bd:
                    13:80:4a:eb:55:ab:03:1c:cd:ca:de:71:22:f8:84:
                    83:8f:6b:33:61:aa:ff:87:ec:77:dd:ad:fd:68:a5:
                    1d:cb:07:48:19:91:d4:2e:0f:21:bb:ca:43:3d:cb:
                    1f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:96:C9:B0:1D:1D:43:2A:78:9E:A5:EF:4A:F3:83:BE:DE:EE:1E:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/51739d06-28a2-3da8-8a6a-16bfa13bf08f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:cb:03:13:b9:1f:06:d0:d6:1b:0c:74:58:e8:94:38:74:7c:
         9e:ac:33:ab:01:8a:59:64:7a:5c:29:8c:25:2c:55:77:c1:c9:
         d6:30:15:df:8e:7f:c5:72:51:6e:10:90:15:e7:4d:1d:36:65:
         61:14:78:56:88:80:d3:c5:27:cd:f8:d3:eb:ca:5a:9b:b7:3f:
         1a:bd:43:e4:69:43:87:e4:52:b9:fb:5b:ad:bf:0a:30:7f:17:
         08:dd:03:68:1a:92:01:27:02:2e:15:69:c0:01:d5:6a:04:38:
         cf:b9:ee:6a:7c:e4:b5:9b:53:2f:2d:fe:c1:7c:32:bc:db:41:
         43:12:f6:bf:ca:82:95:4a:c0:6b:f9:ab:cf:de:e6:63:99:57:
         b3:21:cc:72:66:de:36:34:0f:c5:a3:af:3e:db:c8:41:1e:0a:
         b4:88:d0:69:ee:15:20:a4:5b:3c:11:9b:39:d1:fe:28:f4:c1:
         35:02:ce:9d:b8:8f:6e:9b:d9:cb:15:7d:09:9b:c7:32:39:a1:
         36:e1:16:d6:37:53:52:f7:a7:c3:22:e4:e0:e1:9f:7d:70:21:
         41:aa:93:a6:ee:38:28:66:5c:c7:a8:35:fb:3e:32:7d:45:5a:
         8e:ab:2d:81:a0:1c:42:a6:5a:dd:dc:7f:25:99:f9:87:b7:51:
         34:b6:c8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:28:11 2026 by rpki-client