Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7918c757-7671-3db0-a3c8-e17f8bb3e439.roa
File:                     7918c757-7671-3db0-a3c8-e17f8bb3e439.roa (raw, json)
Hash identifier:          2u1iJSPyvqFIIBw7mmxJsywXIDnBxlwnhfiTFqqUTW8=
Subject key identifier:   87:B3:10:04:86:E9:63:8F:5F:8C:2D:E5:01:1C:CB:F5:62:F5:14:35
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F498774EA3EB13C91282C5800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7918c757-7671-3db0-a3c8-e17f8bb3e439.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     402479
IP address blocks:        2001:470:4d2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:74:ea:3e:b1:3c:91:28:2c:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e122bb01-0325-4d6b-99a6-e6419825f63d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:06:fe:28:50:61:cd:d5:2f:0a:aa:cd:c9:7d:
                    14:a0:40:ea:c3:1e:e0:c7:5c:15:8d:e9:40:8e:d7:
                    2f:be:84:22:ff:14:ef:e3:10:88:49:5f:b6:c4:88:
                    c4:66:d3:e0:ca:de:39:d8:c7:b8:ff:c8:4d:44:97:
                    b7:16:06:a6:7c:19:9c:d7:33:66:36:04:26:d7:42:
                    88:05:12:a3:52:c1:e3:06:28:d3:3f:a5:ec:6c:01:
                    61:e1:bb:ba:9d:a5:6d:f2:0f:5d:ec:70:74:c0:10:
                    b8:eb:3a:54:ec:14:47:03:2e:81:6a:d8:c6:cd:8d:
                    bf:29:1e:d7:9f:ce:01:11:b3:bd:77:d0:a4:c5:32:
                    94:4a:dd:3e:d4:ca:d5:ae:db:57:a5:b7:a5:47:bf:
                    cc:5e:bb:3e:3d:36:7e:98:f7:ed:2e:f0:58:96:d5:
                    eb:de:a7:e7:f5:84:30:53:00:17:84:a4:e7:17:46:
                    71:15:81:13:f4:15:b6:94:c6:8d:5d:cd:c6:63:68:
                    68:eb:be:07:ce:f6:ba:b9:f0:48:36:95:e0:35:a3:
                    2b:f9:e6:ac:03:e4:bb:37:ba:02:4a:72:ad:85:52:
                    4a:0a:7f:af:d7:7f:ad:09:fa:60:c5:49:97:7f:48:
                    93:80:6b:72:e7:4d:0f:8b:81:43:92:a5:8e:45:f1:
                    1b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B3:10:04:86:E9:63:8F:5F:8C:2D:E5:01:1C:CB:F5:62:F5:14:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7918c757-7671-3db0-a3c8-e17f8bb3e439.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4d2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:ba:97:18:c1:90:0a:2d:1b:d3:82:9e:c2:f8:cc:b4:aa:e4:
         07:1a:94:19:ca:b8:10:0a:a6:92:1c:62:ea:d6:de:24:2e:02:
         d8:86:88:e0:42:cc:39:71:d6:e0:7b:ec:9b:2c:12:ef:8d:76:
         53:9a:38:d2:6d:01:b4:81:0a:ab:43:69:ca:4e:f1:88:6f:35:
         22:28:3d:d1:51:ef:d6:ad:e1:36:2e:31:12:63:62:0e:69:75:
         44:8a:89:e7:c8:85:f3:ad:4d:e2:22:ed:c9:79:20:00:c0:51:
         d0:84:35:21:32:9e:81:84:1b:96:5c:25:51:1e:90:22:1d:91:
         68:9c:50:2b:20:f2:db:37:c8:38:ca:d7:b7:c1:73:b5:e3:38:
         0b:d2:63:0a:70:a2:99:6e:32:a7:4e:9a:9c:69:f5:8a:ca:df:
         49:dd:77:ac:8a:89:c3:ec:c8:04:60:51:00:87:53:b5:d8:c9:
         28:f7:00:d1:3a:73:40:4a:bd:d7:36:67:7e:c4:8a:a6:80:52:
         f2:9c:29:25:56:d7:16:4d:64:26:d3:2c:95:98:25:4e:81:60:
         b2:0a:3d:0c:7a:43:4f:94:69:81:fd:a7:fc:49:c2:f3:36:b6:
         09:82:b4:0c:fc:2a:21:c6:6d:5b:b9:42:79:75:00:39:46:8e:
         14:79:7b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 17:55:41 2026 by rpki-client