Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58c02109-f3eb-3e26-ac7b-4b5e885419f0.roa
File:                     58c02109-f3eb-3e26-ac7b-4b5e885419f0.roa (raw, json)
Hash identifier:          5n31yLjYq0t3BBz2wHSlp3APxPccarf66OESnuMt6MM=
Subject key identifier:   C9:F2:89:E3:7D:69:55:B0:E1:8E:64:63:A1:5A:87:5E:28:02:D6:4D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F497459896E147E44892973B8
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58c02109-f3eb-3e26-ac7b-4b5e885419f0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     394968
IP address blocks:        2001:470:4f6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:59:89:6e:14:7e:44:89:29:73:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2dc2228d-a4d8-4049-9e9d-44fd02e21089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:95:a1:0d:22:55:45:70:a5:11:a4:cc:25:b1:
                    17:0c:98:2d:63:1e:f7:d8:fd:d8:dc:4d:1d:6e:57:
                    1f:e8:02:2b:75:e5:00:95:d3:37:e9:5b:c1:1f:10:
                    b4:42:0b:de:60:69:28:a9:e4:49:bb:12:06:24:9b:
                    44:3e:83:9d:f7:d9:b3:ed:ee:d2:68:76:db:d4:a0:
                    19:b2:1f:fa:93:d7:52:1d:b3:fc:9d:73:d8:1e:5e:
                    df:f5:ae:40:fd:2c:7c:b6:68:14:4f:96:e1:4a:73:
                    d2:85:6a:fc:83:d7:e9:b9:4f:7a:22:91:8b:da:f4:
                    b9:8b:2c:4f:66:5e:d1:fd:16:7e:be:97:d2:62:00:
                    f9:e5:20:57:56:69:ab:8d:49:87:d0:1f:93:35:53:
                    84:69:c1:ec:93:31:d6:d2:f3:7a:d3:cf:9f:d3:39:
                    cf:06:e6:80:29:3b:e7:03:50:98:3f:4f:31:6b:94:
                    a1:2f:9c:ee:28:4c:18:84:f4:93:26:29:ef:2f:ed:
                    2c:47:1c:fe:d9:d6:13:13:bd:72:98:d4:d6:cf:aa:
                    34:06:9f:c9:b6:62:9c:4d:42:fa:40:89:44:9b:28:
                    2a:17:01:d3:87:6f:63:7f:34:5d:4e:a4:e3:6f:c9:
                    ad:72:48:7b:0d:43:a2:0d:dd:7b:b4:72:45:23:a9:
                    d2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F2:89:E3:7D:69:55:B0:E1:8E:64:63:A1:5A:87:5E:28:02:D6:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58c02109-f3eb-3e26-ac7b-4b5e885419f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4f6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:6f:9d:1f:4a:b9:27:3d:2d:fb:6d:3f:ce:39:09:e3:0b:7b:
         a1:d4:7f:f8:0d:75:d6:00:29:32:40:40:2e:bf:c0:d7:cd:ef:
         96:3f:e5:0e:35:0e:18:8d:6a:b5:77:cf:b6:13:6c:79:27:5b:
         4a:3c:d0:7f:48:9b:9a:97:95:df:92:c6:35:73:d4:c6:34:bc:
         3a:f1:01:e1:1b:b7:b5:a2:6e:81:d1:c2:c0:2f:7d:d4:c9:ad:
         e1:60:02:24:66:a9:2e:31:25:1f:8e:ee:d5:fc:fa:e3:97:ee:
         d2:4c:95:d8:09:ca:ad:fe:46:ea:23:1c:ec:3e:22:0a:71:ac:
         6e:fa:bd:5f:b8:e3:58:c4:65:1e:52:fe:36:06:20:43:45:4d:
         ed:66:4c:2a:b8:9e:6f:99:13:d3:9d:17:f1:76:50:78:34:fa:
         63:8d:a7:ea:e4:0f:8c:11:fa:86:5a:46:c4:db:8e:02:79:bb:
         15:17:02:1b:85:09:ee:7d:11:f2:cb:3f:a9:e8:02:bf:c7:90:
         21:1f:04:ff:a6:63:a2:48:79:3f:84:20:e1:b7:06:1d:57:7b:
         78:6f:bb:6e:ac:9a:02:42:4d:41:26:a6:42:cd:07:7e:99:94:
         0c:95:b6:99:8e:6d:83:0e:e9:44:9f:e8:c1:42:74:a5:ec:da:
         35:7c:ae:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:19:48 2026 by rpki-client