Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a136c33c-9bf8-3ca7-852c-6df16029b2a7.roa
File:                     a136c33c-9bf8-3ca7-852c-6df16029b2a7.roa (raw, json)
Hash identifier:          7TZ12s8UJKKcPbJFOZ+7ABJ04jRq3pjoTUfBZNwi66k=
Subject key identifier:   34:C9:7A:62:CA:A1:83:2A:A9:8F:84:E7:71:D9:B3:64:76:3B:60:9D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E7204DBC81B9B9CA559F7F500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a136c33c-9bf8-3ca7-852c-6df16029b2a7.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     62081
IP address blocks:        2001:470:427::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:db:c8:1b:9b:9c:a5:59:f7:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=cfc604a5-f472-4862-a42e-6447b6f7043a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:2b:0d:34:ad:56:6e:2d:5a:75:fe:bb:68:
                    6f:26:d2:97:69:3b:97:8c:c5:12:23:21:6d:01:87:
                    6a:1c:70:38:be:0a:02:d1:f8:13:7a:37:f6:f0:a0:
                    f9:3a:e0:9d:23:7a:25:16:d6:31:92:0e:3c:fa:b6:
                    26:3d:37:fa:51:42:5a:64:43:e7:bf:fa:ac:6c:5c:
                    09:bb:b7:f2:0a:94:1c:0d:a6:32:49:3d:3b:bb:99:
                    b3:26:0a:21:c6:8b:d9:06:6b:49:2f:0a:5c:92:f9:
                    dc:0c:49:c2:29:21:78:e2:86:27:41:22:05:9b:df:
                    95:dc:ee:7c:6b:30:da:92:e7:86:d8:cc:94:59:9b:
                    1c:c1:9e:99:c3:71:fa:1f:41:83:f6:fe:f4:54:9e:
                    e1:dd:c1:c2:24:fa:95:17:e9:04:bb:d8:59:3b:87:
                    7e:b6:d9:a7:a1:86:6e:09:67:a5:2b:ac:72:f8:94:
                    c8:61:b2:ac:8c:72:8d:2f:69:2c:15:a4:5d:e9:d2:
                    e1:cc:d9:43:0e:41:43:a0:41:a7:bc:e5:30:1e:c0:
                    74:a9:d6:84:f8:0b:e9:f1:6c:e7:35:71:c9:85:ad:
                    b1:b7:e1:3e:7a:b5:f7:e9:1d:8f:7c:f5:ce:2b:5d:
                    35:5f:01:d8:5b:8f:4f:72:f7:a8:10:c3:ae:74:55:
                    3c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C9:7A:62:CA:A1:83:2A:A9:8F:84:E7:71:D9:B3:64:76:3B:60:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a136c33c-9bf8-3ca7-852c-6df16029b2a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:427::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:4c:84:59:ca:aa:e5:4a:20:5a:93:f0:b7:df:f5:96:6b:e7:
         d4:a0:3f:c3:39:c6:81:e0:15:85:10:55:5c:0f:be:fc:24:bd:
         fc:c9:d3:fb:f7:5c:cb:a9:6a:d0:c0:64:27:07:e5:6e:c0:1f:
         31:55:96:a2:62:bd:24:80:bc:48:7c:81:9e:94:6a:79:92:53:
         21:74:ac:0d:57:1b:ae:31:8e:94:09:a4:8d:99:30:40:34:85:
         50:45:ef:7e:d7:3e:c9:4c:fb:85:7f:2f:62:19:7b:e0:71:12:
         aa:22:24:88:a1:e6:5c:86:c3:83:ee:ba:34:c4:25:01:08:12:
         e8:94:d2:60:66:b3:30:61:6d:06:f7:63:48:d4:51:19:98:00:
         2c:75:7c:4a:fe:b5:24:7e:0d:37:c5:fc:1a:ae:42:ef:cc:26:
         66:06:21:3e:10:36:6c:ae:09:f7:23:0e:e2:d7:61:5f:39:e5:
         50:6d:63:26:71:a7:39:c9:8e:74:e9:99:de:b2:6d:c0:fb:3e:
         e4:9a:aa:9d:8d:8f:e7:16:ff:e9:e9:68:54:a9:12:97:e8:d7:
         3a:8a:d8:6e:51:bf:ae:01:59:ae:60:9c:1d:a7:bc:94:95:51:
         6c:96:cf:b0:3d:67:b9:ea:8a:3d:ac:fb:17:99:ea:e5:07:41:
         28:2c:8f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:35:29 2026 by rpki-client