Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a55de36-0cb3-3121-bfac-ab1c16a10bbf.roa
File:                     9a55de36-0cb3-3121-bfac-ab1c16a10bbf.roa (raw, json)
Hash identifier:          ddXW966xQzXjurs0CIPFwS/2cVqII4Bt0AT0GTsyiDQ=
Subject key identifier:   4C:8E:26:F9:9C:D1:0C:16:45:AA:D1:6A:70:A0:51:F7:D8:E8:57:37
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F47D8E93DE2E6E451D9C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a55de36-0cb3-3121-bfac-ab1c16a10bbf.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     53812
IP address blocks:        2001:470:14c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:47:d8:e9:3d:e2:e6:e4:51:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=14ae58f2-1951-4756-b57f-2d6c0fb13f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7f:af:17:27:c8:a1:f3:22:d2:f9:04:37:97:
                    53:b3:83:47:ee:8e:e8:d2:79:0b:0a:ec:13:55:1e:
                    b9:56:a7:cc:6e:6d:f8:36:80:fa:bb:49:50:21:a9:
                    77:63:bc:38:39:cc:b0:5c:3c:0f:f3:5f:cc:1a:23:
                    49:88:5f:16:aa:4e:7e:ae:a7:35:ac:fb:25:4a:22:
                    26:45:9d:f8:62:4b:44:10:c1:51:8e:ff:3b:dc:a3:
                    93:65:3f:55:c7:c5:a1:96:5c:68:90:2b:13:fb:33:
                    2b:e0:57:1e:c0:33:7f:f5:25:58:b5:82:34:30:56:
                    78:94:2f:d1:e3:eb:34:63:b8:d0:cb:5b:17:80:6c:
                    13:91:38:86:ce:0f:d9:44:c0:96:44:87:51:60:be:
                    93:ff:35:75:da:3d:97:c6:c0:8a:f5:63:bb:2f:96:
                    33:c4:ae:56:57:46:43:c5:49:18:de:c5:33:e2:03:
                    e9:d8:ba:cf:8a:81:b2:db:0b:7b:5e:c6:79:97:42:
                    4b:74:10:64:8c:98:af:11:c2:41:85:c9:5c:13:a4:
                    d6:ad:11:30:39:c6:2c:c7:f3:5a:66:51:38:f0:22:
                    23:dc:12:01:50:6b:2e:90:a6:ba:36:1d:14:fe:7e:
                    f0:83:eb:dc:f1:88:2c:1c:4d:31:8e:41:fd:84:13:
                    fb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8E:26:F9:9C:D1:0C:16:45:AA:D1:6A:70:A0:51:F7:D8:E8:57:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a55de36-0cb3-3121-bfac-ab1c16a10bbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:14c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:98:09:b6:c1:51:66:77:ef:b5:5d:26:9b:4e:b6:11:18:57:
         dc:d7:71:ab:99:4f:ff:13:74:71:d9:4c:ae:8c:0f:ba:20:70:
         3d:03:5a:18:44:93:e4:78:31:c8:ab:6a:e5:83:87:a2:d6:b1:
         a5:6d:b6:77:b1:0f:aa:78:07:b2:88:84:67:c3:e7:37:da:42:
         7b:70:a5:27:bb:4a:c8:65:e3:69:50:e1:90:d0:2f:a9:0e:42:
         75:77:63:9e:2e:3d:dc:ca:ad:2f:ff:a3:e6:0f:d0:5f:76:b9:
         6f:00:47:03:75:e5:92:76:5c:32:17:21:3b:1e:4b:89:11:bb:
         35:e6:8e:f3:b8:1b:74:65:14:56:a4:d2:81:91:c5:65:e2:e2:
         d4:15:12:00:0a:0f:93:ae:76:c1:49:99:84:8e:48:89:4d:3a:
         9b:84:24:0f:09:b9:86:03:be:9f:48:f3:69:59:28:2a:a0:76:
         3a:e6:b4:3f:88:65:64:78:09:e1:a6:5e:f8:24:6e:8e:85:a6:
         e7:03:05:64:e0:2f:5a:61:db:7f:01:f3:ce:6a:53:0c:8c:2a:
         c6:01:89:78:49:fa:13:d6:ae:e7:5b:41:cd:26:df:fa:b7:6d:
         db:34:e1:b6:5f:d0:a4:86:5f:91:6b:7f:55:52:17:8d:49:68:
         cd:f2:5e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:12:09 2026 by rpki-client