Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5984704e-5ddd-3766-a1a0-bdb0627bf40d.roa
File:                     5984704e-5ddd-3766-a1a0-bdb0627bf40d.roa (raw, json)
Hash identifier:          WkcHcR1UIG56mj0u6d7GEB4m5dbbiS4JA8PhkYZ4DDY=
Subject key identifier:   CB:D4:E6:F6:88:27:3D:0E:B9:00:00:64:82:60:4D:61:B8:30:92:20
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E4C54AF5B3B48155AE84AAD80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5984704e-5ddd-3766-a1a0-bdb0627bf40d.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     32709
IP address blocks:        2001:470:4aa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:af:5b:3b:48:15:5a:e8:4a:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=94bfd678-13bb-40d6-ad20-ebff64453197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b4:f1:77:67:ad:70:4b:c0:c3:17:e8:7b:6d:
                    8b:23:9c:49:f5:d1:d0:53:77:eb:0e:35:e4:46:10:
                    15:d9:c8:b7:69:93:a8:54:4a:de:08:a4:c0:2d:e7:
                    5a:8a:73:ff:ca:6f:d5:8f:14:ed:d5:86:cd:af:1a:
                    8e:45:7e:79:05:ae:65:cb:9a:2e:00:68:5b:79:36:
                    81:50:eb:44:04:7e:fd:14:80:71:6f:17:4d:2d:08:
                    e1:28:28:2c:d0:9b:33:74:b3:a8:c9:21:37:86:6f:
                    d2:ac:10:13:8b:29:65:74:66:29:46:8c:5f:d0:6a:
                    f8:76:3e:8f:7f:5c:56:bc:93:3d:95:d5:42:39:6b:
                    cd:90:78:8f:95:b4:5f:c2:1f:57:9a:9c:8f:4b:7f:
                    17:0e:10:19:16:cd:8c:33:c7:1c:49:2d:1e:97:f9:
                    a9:a2:48:d3:19:83:21:dd:d5:4c:65:7c:f2:40:cc:
                    0c:93:bc:82:7e:41:b9:9c:da:ca:d6:d6:03:18:a6:
                    6d:e7:70:c0:b7:0b:61:fa:ee:31:c2:1c:4a:55:9a:
                    15:4d:d0:d9:bb:60:d0:47:89:01:96:9d:69:ae:d9:
                    66:61:41:7c:f7:46:79:08:c9:6c:cf:72:d8:50:38:
                    ed:81:06:59:5e:60:69:d2:f5:ac:e4:46:ef:70:12:
                    76:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D4:E6:F6:88:27:3D:0E:B9:00:00:64:82:60:4D:61:B8:30:92:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5984704e-5ddd-3766-a1a0-bdb0627bf40d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4aa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:3f:26:89:4b:7e:ea:81:9a:b6:34:a7:d5:f9:d1:86:1f:0c:
         96:eb:b9:df:68:b0:15:5a:09:f7:82:5c:5e:19:5e:d4:bc:93:
         32:de:ba:09:02:73:e3:94:70:26:8d:53:af:e7:d8:ab:9b:94:
         63:fe:aa:79:ce:7d:08:98:2c:fc:88:d1:94:d0:0a:ca:ec:c0:
         9e:44:a1:b4:33:e4:a7:17:6e:2d:88:7b:d8:38:33:06:d4:63:
         db:4d:a0:f2:f3:c9:86:cb:d9:9f:24:7f:d9:ca:a1:5b:a4:aa:
         d0:37:0a:24:21:e7:a4:12:9e:a3:be:2d:ba:3c:93:cc:d4:77:
         b5:ea:95:05:97:d8:a5:cc:7c:fd:4c:15:1a:3e:cd:e3:51:22:
         9e:34:ff:a4:05:e8:9e:83:c2:e7:13:ef:97:a9:46:f2:26:d7:
         8b:4a:a5:a7:ef:ff:d0:bd:e2:b2:63:da:7d:e1:90:7f:df:71:
         5d:0d:49:41:55:a7:ea:9c:df:05:ba:e0:4b:46:89:cc:4f:c9:
         18:66:0b:eb:76:39:50:c8:35:b0:9c:b0:a3:8f:43:b8:cd:3d:
         76:c0:9d:0a:4c:cf:cb:39:72:d8:e8:86:b2:6d:b0:57:ab:90:
         8b:f7:c8:ff:7b:86:bb:a4:e2:a2:8f:0f:28:3d:58:38:66:63:
         43:08:fe:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:38:59 2026 by rpki-client