Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86998afc-642a-3230-8bd9-a930359bbd11.roa
File:                     86998afc-642a-3230-8bd9-a930359bbd11.roa (raw, json)
Hash identifier:          jDaw/JRnZeLRvCo6649g8igOl8q+0Q1l9nrPaQmeykk=
Subject key identifier:   A8:8E:43:4D:F7:2C:DE:BC:C8:A0:9D:F5:B5:86:F6:1A:2B:B4:9D:F7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E709F7182178AC353B3A21040
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86998afc-642a-3230-8bd9-a930359bbd11.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     198493
IP address blocks:        2001:470:4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:71:82:17:8a:c3:53:b3:a2:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=1517c6e3-396f-4dfc-88e1-12183417b496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:88:b9:3d:43:c3:4e:22:0b:d8:99:0a:d2:dc:
                    21:2b:97:df:d3:17:6d:37:43:c7:0e:29:c7:43:36:
                    0c:be:d5:3a:6a:55:47:f2:72:d8:1c:0e:c6:a7:aa:
                    c8:02:b2:87:da:c5:8b:86:02:a7:17:02:cd:5a:dc:
                    69:9e:e0:e0:57:f6:fd:8c:11:2f:9e:47:3f:13:49:
                    67:00:76:bf:4f:aa:41:18:60:fb:32:a7:48:ae:66:
                    94:3a:c0:e9:43:5c:95:9d:74:9f:aa:3a:78:74:40:
                    a0:3b:bd:c9:88:cf:31:96:42:18:84:48:4c:e2:81:
                    60:0f:e5:2a:4c:02:17:75:86:49:87:c4:2b:94:00:
                    fa:58:2e:e3:97:f4:ce:9a:f6:2b:eb:1b:f7:6f:46:
                    9c:fb:b3:88:da:18:85:e7:6f:be:b0:2c:83:bd:2a:
                    8e:3c:2e:61:42:8d:fc:95:c7:cd:b9:b0:6e:db:63:
                    21:85:51:e3:89:30:18:1a:3e:5e:2b:19:2a:ea:bc:
                    60:74:48:cd:f2:09:7d:6e:3e:fd:84:c1:72:9a:c1:
                    af:b0:91:aa:dc:2c:d9:f5:80:f6:3d:19:11:3c:28:
                    43:21:30:0a:2c:0a:44:fa:85:ff:04:77:4e:5c:78:
                    4e:9d:82:a9:12:09:d6:d0:14:1c:36:d9:46:4b:1e:
                    68:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8E:43:4D:F7:2C:DE:BC:C8:A0:9D:F5:B5:86:F6:1A:2B:B4:9D:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/86998afc-642a-3230-8bd9-a930359bbd11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:90:38:73:7f:5b:b3:96:9d:98:4a:a8:19:6d:f7:53:7d:20:
         e8:8f:4e:02:a6:da:64:cf:83:17:af:8f:49:d7:f0:27:ad:59:
         10:67:ca:cb:21:95:5c:b0:15:3e:46:6c:fc:2c:45:e0:63:7e:
         69:35:ea:bc:0d:5b:37:b5:63:0c:76:23:88:24:0d:1d:87:76:
         f7:38:e7:4f:ef:d0:b8:c0:7f:3d:1a:1b:88:3c:d4:cf:5f:5d:
         58:4d:b9:53:8d:5c:8c:7e:45:67:43:e4:da:cf:0c:e6:63:77:
         80:d5:5e:3b:2f:d6:7e:05:58:03:0c:b2:a9:bd:ba:a5:ab:7a:
         f8:b5:f7:59:cb:4c:d4:22:ff:73:b1:cb:d2:6a:09:be:ed:46:
         35:bb:45:e5:95:54:84:03:cb:57:78:55:96:77:86:a5:8f:76:
         04:c7:01:4a:4c:7c:d2:1d:3a:31:ac:54:e3:84:4d:8c:d3:d6:
         97:97:26:ae:81:a3:e6:0e:a4:54:30:90:8c:13:f5:54:be:7a:
         1f:e5:3c:b1:f2:b6:fd:b5:17:e1:4b:97:fe:9e:b6:3a:b9:0c:
         0b:16:f3:89:7c:93:6d:c4:79:a3:4b:a0:ec:14:ba:64:07:00:
         5c:86:60:42:b7:bf:e8:c9:1e:1e:f3:7e:ea:6b:f2:b9:41:d2:
         ab:87:2d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:20:29 2026 by rpki-client