Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6e2ab756-8a74-3c8e-aca3-101efde09aef.roa
File:                     6e2ab756-8a74-3c8e-aca3-101efde09aef.roa (raw, json)
Hash identifier:          ECCiVDOlL0hWWk15GbN5sBWSi+CSa6nd0rgkRReCVmE=
Subject key identifier:   40:BB:EF:26:30:E3:79:29:48:23:0D:04:D2:8A:84:5D:C6:94:F1:5E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F62BC815EF5FA53E73000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6e2ab756-8a74-3c8e-aca3-101efde09aef.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     395717
IP address blocks:        2001:470:128::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:62:bc:81:5e:f5:fa:53:e7:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=8f644b75-98de-4117-ae95-5e7a85fee21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9c:49:04:55:85:e2:b3:fa:72:75:8c:0e:d7:
                    d8:cf:c1:93:f3:81:28:1c:7a:6f:19:06:7d:3b:a5:
                    57:e3:16:db:d3:b2:dd:ce:4a:df:21:db:26:4a:61:
                    c3:3e:c6:e8:15:bf:b3:dc:17:f2:26:6c:86:04:81:
                    7e:3e:da:6a:14:42:0d:41:57:ba:d0:19:de:6b:8f:
                    9f:82:16:c4:3c:d7:34:fb:ef:b5:01:55:d4:f0:17:
                    b6:8a:e8:7a:d0:b2:40:62:60:33:9d:e4:f9:a1:37:
                    88:f4:41:f4:45:db:b3:03:ba:ae:a8:ff:6d:16:f4:
                    dd:e7:29:5b:c1:34:7b:e8:ea:0f:c2:61:3a:8d:fd:
                    97:f3:74:d8:e8:b1:9d:79:bf:9c:01:56:30:0d:c6:
                    16:2b:43:5c:73:c5:f5:9d:d8:76:af:e8:24:74:e9:
                    26:dc:88:71:38:aa:12:08:bf:cb:9e:a9:31:32:bb:
                    b0:86:58:75:98:bd:f3:58:4c:ad:82:ce:1d:2f:68:
                    0f:be:b2:02:b6:eb:42:f2:d7:76:3a:f6:6f:cf:de:
                    82:3f:04:78:32:e5:58:7c:cb:58:0b:be:08:e3:34:
                    1c:a8:39:f4:9c:18:78:43:80:6a:2d:9c:44:92:6d:
                    02:c2:ff:2e:23:59:57:fd:2c:7d:2d:15:6c:aa:15:
                    66:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BB:EF:26:30:E3:79:29:48:23:0D:04:D2:8A:84:5D:C6:94:F1:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6e2ab756-8a74-3c8e-aca3-101efde09aef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:128::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ef:d6:32:cc:97:f8:cf:a1:21:66:6f:1f:54:80:17:12:21:
         a2:01:7c:a6:9b:94:c0:36:cc:4d:6c:42:b7:af:42:32:06:a8:
         0c:f9:39:8c:53:f4:2c:b6:e9:51:12:d0:19:e5:9f:6b:68:91:
         97:26:b4:ba:3d:42:8e:5b:ab:86:86:93:2f:5c:8d:df:1d:ae:
         a6:23:b8:2b:d2:20:10:cf:68:53:3a:8f:e0:ea:82:7c:36:13:
         d4:a2:c9:98:9f:84:42:28:fc:59:9d:ef:6f:21:48:b7:ff:7b:
         c1:4c:41:91:15:38:08:dc:56:1f:19:0d:0f:3f:78:99:82:89:
         00:3f:c6:4f:50:1f:3e:03:09:76:7b:22:8b:98:eb:80:ce:f1:
         58:f4:1f:16:93:d7:09:60:a4:f1:0b:a6:2d:e7:49:bf:ce:50:
         41:0f:b5:e3:3d:06:2a:7f:7f:97:61:92:84:8b:bb:e3:60:be:
         dd:fd:4d:ad:eb:b7:5b:18:25:15:47:28:e9:e9:99:72:07:c5:
         c7:f7:41:8c:91:8c:55:5f:72:b0:f8:5e:19:50:22:e8:e7:4c:
         61:54:0a:e0:d2:ec:8a:c4:bb:0b:ca:1b:ba:75:4a:c7:51:62:
         c3:a8:9d:b2:d4:31:49:10:12:31:9e:15:9c:90:4a:57:f2:b1:
         b4:08:0c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:33:14 2026 by rpki-client