Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a19cbcde-3cb4-3acd-9361-53b299643044.roa
File:                     a19cbcde-3cb4-3acd-9361-53b299643044.roa (raw, json)
Hash identifier:          4LnrDa8hmqk4T/dfXKnWk58vCpzwDPXicLBECdk/3dA=
Subject key identifier:   D8:9C:BA:24:82:02:07:DB:D4:1D:E5:34:42:84:CB:D1:F0:37:25:79
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E858F86C49BD229D5F1F40FC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a19cbcde-3cb4-3acd-9361-53b299643044.roa
Signing time:             Thu 16 Jul 2026 21:00:12 +0000
ROA not before:           Thu 16 Jul 2026 21:00:12 +0000
ROA not after:            Wed 14 Oct 2026 21:00:12 +0000
asID:                     30257
IP address blocks:        2001:470:569::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:85:8f:86:c4:9b:d2:29:d5:f1:f4:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 16 21:00:12 2026 GMT
            Not After : Oct 14 21:00:12 2026 GMT
        Subject: CN=af4f01b9-4851-48f9-82e8-141ce386f1b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bf:b6:d3:d0:d0:dc:d3:e9:e3:05:65:d2:01:
                    9c:c2:04:58:3c:fa:17:bb:87:25:8b:91:60:d3:ee:
                    e2:ed:ad:3c:e8:5c:52:e8:87:4d:8e:54:30:92:63:
                    a1:21:31:65:ec:66:9b:ac:bf:bc:08:44:3c:94:77:
                    54:f0:20:29:3f:11:28:e8:89:52:e2:a2:3b:9c:4d:
                    7a:31:d8:1b:79:32:3d:d5:0f:ab:3b:73:f0:26:74:
                    b4:fd:31:56:f6:ed:f8:6c:a0:05:28:59:52:8a:4d:
                    d6:1b:4d:b3:e3:69:ce:e6:2f:00:75:8a:c1:2a:74:
                    53:37:32:1b:41:e0:46:2f:19:59:c8:6d:1d:6f:7a:
                    f6:0e:cb:f3:5c:ae:a1:69:35:d7:05:b4:71:cf:81:
                    18:ed:fe:89:7f:67:38:d9:09:08:cd:ef:8c:ee:0a:
                    db:2e:60:fd:cd:e5:2f:c7:62:d3:83:97:7d:30:3e:
                    65:50:83:13:6c:b4:32:ad:c8:7a:fa:21:db:7b:d6:
                    1a:40:d4:f4:de:70:94:cc:92:6b:c1:a2:70:08:73:
                    c6:57:6d:89:77:32:0b:fd:52:be:d5:8c:db:2a:c2:
                    2e:0c:fb:99:27:c6:82:f3:36:4d:87:fd:5c:a7:ca:
                    d1:e9:5c:da:b4:3a:83:b0:af:10:3b:9c:72:b7:71:
                    12:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:9C:BA:24:82:02:07:DB:D4:1D:E5:34:42:84:CB:D1:F0:37:25:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a19cbcde-3cb4-3acd-9361-53b299643044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:569::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:06:30:eb:e3:d9:30:89:da:4d:45:f7:5a:91:9c:09:9f:22:
         71:f0:0f:e4:9b:eb:01:de:37:0f:5d:ce:0e:82:c8:14:e0:1d:
         c4:f7:a9:93:ea:0a:c6:65:4f:49:6b:72:b7:9b:51:68:56:1c:
         11:94:41:8e:68:a9:53:c5:7d:84:71:04:e0:70:94:f5:65:c2:
         dd:44:c4:58:38:fb:97:aa:e9:eb:9b:42:47:24:12:ab:f1:65:
         fe:3c:ff:24:5b:ca:5b:0d:ba:98:38:24:07:b0:e7:e9:98:5e:
         69:0f:e1:3e:2a:13:9b:f1:f4:4e:21:61:26:de:58:84:bf:71:
         3a:5e:8f:ba:ab:3c:a5:3a:54:4c:fc:d2:6a:1c:ac:eb:c0:d5:
         dd:8a:4c:bb:8f:9f:3c:a1:30:30:d9:d2:cc:0a:d0:d9:86:46:
         1b:9c:90:b9:73:ef:8c:3d:85:ac:00:d5:90:56:44:da:35:eb:
         72:c8:10:38:80:f9:b7:52:b9:a5:57:20:2e:81:19:9e:eb:a5:
         f3:4b:66:4e:75:bc:d4:a0:bf:29:34:19:95:ef:53:b2:3d:be:
         91:a8:6e:11:5d:09:61:63:d6:fa:4b:fd:da:1e:a2:bb:1e:7e:
         a4:7e:f5:83:47:50:3f:d6:a7:56:2c:ab:c3:9b:47:ca:a3:a8:
         6f:0e:d3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:43:25 2026 by rpki-client