Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9623372c-d10e-3747-a731-5820845d38ad.roa
File:                     9623372c-d10e-3747-a731-5820845d38ad.roa (raw, json)
Hash identifier:          ZwH9mJdNd43H9RmburUEFblRQ8CCrrcgyW59nqwCaD0=
Subject key identifier:   FE:A7:EA:1F:14:56:62:ED:CA:CB:21:EC:06:D2:44:52:21:6F:9D:72
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F07D7731F3895ED33F145FC40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9623372c-d10e-3747-a731-5820845d38ad.roa
Signing time:             Tue 01 Sep 2026 13:00:12 +0000
ROA not before:           Tue 01 Sep 2026 13:00:12 +0000
ROA not after:            Mon 30 Nov 2026 14:00:12 +0000
asID:                     215230
IP address blocks:        2001:470:5dc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:07:d7:73:1f:38:95:ed:33:f1:45:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep  1 13:00:12 2026 GMT
            Not After : Nov 30 14:00:12 2026 GMT
        Subject: CN=f273c250-e510-4235-980a-a11e64cf94b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:0d:08:e1:4e:14:a7:e7:e8:f2:91:33:02:
                    62:db:47:12:03:3f:5a:8e:4f:ef:9c:89:02:1b:a5:
                    2f:48:b9:c9:b1:fd:b8:80:d3:1f:03:35:d8:74:9e:
                    f9:cf:ef:94:00:db:8b:f9:5c:ee:a6:53:a0:ea:51:
                    41:38:26:53:c2:bf:58:73:0f:61:5c:9d:43:0f:63:
                    15:4e:dc:67:0c:11:ab:9f:37:b0:29:44:cc:b6:ba:
                    1c:1d:a7:86:c8:b4:be:d9:69:fc:89:cf:ae:54:a3:
                    1c:53:ca:df:cd:75:7c:fd:c3:fd:f2:dd:9e:9c:b9:
                    3a:1a:7c:27:be:2b:d8:0f:c0:41:cf:84:4f:36:37:
                    57:c9:f0:bf:29:13:60:61:3e:ef:9a:86:5b:f6:29:
                    13:0f:7f:50:52:8f:47:c6:88:5e:7d:f8:4d:50:24:
                    06:8d:52:4b:13:c8:c1:a5:44:36:42:38:02:fb:ea:
                    15:9b:ba:63:0a:1f:67:2b:b8:97:a7:05:88:47:b6:
                    a4:ce:08:ae:00:d0:55:89:d7:81:b3:2c:e9:3a:d6:
                    57:f1:2c:4f:bb:40:4c:84:7f:79:d8:69:d4:30:f5:
                    d1:fc:1c:f1:a8:73:7d:4e:68:98:87:d7:dc:40:d7:
                    22:c4:f5:4c:fc:7b:b8:7a:af:ee:60:ff:83:a5:5f:
                    4e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A7:EA:1F:14:56:62:ED:CA:CB:21:EC:06:D2:44:52:21:6F:9D:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9623372c-d10e-3747-a731-5820845d38ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:5dc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:cf:40:1d:73:b4:a8:9f:7b:31:02:35:71:ba:49:4d:63:42:
         e0:31:b3:67:7b:61:f0:26:d7:e5:46:ef:01:c6:c8:20:72:59:
         13:9b:fb:e1:d4:25:85:83:23:8e:30:fe:97:f6:6d:46:56:6b:
         c8:a4:ab:5b:40:35:8a:b9:a4:9a:6b:6f:80:17:21:a7:19:cb:
         52:e0:21:df:b5:be:5f:1f:cb:2f:ba:38:6a:c3:f0:79:1e:e6:
         8a:3a:15:3c:70:1a:c3:2d:5a:28:0d:09:42:fe:d1:f7:a7:f6:
         42:12:ac:b4:c6:d0:42:dc:56:8e:7f:00:ad:a5:ff:99:e4:f4:
         c7:3b:12:41:43:05:44:fb:10:53:d7:6b:c1:95:ce:f1:13:b5:
         9a:63:78:ce:cf:9a:00:03:d5:87:ca:e4:e5:d4:93:1d:13:16:
         92:03:96:c8:df:61:54:b0:4f:5b:6f:b9:78:51:0e:9f:66:bf:
         b7:81:bc:26:4a:4c:ac:a0:50:24:2d:57:4c:65:fe:02:23:69:
         fa:9f:95:68:fc:3e:be:90:31:c4:d3:43:87:fb:f8:45:12:e7:
         4f:3c:10:90:e7:6e:fe:d9:b7:15:4e:04:e8:50:b2:19:89:46:
         14:04:d2:30:44:e1:9a:5b:53:85:11:cb:da:5b:3e:f3:70:f1:
         55:2b:5e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:52:47 2026 by rpki-client