Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf3bb9e8-5782-3a3d-a297-51b23f8e3c5a.roa
File:                     bf3bb9e8-5782-3a3d-a297-51b23f8e3c5a.roa (raw, json)
Hash identifier:          8G6AAoo9cSVdKE9O0EhA9DlP5BsmGblE1IFYjjdONpI=
Subject key identifier:   CF:5D:C0:18:B7:36:2D:9A:2A:54:26:37:DB:18:F2:ED:C5:F1:0D:79
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3CF9C413856180C49F5CE980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf3bb9e8-5782-3a3d-a297-51b23f8e3c5a.roa
Signing time:             Sat 20 Jun 2026 21:00:12 +0000
ROA not before:           Sat 20 Jun 2026 21:00:12 +0000
ROA not after:            Fri 18 Sep 2026 21:00:12 +0000
asID:                     198408
IP address blocks:        2001:470:44c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3c:f9:c4:13:85:61:80:c4:9f:5c:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 20 21:00:12 2026 GMT
            Not After : Sep 18 21:00:12 2026 GMT
        Subject: CN=c2b7920d-9972-4dfa-8d9b-04e45052c267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:2c:5e:68:94:87:0e:5d:04:69:d7:59:17:
                    95:38:5e:ce:ff:6f:b4:02:a3:0e:e3:12:d2:4c:00:
                    26:96:d5:d8:b7:54:b5:49:18:9c:2f:f9:1c:99:96:
                    78:16:5b:fc:5c:d5:3f:4e:b5:0b:b4:ef:aa:47:85:
                    5c:fe:d9:af:93:f8:e3:86:b1:04:03:9d:64:b1:29:
                    c3:77:9b:93:25:7c:92:d2:1e:02:21:e7:72:55:6e:
                    d6:93:36:ae:60:6f:37:d2:1a:9f:5c:5b:47:4c:2a:
                    6d:56:87:f5:41:3e:a9:3b:e5:7f:3d:4e:45:cd:82:
                    2f:52:87:5a:40:58:10:d9:9c:0b:9f:78:90:12:71:
                    9e:33:4f:1a:e9:b1:7f:15:13:85:72:3c:5b:2a:37:
                    bd:f0:33:44:02:40:e1:7c:5b:f5:20:3a:19:43:51:
                    90:b7:d3:07:31:95:3b:21:e5:65:d9:34:c8:99:c4:
                    4b:3a:c8:3f:59:59:44:bc:a2:df:1c:a4:87:4f:18:
                    95:de:bc:f2:8d:12:fb:90:3e:f6:f6:e3:0d:22:d3:
                    8c:21:1a:0e:d9:86:54:ba:12:6e:d5:23:d8:48:e2:
                    8f:75:68:84:06:8f:54:5c:15:62:ae:0a:9b:91:35:
                    3d:9a:9d:58:56:06:69:c8:0b:0c:96:1f:5f:76:5e:
                    44:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5D:C0:18:B7:36:2D:9A:2A:54:26:37:DB:18:F2:ED:C5:F1:0D:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf3bb9e8-5782-3a3d-a297-51b23f8e3c5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:44c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:23:cc:95:5d:a0:b1:4f:ba:b7:84:04:6a:8a:8e:d1:f1:8a:
         52:8d:bd:9d:2c:2f:e3:8b:50:ca:c8:4f:57:29:35:49:c9:91:
         86:18:16:c4:85:dc:3b:7d:67:2d:fb:95:86:51:1b:8f:79:18:
         91:86:08:70:77:03:53:db:a4:21:d2:41:6d:9e:0d:6c:ea:f6:
         b1:97:51:b2:23:51:b0:4d:16:71:97:69:ec:52:d5:67:70:9d:
         86:86:10:a5:54:1d:db:be:a6:0a:f1:8a:51:29:29:f4:9d:7d:
         32:72:29:d0:9a:66:a9:e7:64:d8:ae:9e:08:c6:2a:2f:0f:e2:
         10:d8:5d:4a:f0:fd:ab:66:d3:89:7b:d0:e4:64:ec:61:e1:04:
         2c:bd:00:a7:6b:21:60:fe:61:47:4f:63:0e:80:a8:94:b3:9e:
         38:7b:f3:a9:fc:df:42:5c:65:ef:02:b3:b3:7c:ee:d0:11:c7:
         11:30:a6:47:23:f7:9b:8e:ce:38:1f:9d:2b:c0:03:6b:a6:e5:
         5d:53:b2:41:19:ef:a9:14:90:05:53:03:61:86:eb:db:92:0a:
         4f:14:06:b0:cb:67:98:46:6b:79:1d:bb:f0:7a:06:5b:f2:e8:
         df:01:8c:c4:ef:57:a5:12:a4:3d:d9:f8:73:9a:b5:03:69:50:
         10:86:61:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:12:45 2026 by rpki-client