Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a5a65ae-6b88-32a3-9def-b4fb9d39d50f.roa
File:                     9a5a65ae-6b88-32a3-9def-b4fb9d39d50f.roa (raw, json)
Hash identifier:          ALlJEEqVERnulsvcArIjCa4k4Mw60HzNRUbjsMl5eEs=
Subject key identifier:   81:01:9E:5B:A0:87:FA:30:B2:DE:F9:8B:AE:9B:D6:F7:F0:62:B2:B6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E9384F7A74509CC44554A6228
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a5a65ae-6b88-32a3-9def-b4fb9d39d50f.roa
Signing time:             Tue 21 Jul 2026 21:00:12 +0000
ROA not before:           Tue 21 Jul 2026 21:00:12 +0000
ROA not after:            Mon 19 Oct 2026 21:00:12 +0000
asID:                     211619
IP address blocks:        2001:470:56e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:93:84:f7:a7:45:09:cc:44:55:4a:62:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 21 21:00:12 2026 GMT
            Not After : Oct 19 21:00:12 2026 GMT
        Subject: CN=32abeff0-c1f2-4970-ab39-9c1d9dc4f241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c4:98:e8:af:70:78:60:ae:9a:58:0f:2f:37:
                    ac:ff:98:c1:f0:64:f3:6d:a9:ef:28:8c:51:02:c2:
                    8a:e2:7f:85:20:a9:64:c5:01:92:2b:9b:b9:df:2a:
                    86:39:b2:52:fa:19:66:b4:a6:b0:4b:34:ef:9f:49:
                    06:1d:ff:a2:bc:10:2b:e8:ea:a8:a3:fa:52:6b:1d:
                    6a:95:1d:da:07:8a:c3:93:cc:95:4b:7e:84:32:fd:
                    ec:18:99:05:ee:ad:f4:da:d8:ee:3f:1e:aa:d8:96:
                    59:60:e0:06:21:37:25:0a:b7:f6:0f:bc:f9:d1:e4:
                    fe:65:b7:7d:36:be:cc:c1:d2:41:ce:90:43:ee:1f:
                    6c:b6:bb:f7:38:4f:0f:e1:60:27:b0:38:8f:83:93:
                    3a:05:90:bf:0a:c1:ba:3e:9b:4a:d2:5c:91:8c:45:
                    7e:87:11:e9:ac:6a:93:a3:6d:44:13:39:e0:70:38:
                    72:ab:f7:dc:f6:b2:a9:8c:b7:44:46:70:e6:1b:d6:
                    2b:8d:a9:a8:34:b5:a5:f0:dd:27:b2:59:23:94:fb:
                    fc:ac:c2:e3:33:ae:b1:c4:8e:a2:d4:83:05:b1:c2:
                    c5:ff:a8:ee:f4:e1:0b:ca:72:80:a4:53:de:7e:10:
                    51:1d:7d:94:f4:b6:8d:24:81:27:fe:34:e4:c4:c7:
                    8c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:01:9E:5B:A0:87:FA:30:B2:DE:F9:8B:AE:9B:D6:F7:F0:62:B2:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a5a65ae-6b88-32a3-9def-b4fb9d39d50f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:56e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:d9:3b:c1:ae:a3:e1:36:99:d6:c4:b8:93:0f:90:a4:32:f5:
         24:4a:14:76:33:75:69:1c:52:62:35:c1:e8:21:04:29:73:91:
         57:c6:c8:be:60:1a:38:b6:80:b6:57:91:13:42:51:20:e9:30:
         67:5d:4e:d3:73:87:3c:52:21:5b:4b:f7:60:89:d4:c3:c9:ef:
         13:3e:ee:d3:dd:f3:be:15:06:79:93:92:b7:43:7a:e9:d9:32:
         e5:a2:85:1e:27:af:10:12:71:f8:34:06:96:18:e5:00:45:54:
         0a:cc:8b:32:0b:92:9c:f2:4c:92:81:75:6e:9e:b8:15:e3:c1:
         5a:34:4e:59:bf:75:ca:c8:94:17:68:7c:21:d1:41:e7:ee:ce:
         3d:a0:b2:f2:97:f4:35:d2:79:02:06:84:ea:b0:fb:b6:e8:28:
         7b:a0:7f:a1:6c:93:74:39:a5:43:d4:f6:22:c5:13:6d:43:86:
         d1:02:41:46:97:ee:b4:26:02:20:6a:c4:ca:08:85:ba:72:9e:
         d3:fa:52:81:e2:4f:82:96:2e:a5:1e:5e:68:c8:08:af:05:53:
         60:98:e3:34:2b:38:ae:4a:55:58:f2:cb:01:ca:82:84:ef:49:
         e3:cd:50:b7:d8:7c:40:bb:19:bd:f7:a8:55:b4:3c:34:05:10:
         63:95:c2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:18:33 2026 by rpki-client