Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/635fbd9e-d2b7-3c25-a7a3-d25439e20c53.roa
File:                     635fbd9e-d2b7-3c25-a7a3-d25439e20c53.roa (raw, json)
Hash identifier:          +eAM3d37hQNaExcZdurWPHPxm4OFQEPO2YZ+IhyttgM=
Subject key identifier:   6C:C5:49:22:0E:9A:AB:AF:C7:FE:68:13:C5:D8:4E:E1:C3:73:78:79
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F4972EEE2DCC1BE25E4EC4080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/635fbd9e-d2b7-3c25-a7a3-d25439e20c53.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     28398
IP address blocks:        2001:470:3a6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:ee:e2:dc:c1:be:25:e4:ec:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=55d9f066-a108-41f9-bcd2-02294c5f14a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1f:33:cd:96:e2:fc:fa:06:67:6e:71:8d:b4:
                    26:b3:51:2f:ec:78:fb:b6:85:ed:dc:74:8b:58:3a:
                    b6:27:83:43:61:1f:f8:26:01:e7:a5:a6:8e:53:e8:
                    83:9d:a7:20:0d:dc:ce:ee:6e:f0:3e:cb:42:4b:98:
                    83:ce:c8:46:a1:a2:90:43:64:ec:8a:ae:ed:b2:8a:
                    21:fa:ae:db:5c:af:4d:bb:3e:13:25:14:0a:2d:c5:
                    b0:d7:3b:54:09:aa:a2:cb:80:ce:06:5b:fe:a6:2c:
                    f6:36:57:34:14:99:cd:e8:5c:35:4d:03:d4:1c:ce:
                    87:f3:b8:c3:74:e1:be:1c:5d:a1:67:3c:d0:a5:c9:
                    bd:f5:7c:0b:c9:c6:86:2a:06:09:c8:33:20:1e:3c:
                    eb:9a:f9:5d:2b:74:68:70:a3:91:81:4e:c2:e8:ac:
                    e4:c0:fd:96:e0:22:bb:e3:90:95:d5:28:6b:48:bf:
                    75:8e:d2:ad:f0:04:e1:cf:10:3a:00:21:eb:a0:be:
                    45:a7:ba:7c:4e:ea:45:97:8f:50:07:30:1c:39:1a:
                    27:79:af:b2:c8:27:f6:b1:d3:f4:bb:69:11:3f:ed:
                    53:b6:b1:03:1f:d1:4d:ca:2e:87:b3:a4:27:d4:54:
                    56:7e:af:79:25:99:53:0e:63:48:d1:df:52:44:b3:
                    2d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C5:49:22:0E:9A:AB:AF:C7:FE:68:13:C5:D8:4E:E1:C3:73:78:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/635fbd9e-d2b7-3c25-a7a3-d25439e20c53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3a6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:35:2d:99:ab:32:2d:83:59:ce:6a:dd:8a:9e:c4:23:55:a6:
         96:c9:a0:60:34:21:b2:0a:27:86:0e:ba:b5:3f:4a:89:a1:95:
         1c:d9:8d:51:89:8d:94:a1:f3:77:2d:9d:ac:5b:00:14:3b:dd:
         be:45:8e:b4:a5:a0:b5:7d:d0:74:ac:50:95:d2:49:62:3e:b4:
         89:0c:56:7d:a3:78:ac:98:11:0d:f0:37:2e:35:9a:49:80:3e:
         bd:1f:cb:4a:6a:0a:54:ef:65:7d:72:7d:e8:ba:59:69:d3:bf:
         bd:6a:27:1e:be:68:81:6e:d7:88:7b:88:47:1b:fe:a8:d4:e3:
         ba:ff:98:86:91:d2:93:ab:06:1a:30:d3:3b:34:3d:16:d3:10:
         ad:5e:08:e3:42:03:6d:16:3d:1d:e6:2e:b3:44:07:11:fa:7a:
         0f:be:3a:b9:ca:d1:e8:04:c4:d5:b4:70:a1:c5:49:a4:2b:4c:
         0c:92:4d:96:55:70:d4:44:cc:ff:e3:d5:d2:05:42:3c:20:3a:
         cc:0e:86:da:12:59:8c:35:b2:47:ba:93:78:f2:54:fc:8c:1a:
         3e:f7:46:6c:f4:ad:9d:19:53:ad:a1:78:00:a1:4d:7f:58:4e:
         55:ca:34:f8:93:60:41:4c:33:db:84:47:55:3a:c0:a5:ad:f5:
         ae:44:8c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:09:48 2026 by rpki-client