Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a52313a-3bcc-336e-89e8-437e2520d8e0.roa
File:                     5a52313a-3bcc-336e-89e8-437e2520d8e0.roa (raw, json)
Hash identifier:          CVQOxUyyXOzUs03IA6jQzVu9pTcyPoHkm2x12ouYqno=
Subject key identifier:   75:1F:BC:78:26:36:30:30:AF:FA:9B:EE:E5:C9:65:09:FE:35:53:91
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F13022F9501A65F7F6EB5E500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a52313a-3bcc-336e-89e8-437e2520d8e0.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     31452
IP address blocks:        2001:470:5e1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:2f:95:01:a6:5f:7f:6e:b5:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=ec562d9f-2e5b-411c-aabf-2162fe889897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c7:79:98:33:35:00:49:a0:be:a9:65:87:f1:
                    1f:ad:61:fe:c7:5a:6d:04:95:e1:97:36:34:77:23:
                    bd:bc:9b:66:87:47:a6:98:71:17:96:36:95:a0:e9:
                    51:61:a2:51:a3:6a:bc:20:17:9b:56:a7:a9:7e:8b:
                    b8:31:ba:35:7e:d4:86:4b:f0:65:6e:54:04:e3:80:
                    1d:08:29:c7:33:53:0b:44:34:bc:08:f8:f3:2e:3c:
                    79:10:98:89:aa:f5:f1:3c:ac:03:5d:32:e7:e9:fa:
                    c8:9d:13:f9:53:40:ad:40:79:bb:81:4e:4d:95:8a:
                    1d:69:32:e6:da:e5:2a:6f:ec:b6:1c:ee:71:4e:91:
                    7b:18:d1:7b:7f:36:a2:76:c5:2e:e9:27:2b:92:fa:
                    a8:20:8a:99:c5:d0:a8:8a:20:8a:1c:b0:26:e7:cb:
                    45:95:df:6e:87:f2:d0:9e:0f:1f:5e:aa:16:74:78:
                    42:9f:22:e6:34:d1:d2:8f:88:8e:90:f8:d1:55:94:
                    ec:f2:fd:55:13:b7:49:84:c7:72:54:36:68:4f:fc:
                    9d:ef:55:82:75:2b:3c:8f:33:63:80:5a:0c:d6:fd:
                    17:ce:bf:42:f4:bb:25:53:2d:47:34:bd:55:04:71:
                    fd:26:90:3d:ef:6e:66:fd:f9:39:b0:03:77:7d:1f:
                    6f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1F:BC:78:26:36:30:30:AF:FA:9B:EE:E5:C9:65:09:FE:35:53:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a52313a-3bcc-336e-89e8-437e2520d8e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:5e1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:09:09:86:95:68:01:65:d6:e2:0f:d9:c3:b6:c6:51:42:d9:
         02:2d:76:e6:df:e2:5c:7d:bb:40:d5:0a:a4:03:c3:04:43:16:
         50:29:64:7d:e7:10:ad:96:97:9b:89:04:d5:83:d0:31:4b:b7:
         ed:30:cd:64:c1:8e:95:06:23:36:3a:c5:10:9e:bb:46:5c:9a:
         a2:2a:64:46:de:27:c0:dd:b1:b6:a3:e3:fa:05:f5:2d:3e:9d:
         40:dc:19:02:ad:d4:2c:c6:c5:a0:01:8f:55:ce:a4:4d:dc:8d:
         5d:68:b6:a9:7d:3d:45:71:76:83:7c:b4:7c:fc:63:20:2a:48:
         8a:96:ae:60:c2:40:81:ab:cd:06:c2:5b:ce:e2:69:b5:ee:e5:
         7a:42:20:42:ab:27:56:af:a4:d6:ae:a7:c4:97:38:3d:d4:01:
         a6:0b:af:61:a3:6e:36:80:de:83:7e:bf:74:ce:c2:fc:ac:73:
         a8:21:55:c5:92:64:8d:67:cc:99:80:e7:cb:20:03:8a:a3:5b:
         f2:05:2b:24:53:94:24:90:ba:34:01:97:5f:d6:e9:9f:fb:9f:
         86:aa:93:a5:11:48:f6:ad:ca:03:11:2c:0e:51:c9:21:91:c7:
         5d:f5:d6:bc:62:55:3a:81:d6:4a:9a:69:e1:f4:63:52:bd:8a:
         70:44:81:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:56:05 2026 by rpki-client