Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbb25b1f-fd3c-3511-ad7e-eb73ca53cfab.roa
File:                     cbb25b1f-fd3c-3511-ad7e-eb73ca53cfab.roa (raw, json)
Hash identifier:          Dl2Vth/Q7cnW5ynb8pzti6wtgrPDn5Mo5sfRKhZoBOo=
Subject key identifier:   4C:40:0A:9A:E5:C6:EF:E1:B2:51:DB:37:6A:BD:73:3A:A4:E2:A7:ED
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E736A17A2310020B7781B5100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbb25b1f-fd3c-3511-ad7e-eb73ca53cfab.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     215492
IP address blocks:        2001:470:426::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:17:a2:31:00:20:b7:78:1b:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=2bfc2c59-a83b-42f7-a545-e08268227a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b5:52:6b:6d:94:e7:90:47:36:9e:67:cc:0a:
                    88:17:b3:bd:62:7b:63:c9:e7:87:af:34:78:56:30:
                    e1:1b:fc:95:96:5d:9d:1e:fa:2f:9f:94:a0:d0:1e:
                    32:a4:a6:5a:ec:a8:7a:ec:04:6a:27:93:76:c6:56:
                    4a:5a:eb:31:80:23:2c:41:30:60:96:91:3f:84:be:
                    76:13:5d:59:95:54:1f:00:2f:ee:8d:ca:88:8f:94:
                    f3:0a:e1:19:2e:f1:b6:db:6d:f6:3c:57:65:1f:a6:
                    f8:9e:68:66:1e:64:fe:7e:18:08:05:c6:7a:7c:b0:
                    ad:5c:03:e7:64:c5:8b:d1:b3:27:58:fa:39:78:8d:
                    64:cb:70:d4:24:ea:eb:a5:4a:32:37:bc:4b:d2:9d:
                    68:6a:a9:dd:ff:c2:8a:6a:a6:0f:bc:d5:20:83:4e:
                    ba:72:fa:e3:1a:89:6f:06:36:fb:80:e9:23:09:63:
                    4a:0d:d7:4e:1e:0a:56:97:93:ae:ea:96:52:28:9d:
                    b8:e1:18:7f:7d:90:04:6a:a9:42:ed:7e:8e:58:58:
                    aa:aa:0d:11:b6:af:92:ea:47:d5:2c:91:5f:80:f7:
                    97:61:38:ea:eb:b4:5e:b1:f1:0a:6a:fa:e3:31:cc:
                    fb:9d:d4:10:ff:69:0e:02:70:e4:6f:2a:80:5b:fc:
                    73:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:40:0A:9A:E5:C6:EF:E1:B2:51:DB:37:6A:BD:73:3A:A4:E2:A7:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cbb25b1f-fd3c-3511-ad7e-eb73ca53cfab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:426::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a6:8c:7b:b1:2c:0e:99:17:c3:af:60:e4:37:82:0e:c0:cd:
         cc:36:09:f1:f7:ac:6b:b5:ca:b5:5a:45:ba:29:af:82:89:d4:
         42:5e:e5:16:14:79:53:47:97:f7:2d:2d:b8:70:80:ac:00:b0:
         5f:d3:2a:2d:cd:2f:77:fa:ac:04:58:4c:b7:0e:ca:90:57:99:
         eb:7d:38:dc:49:0b:6d:25:6d:f1:10:17:97:54:f8:58:e7:4d:
         4a:65:e7:40:cb:2f:1e:79:f4:81:74:59:77:ea:6c:5d:ab:90:
         eb:09:4e:93:4c:b7:8c:3a:0e:78:6c:24:ab:42:09:fc:3c:e8:
         f5:7b:2e:ae:b5:a3:8f:91:83:5d:35:b2:4d:46:e7:88:bd:b0:
         c4:83:94:7c:d6:32:df:08:d0:85:f6:75:6d:df:bb:5c:dd:43:
         09:db:39:5a:c4:67:0a:7d:0a:7b:df:66:1e:7a:aa:13:c9:24:
         4b:3f:9c:27:a4:3d:86:c5:27:81:01:94:1a:42:4d:7a:f1:80:
         dc:95:c1:14:7b:58:e7:b5:06:b6:69:1b:f6:93:bc:4e:d5:9d:
         39:25:af:19:3e:fe:cc:7a:b0:bb:26:3f:a9:59:ff:7a:90:7c:
         d0:1a:ce:ec:90:35:84:3e:98:01:35:56:5b:71:94:f6:0a:e1:
         45:89:23:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:09:27 2026 by rpki-client