Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf12730f-41eb-3d62-8d68-933218794fe7.roa
File:                     bf12730f-41eb-3d62-8d68-933218794fe7.roa (raw, json)
Hash identifier:          yoXUjXjkBtrpuBLKaDssO+/CqjiHplzPnm91Zlrr1Gk=
Subject key identifier:   DA:B0:28:36:4D:2E:8C:62:73:2A:C6:24:54:9C:56:87:41:06:01:7C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E709F78EA55BD6196FB34EF02
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf12730f-41eb-3d62-8d68-933218794fe7.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     48422
IP address blocks:        2001:470:4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:78:ea:55:bd:61:96:fb:34:ef:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=ca502f79-ee92-4e0a-9674-c654025ac19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:38:e3:0b:d7:c5:5d:22:57:3a:7d:18:b2:38:
                    56:f4:25:56:3e:c6:a1:23:aa:a7:41:0f:4f:c8:ac:
                    5e:4d:37:65:1c:77:2c:95:77:c8:95:80:3e:56:48:
                    2a:78:00:38:44:99:26:49:38:aa:9f:10:9d:c0:2c:
                    b2:28:70:95:7e:b4:46:ca:60:0b:c2:69:8f:53:15:
                    b9:94:32:a1:d7:07:83:70:6f:21:98:cc:67:45:66:
                    68:49:a8:ac:86:f9:3e:a4:bb:5b:9c:5c:7c:99:ed:
                    71:ab:88:7f:31:be:9f:21:ea:b6:24:e5:70:d4:c4:
                    03:37:c3:e5:15:2b:33:fd:ac:23:87:19:a3:19:66:
                    51:3e:da:70:34:9a:8b:66:be:f8:1e:54:45:74:a4:
                    27:6e:e2:49:91:c3:ea:6d:4d:4d:9a:5f:38:b4:07:
                    d0:a2:a2:d9:c1:b2:7e:a5:3f:9d:a6:1b:70:4e:da:
                    9a:e4:d1:9e:2b:85:5d:e4:72:5d:6e:9c:05:40:0e:
                    7b:52:f1:42:13:cf:de:18:c3:cd:99:90:8f:a6:82:
                    b1:6c:39:5a:28:6c:85:65:4d:04:e1:57:a0:7c:59:
                    c4:9f:6b:8f:08:63:83:67:bb:69:0f:e9:f7:47:16:
                    ab:fe:ef:6a:79:30:68:55:27:10:4c:df:7a:e1:08:
                    ae:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B0:28:36:4D:2E:8C:62:73:2A:C6:24:54:9C:56:87:41:06:01:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf12730f-41eb-3d62-8d68-933218794fe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:56:48:6f:db:d6:c7:51:8c:6a:35:9d:17:b7:33:60:0c:89:
         b9:10:c3:be:1e:73:04:51:35:05:88:b6:4d:46:10:97:f2:2c:
         25:bd:69:79:ed:a0:1b:c6:63:53:59:eb:5f:5a:a9:3a:a2:8e:
         9b:82:f5:ee:fe:53:78:f0:0c:21:a9:f9:f3:34:37:14:c9:cb:
         ee:a5:0d:49:94:b0:34:2f:1a:ff:bb:36:44:28:e9:14:15:3a:
         44:2a:0f:33:b8:9f:5a:61:f7:6b:1e:f9:01:d2:9c:d3:59:b4:
         2c:a8:6b:fb:6d:1a:23:ad:93:c4:08:c5:cc:a9:c8:7b:aa:47:
         76:79:85:54:f7:35:bf:f4:57:6b:f7:a6:cc:f8:ee:53:b8:7b:
         74:ae:61:f6:cd:57:46:2f:33:72:0e:b4:c5:fd:dc:d3:fb:f8:
         e2:c8:4e:f5:8c:fd:d3:9b:44:e2:12:77:8f:00:67:6e:8e:5c:
         87:ca:a3:20:41:a5:3c:71:66:a2:84:d1:d3:6d:2c:23:b0:35:
         c5:94:7d:ae:93:d6:7b:12:fc:68:a5:41:be:70:8b:4b:2c:80:
         aa:ca:2d:45:b9:ea:0b:73:10:7a:9b:e3:cb:58:48:e2:2f:f6:
         8c:aa:72:b6:39:91:bc:4c:ef:f5:b8:91:6c:f4:38:e9:7a:e0:
         31:4c:1c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:12:13 2026 by rpki-client