Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c3c523f1-1652-39a2-a215-82e595fb354f.roa
File:                     c3c523f1-1652-39a2-a215-82e595fb354f.roa (raw, json)
Hash identifier:          udd7vHPUai+5L6Jgw39GoYrFS67UuBal/DR91a5Phmw=
Subject key identifier:   DE:E5:07:2E:37:96:27:D5:24:24:15:80:CE:B9:32:91:B4:BD:4B:A0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F4973515407EF3F368CFEC640
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c3c523f1-1652-39a2-a215-82e595fb354f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     53699
IP address blocks:        2001:470:531::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:51:54:07:ef:3f:36:8c:fe:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=9a2bfdbb-cc66-4b7d-ab2b-17949dad6dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:77:74:5c:d5:7c:4c:32:85:23:9f:25:f9:6c:
                    11:d5:81:87:1a:67:b2:3e:2a:4f:1b:a4:cb:f3:fe:
                    9b:03:27:d8:bb:2a:13:95:bb:96:58:ca:cd:66:66:
                    25:92:b2:57:d8:72:34:80:6d:e9:8c:b4:e9:38:c5:
                    21:db:b1:31:e8:29:3d:41:d3:1d:10:e8:a4:db:f8:
                    64:fa:ff:fd:49:7f:64:3f:4f:75:f4:c9:64:7c:fc:
                    b9:e3:dc:20:ce:33:01:5b:7a:80:2f:0c:55:17:11:
                    52:c8:5c:1b:2d:73:3d:cd:7d:98:b3:55:c4:7e:e1:
                    72:eb:50:ec:c9:26:ff:81:73:c9:bc:21:3a:41:a6:
                    73:29:8f:48:82:19:14:de:4e:1a:68:c8:7e:4f:23:
                    5b:1a:35:23:6c:02:ec:29:70:52:4a:40:66:34:bf:
                    7a:3a:09:46:9e:a6:0c:cf:47:7d:64:0f:d3:71:68:
                    58:07:82:5d:63:1a:7d:42:15:b8:7c:c1:7f:2c:f4:
                    a7:bc:95:90:61:2b:c4:12:0f:ec:7d:43:97:45:7c:
                    67:84:1e:8e:6f:1d:20:c1:32:0c:03:d4:e3:27:e6:
                    f2:45:ad:de:e9:4d:cb:4c:ab:32:9a:de:f9:c2:ea:
                    ae:7b:c5:91:58:47:1c:70:e4:55:3a:31:9a:5d:e7:
                    21:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E5:07:2E:37:96:27:D5:24:24:15:80:CE:B9:32:91:B4:BD:4B:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c3c523f1-1652-39a2-a215-82e595fb354f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:531::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:a1:da:79:0d:fb:33:8b:1b:04:30:f1:e0:3e:71:fd:1d:9d:
         e7:87:39:d3:06:37:22:c4:06:c6:92:d8:22:e0:4e:da:c6:fb:
         b7:8f:20:32:57:8b:4f:00:9d:51:1a:4e:ce:4b:d6:49:b7:f6:
         fc:5e:8d:e3:96:e4:d9:cb:42:c9:53:1b:78:7a:53:22:86:f7:
         52:82:51:9c:43:97:cf:13:96:17:72:a0:00:09:83:bf:43:ba:
         b6:e1:3d:52:51:92:c4:b2:2e:e4:67:5d:64:af:06:c9:50:9e:
         d6:5b:18:f0:2d:b0:75:6c:96:7b:d5:d1:7c:86:ce:ed:2a:c4:
         3f:e5:ba:3b:f2:3b:d4:a9:2f:6f:6d:bb:8d:75:f5:67:08:c9:
         5d:f8:78:53:52:3e:39:65:99:77:5e:41:8b:ea:37:89:31:28:
         32:00:72:d6:e2:24:38:25:dc:b7:6f:a8:eb:c9:44:34:6f:87:
         b2:07:86:0f:cf:0a:c6:0b:1e:c7:60:e0:57:3c:cf:94:e3:b7:
         67:17:0a:15:b2:ee:42:f3:c4:63:65:96:e1:33:9a:2d:37:24:
         d5:5f:6b:3f:db:4e:ab:2e:b2:e1:2f:c0:b9:d3:20:b7:09:ce:
         59:0c:3a:81:d6:3a:a5:9d:14:fd:d1:a9:3f:e4:7b:63:3f:a9:
         19:84:ae:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:49:04 2026 by rpki-client