Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cff52492-5cc6-34c4-a3a3-b87713458a9d.roa
File:                     cff52492-5cc6-34c4-a3a3-b87713458a9d.roa (raw, json)
Hash identifier:          RjnDRlutc4HlUvxDZ7F7kKqJbqWe7rUT0Sz+yGpNT6M=
Subject key identifier:   FB:00:A9:A1:95:C6:38:D4:42:81:E4:E1:10:F3:02:24:11:E4:D9:80
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E815FC1A97489DCA338D15400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cff52492-5cc6-34c4-a3a3-b87713458a9d.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     25447
IP address blocks:        2001:470:224::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:c1:a9:74:89:dc:a3:38:d1:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=46b0a9e5-aa10-416e-96f8-076c5d06bac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d1:70:99:b8:b6:cb:db:3f:93:02:ab:cc:04:
                    50:83:d6:81:67:af:05:12:27:00:1f:8e:7b:ca:40:
                    47:be:2a:85:e3:1d:83:45:30:ea:b4:fe:27:27:4e:
                    b3:37:5c:14:49:bd:b0:d2:4a:5d:47:55:01:78:c0:
                    be:2f:97:d0:b5:da:b7:b8:e9:ff:5a:ca:99:6e:4e:
                    8e:e0:91:13:9c:bc:21:16:ca:ed:f4:09:5c:ed:5f:
                    f5:36:13:10:0a:06:4a:a2:8e:4b:01:15:fe:f4:a2:
                    0c:d4:63:9b:2a:43:b6:71:33:a4:fb:98:a1:58:e4:
                    da:b9:f6:2e:9c:f4:df:db:59:15:4d:fd:95:cb:79:
                    f3:ab:b6:b2:33:0a:45:11:78:a9:f9:5e:77:16:48:
                    02:96:e2:80:38:c7:f5:99:9c:29:7c:05:74:6f:86:
                    9b:60:60:2e:71:cd:33:a7:8d:5b:ed:34:cf:9a:9a:
                    33:b7:72:be:ad:7f:f4:d3:8c:0f:92:92:ed:9c:dd:
                    53:0f:bc:56:ca:0f:45:40:2f:18:61:2e:52:83:28:
                    16:7a:35:40:bc:50:72:0f:07:0c:6e:53:bb:e2:2b:
                    8c:e8:2e:07:34:34:e1:35:4e:72:e3:2e:5a:f4:a1:
                    78:2a:7d:45:41:f6:1c:ed:5e:f7:54:ed:fe:4d:3e:
                    0b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:00:A9:A1:95:C6:38:D4:42:81:E4:E1:10:F3:02:24:11:E4:D9:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cff52492-5cc6-34c4-a3a3-b87713458a9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:224::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:a8:57:8b:54:0c:0d:5a:4f:44:51:9c:3a:63:a1:b5:a7:97:
         fe:c9:ff:f4:34:b4:9c:82:2a:b9:46:e7:cd:b8:8d:e9:e8:90:
         e6:03:f0:58:44:b5:7a:18:cb:5a:a7:f6:2d:7f:9c:48:c4:b3:
         9d:13:c6:56:9d:85:57:2e:d9:1e:39:3d:37:9a:73:0d:df:d5:
         7c:7b:08:67:28:ff:16:ad:8a:eb:95:a2:69:bc:8b:7d:03:03:
         b1:9a:dc:c6:8b:dd:61:62:e6:ef:e5:0b:03:49:e9:ed:12:f7:
         55:48:a5:4e:e8:c6:ec:34:f9:35:b2:39:51:9c:d9:5a:30:62:
         19:60:a9:33:b9:73:ad:2b:d0:4c:42:b3:ef:53:bb:59:77:e5:
         0c:52:85:65:40:b6:61:84:f5:69:6b:72:4c:3c:9a:05:f4:3c:
         55:11:1f:6f:25:6e:56:bf:3c:d8:84:de:34:7f:14:89:9b:3c:
         5a:8e:5b:91:eb:ce:b0:43:4c:35:9a:1b:75:ae:45:e8:c3:13:
         b0:53:c5:67:59:a3:ed:8b:b1:09:d4:8b:69:8e:94:ae:57:6e:
         b2:d8:cb:2a:aa:30:cf:ca:74:51:a7:e9:b7:98:58:55:7d:90:
         03:da:f7:fb:e4:64:73:56:d4:dc:ae:e2:18:a3:ee:85:fa:24:
         57:46:0b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:05:52 2026 by rpki-client