Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87d9abdc-e08a-3b17-b5d6-28e929ebed00.roa
File:                     87d9abdc-e08a-3b17-b5d6-28e929ebed00.roa (raw, json)
Hash identifier:          wHnXjAuB+fm9nScLgRQFc/I2fkPNwLqGS515URzaZ68=
Subject key identifier:   36:04:DF:3F:59:61:F3:09:4D:13:63:66:A0:2F:EF:C4:CD:0D:2A:67
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E48247E2F0E5265E176ACEA80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87d9abdc-e08a-3b17-b5d6-28e929ebed00.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     53428
IP address blocks:        2001:470:16b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:7e:2f:0e:52:65:e1:76:ac:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=91abf8be-ce38-4edf-be8a-ba5f19dd7f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e0:7d:b0:91:ff:0a:f7:c9:bc:e3:45:d9:2a:
                    8f:ef:9b:30:aa:8f:72:29:cc:ab:5c:e0:72:d0:c3:
                    de:c8:e1:d5:5d:62:b0:aa:35:4a:c9:d0:2b:6b:d3:
                    90:4b:c0:a8:57:bb:a8:44:d9:1d:85:88:2c:81:59:
                    a7:aa:71:64:f5:2f:28:fd:ff:e8:6f:67:a8:cf:cb:
                    18:a3:31:ef:07:5f:07:0e:33:cb:db:f6:b2:41:0f:
                    85:ef:19:01:3f:0c:c3:47:07:29:83:e5:e7:9f:a0:
                    d5:1f:1f:ba:d7:a7:83:ac:94:8a:4e:f3:9d:db:6c:
                    d5:b8:8b:37:c3:4b:5b:cf:92:41:83:54:c0:60:58:
                    cc:12:2d:70:c4:7c:a8:63:66:bf:34:4b:2e:bc:61:
                    a7:2a:28:ce:32:a1:8c:bf:34:0a:5e:28:af:06:d3:
                    bb:5b:ca:27:e3:dc:b0:d8:17:0f:15:52:82:73:bc:
                    a5:4c:f9:77:02:e6:92:87:8d:48:2e:49:36:73:25:
                    11:61:93:c3:62:8b:37:18:8a:71:34:c7:05:60:7f:
                    b5:5b:a2:79:92:e1:9c:af:6d:21:9d:90:83:46:eb:
                    08:d2:88:4e:72:57:f8:2e:4a:74:ee:4d:25:4f:8b:
                    26:12:bc:4f:0a:37:71:3d:50:e6:78:50:8a:42:02:
                    14:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:04:DF:3F:59:61:F3:09:4D:13:63:66:A0:2F:EF:C4:CD:0D:2A:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/87d9abdc-e08a-3b17-b5d6-28e929ebed00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:16b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:19:f4:b9:ca:e6:38:a4:ec:f9:4e:fe:a0:08:d3:02:a6:8f:
         03:76:e8:e0:50:8b:31:15:a8:2c:ae:5f:cb:90:4f:45:85:3c:
         5e:ee:f9:b5:2b:85:81:a5:c8:cc:b0:fb:dd:0e:05:bb:61:ad:
         29:b8:36:b8:fc:bb:85:8e:b7:35:1f:fd:f1:c7:97:dd:92:8f:
         32:75:d5:a6:7f:96:5e:0a:37:ad:57:12:74:80:da:fe:5d:87:
         9f:e0:95:04:9f:65:a1:91:ad:32:d3:da:ec:16:eb:5a:15:e2:
         84:a0:64:37:ed:ac:a1:6d:e9:61:f7:ca:5f:1e:0b:f6:1f:95:
         ff:65:76:b6:13:b5:0a:8e:85:c2:cc:73:f5:71:6d:92:7c:f7:
         eb:ee:ea:9b:80:1f:71:f9:99:56:44:c9:ba:3a:8b:16:08:ce:
         96:52:f9:b0:ca:59:4d:18:9b:24:3e:66:63:49:df:4c:e2:7c:
         51:50:f5:17:38:03:48:71:63:8a:5f:23:ed:e4:34:bf:37:0f:
         b7:fa:f6:74:63:1e:dc:d1:dc:33:c0:99:8c:00:e5:32:53:fb:
         db:2e:11:9b:c3:f6:a5:ba:81:98:81:79:e6:62:ff:76:9e:bb:
         ba:3a:f3:a7:44:f3:3e:2a:da:e1:af:4f:a3:f5:92:34:63:5f:
         5d:4b:f1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:45 2026 by rpki-client