Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6caee254-870d-31e8-804b-d29913cf722a.roa
File:                     6caee254-870d-31e8-804b-d29913cf722a.roa (raw, json)
Hash identifier:          +bV4Im0z6nJd7htgM+3zQBKMdukItHCdhDP+ztCvZa4=
Subject key identifier:   BE:80:F9:AD:A7:F1:F2:0B:91:53:85:E4:EE:97:A1:27:D5:F4:75:B3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDF5C931D3C1BBE1A8E67A280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6caee254-870d-31e8-804b-d29913cf722a.roa
Signing time:             Tue 18 Aug 2026 01:00:12 +0000
ROA not before:           Tue 18 Aug 2026 01:00:12 +0000
ROA not after:            Mon 16 Nov 2026 02:00:12 +0000
asID:                     13188
IP address blocks:        2001:470:44c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:df:5c:93:1d:3c:1b:be:1a:8e:67:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 18 01:00:12 2026 GMT
            Not After : Nov 16 02:00:12 2026 GMT
        Subject: CN=ccf42bdd-0375-4d8b-a093-ab1a7d1ad89d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d8:ad:39:27:60:c6:76:f2:90:1f:37:ca:59:
                    e5:81:e3:e4:86:b6:ad:ec:0a:16:cc:4f:5a:3f:e6:
                    ae:72:b1:9b:da:6f:74:17:86:46:43:f4:b6:0f:85:
                    82:f4:71:07:99:3e:03:14:4a:3b:3a:16:d1:59:2b:
                    b2:18:4d:6f:f2:25:ab:cd:a9:b0:28:b5:89:cb:0b:
                    f0:7a:cb:8e:00:3d:55:17:87:d3:89:80:2a:90:1e:
                    f4:bc:03:c1:3f:a0:c9:ec:5a:61:43:40:f5:c6:a6:
                    f2:21:5a:01:f4:1e:41:12:e1:ec:f7:87:a9:08:c6:
                    59:2f:d5:9f:d5:58:a7:64:03:e2:b6:b4:98:bd:62:
                    6a:00:9a:90:ad:10:6b:e6:c6:9a:e4:70:75:6c:1f:
                    1c:dc:81:16:63:13:f3:70:1e:12:3b:64:10:d8:fa:
                    7e:a8:c8:25:ab:7b:b4:2c:5e:20:0b:be:56:a0:9f:
                    41:2d:90:e4:1c:40:d9:96:ca:73:92:df:4f:d1:e8:
                    df:a1:e5:12:fa:00:b9:ee:0b:8d:93:f4:96:54:8e:
                    ee:e8:8f:52:2a:ed:eb:fa:e7:67:30:22:c5:3d:b0:
                    72:7e:51:3d:72:29:2a:5e:18:09:b3:0e:b9:67:10:
                    c6:af:b5:43:4e:d9:d4:7b:37:ee:60:d9:64:65:71:
                    9e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:80:F9:AD:A7:F1:F2:0B:91:53:85:E4:EE:97:A1:27:D5:F4:75:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6caee254-870d-31e8-804b-d29913cf722a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:44c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:82:2e:6d:80:ae:91:e2:a1:f6:22:5f:96:30:b9:cc:f4:b3:
         60:ae:7a:6b:84:60:3e:7f:4a:97:3d:fa:1c:c0:f0:96:93:5d:
         d0:e8:40:ef:68:ed:0e:82:c9:88:70:2a:f8:b5:05:cb:36:02:
         d5:fb:85:2c:b5:52:c8:f2:b5:e9:43:15:87:58:de:97:7b:9a:
         01:19:e2:15:2c:83:54:45:0f:8e:77:b8:c6:ea:1c:13:4e:02:
         87:f5:ef:9f:02:18:39:3e:a1:c6:e1:f4:b4:ca:89:1d:76:f0:
         4e:4d:6d:9e:0e:7a:e7:a7:ac:2b:1d:df:39:63:d8:dc:c5:fd:
         3b:a5:c6:6f:79:d2:ba:a0:7c:ec:d4:59:bf:97:64:b6:f7:49:
         a9:98:d0:4b:ec:a6:21:62:8f:a4:bd:98:6e:17:33:1f:a7:b2:
         e2:75:89:95:cb:0a:61:c2:e8:33:94:bb:b5:8c:ab:fa:5a:68:
         98:c7:4f:d2:59:52:7c:68:5e:1f:a0:1a:cd:7d:f0:04:03:53:
         9d:a2:38:4e:15:dd:79:c7:38:e1:2d:78:2a:23:a5:8c:3f:0b:
         c7:01:f0:32:cc:bb:d3:77:83:db:1a:42:41:80:51:0c:61:b7:
         65:38:ed:93:28:78:a6:40:22:48:b7:cc:e7:4f:94:a4:f1:b8:
         f5:ad:cb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:52:03 2026 by rpki-client