Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/83429366-a8f7-3773-96ae-d8b0a8a34b0b.roa
File:                     83429366-a8f7-3773-96ae-d8b0a8a34b0b.roa (raw, json)
Hash identifier:          faqtCEhcKMsxecrfhVG/qCIoXl5i80bWAVh7k4w6vCc=
Subject key identifier:   8B:8F:7F:30:E1:5E:B3:7E:1C:83:2F:6B:F7:E2:C0:E0:B3:80:1D:CC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E842A40174C26165840B73130
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/83429366-a8f7-3773-96ae-d8b0a8a34b0b.roa
Signing time:             Thu 16 Jul 2026 09:00:12 +0000
ROA not before:           Thu 16 Jul 2026 09:00:12 +0000
ROA not after:            Wed 14 Oct 2026 09:00:12 +0000
asID:                     32697
IP address blocks:        2001:470:34c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:2a:40:17:4c:26:16:58:40:b7:31:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 16 09:00:12 2026 GMT
            Not After : Oct 14 09:00:12 2026 GMT
        Subject: CN=26672ae5-e9d9-45d7-bc47-d8a57353ea50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:78:9b:bd:e9:e8:46:7a:f6:eb:e2:99:75:5b:
                    d8:85:0c:ee:59:d4:0f:ca:e2:6c:d7:5d:2d:78:46:
                    a6:fc:bf:7b:5a:23:4b:49:9f:73:e0:a0:13:c2:c7:
                    01:f2:89:a4:e7:46:d6:99:ac:01:81:05:b9:55:1e:
                    48:27:c8:10:40:50:60:08:f8:6a:e3:a6:bb:cb:dd:
                    b3:7f:c8:8f:be:71:a0:ae:5b:80:f3:d4:94:ac:4a:
                    b9:15:b6:d5:84:64:e2:c0:be:cd:c1:a2:09:5a:51:
                    14:e5:e2:b4:34:eb:62:69:04:9a:fd:fa:36:1b:6e:
                    94:7c:f9:6b:5b:1e:45:e3:2b:19:cc:09:ef:bb:82:
                    84:e7:62:58:25:af:94:4f:4d:15:ef:32:d4:c1:1c:
                    af:cb:76:26:be:5b:b0:ac:94:a7:93:d6:bf:6e:aa:
                    6c:f3:ca:0b:15:af:98:14:cc:02:d8:d1:24:34:c5:
                    d0:41:99:e2:be:f5:f5:7a:cc:93:53:a7:86:69:64:
                    b1:ff:55:b1:16:d2:59:12:3b:08:a8:97:2b:0b:71:
                    e9:2e:54:ac:12:cf:50:ec:72:45:0c:28:1e:0c:6b:
                    01:6a:86:a7:4a:1f:45:5d:4a:e9:b3:ef:4d:65:b2:
                    78:25:ec:cb:25:63:99:56:e6:60:09:7d:65:40:61:
                    41:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8F:7F:30:E1:5E:B3:7E:1C:83:2F:6B:F7:E2:C0:E0:B3:80:1D:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/83429366-a8f7-3773-96ae-d8b0a8a34b0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:34c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:10:d9:47:1d:ba:89:23:ca:8b:e2:c8:a0:32:03:50:f1:63:
         17:65:8f:a5:da:cd:71:8b:2a:1a:6a:72:cf:c9:3a:69:5d:e1:
         69:46:8e:21:94:33:fa:c4:93:6c:de:2d:af:e4:d7:95:b8:ce:
         e8:c4:61:ab:4d:7c:0c:7c:9c:c5:b7:ac:7f:d9:8c:8b:bb:f7:
         66:06:82:ce:aa:07:4f:3a:b5:4c:75:41:c4:61:10:a1:a3:58:
         dd:df:d6:df:16:0b:0f:e3:d5:fc:76:38:69:02:ea:45:3c:55:
         4d:7b:2a:d9:51:59:40:6a:91:d5:51:67:cb:88:2e:26:b8:7e:
         cc:7b:f5:87:0e:6b:9c:38:b9:6b:e1:68:cd:54:ae:60:b5:83:
         01:52:5b:8e:e1:c5:92:c3:50:c8:3f:f8:e5:41:b4:5e:28:c1:
         cd:12:a6:f8:38:33:0b:37:a7:08:00:85:a4:88:f4:f3:fe:9a:
         6d:d6:3b:e2:3c:e3:b6:54:8a:4f:8e:23:12:10:b7:7c:2a:59:
         93:34:f3:bf:00:f3:04:28:c3:04:8c:31:c0:58:71:31:84:98:
         3f:42:d9:60:78:ff:77:07:28:fe:e5:2a:2b:38:c4:a5:bf:69:
         d2:ad:0f:8e:ab:72:04:0b:b3:d5:4d:d4:d2:f1:a2:11:46:4a:
         ea:58:75:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:30:44 2026 by rpki-client