Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a681e37d-a152-336f-80f1-b75fd0df1478.roa
File:                     a681e37d-a152-336f-80f1-b75fd0df1478.roa (raw, json)
Hash identifier:          6IuOy4kY73ymYtbMZDMaUhBFGPOlawIudYfuibFK8JQ=
Subject key identifier:   0E:1F:4C:D8:C0:AE:4D:6E:D0:43:53:1F:14:1D:D0:4E:00:35:3F:02
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F1302357A3A42D24AF6854B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a681e37d-a152-336f-80f1-b75fd0df1478.roa
Signing time:             Sat 05 Sep 2026 13:00:12 +0000
ROA not before:           Sat 05 Sep 2026 13:00:12 +0000
ROA not after:            Fri 04 Dec 2026 14:00:12 +0000
asID:                     43633
IP address blocks:        2001:470:4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:13:02:35:7a:3a:42:d2:4a:f6:85:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep  5 13:00:12 2026 GMT
            Not After : Dec  4 14:00:12 2026 GMT
        Subject: CN=9bd70936-ae19-41f8-b9cc-5893cb31fc4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ee:24:e2:20:a8:c2:a1:48:5d:af:9a:ba:a1:
                    57:34:b0:a1:56:2a:44:b5:87:92:a7:f3:d0:ed:cb:
                    f3:5a:b0:b8:46:af:c1:0a:ce:c9:a6:36:cc:79:92:
                    1e:3d:d3:8e:67:fe:a3:c9:de:76:8e:4d:54:5e:fe:
                    6e:7e:5b:fe:07:2e:c5:76:57:b6:65:97:1e:7c:4e:
                    df:5d:b8:c3:4d:cc:cd:fb:29:25:c5:b0:bb:85:88:
                    be:a4:4d:db:47:87:98:5c:82:86:5f:71:b7:02:8e:
                    c6:25:73:4f:0a:17:24:d6:7e:2d:b1:03:1a:28:8f:
                    77:cc:1b:61:9b:ee:c5:57:51:7e:1a:06:84:8a:51:
                    08:66:10:41:d0:ba:12:78:df:b8:7f:40:2c:15:ce:
                    84:21:0c:33:e7:8e:1c:81:59:25:e4:2e:e0:f7:b6:
                    92:3c:60:a1:e5:99:54:4e:4c:5c:6e:fe:a4:8a:ba:
                    ee:d8:bd:bb:ae:d6:d0:8f:94:95:ea:18:5b:90:cd:
                    fe:49:1b:aa:a3:d0:3a:56:a0:16:3a:ce:94:dd:bf:
                    f1:d6:0b:d9:16:b7:81:55:1a:84:7f:d4:6b:7b:cc:
                    dd:fe:0a:a6:8b:17:09:f3:8e:74:08:b2:f3:d8:a4:
                    c5:61:4f:96:5e:a7:d4:02:c8:01:ef:f6:0b:6d:11:
                    b0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1F:4C:D8:C0:AE:4D:6E:D0:43:53:1F:14:1D:D0:4E:00:35:3F:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a681e37d-a152-336f-80f1-b75fd0df1478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:c7:d9:b8:cb:db:e2:cf:85:bc:ca:59:e9:ee:8d:fd:ac:63:
         66:cd:71:f7:79:a1:b1:3e:e3:c5:e1:aa:62:43:bd:92:28:1a:
         c9:2a:fc:45:2c:3b:c9:20:80:13:18:eb:e3:54:55:9d:b7:0b:
         b7:8e:3c:de:71:47:dc:7c:da:54:65:05:43:46:cd:f7:07:2b:
         14:de:f5:71:c6:02:75:56:33:22:6e:bc:7e:12:f3:49:db:0d:
         35:b2:38:e5:37:ef:45:44:8c:17:19:18:32:83:7f:f0:ad:28:
         25:a9:76:16:0d:ca:7c:1d:df:9e:61:4e:4f:47:00:c2:f3:f8:
         06:0b:3d:89:fd:07:98:1d:13:5c:eb:36:fc:8b:a0:4b:4b:1e:
         b7:ec:d0:37:ea:34:96:82:4a:cc:12:d3:cb:36:3d:c2:46:c3:
         13:91:56:77:1b:ff:23:6e:ea:f9:3a:e2:3b:3d:d7:f4:83:91:
         bd:f9:9f:8b:99:98:e7:7b:b6:15:99:eb:aa:a2:60:2d:c4:52:
         ab:ff:aa:e2:39:07:bc:ec:a8:d4:8f:c2:ef:b1:63:a0:d0:ec:
         2f:d4:da:a1:49:56:16:3a:95:db:35:58:37:96:af:b7:53:89:
         f7:97:a3:69:d2:ee:f6:82:39:b6:ce:d4:dd:0a:2e:ec:fa:63:
         d2:73:90:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:49:30 2026 by rpki-client