Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5a41810-eb90-34d6-9453-d21653c9d4a2.roa
File:                     d5a41810-eb90-34d6-9453-d21653c9d4a2.roa (raw, json)
Hash identifier:          Wqy8rT6ilWLYjTe6zvbVQQ77Wf03A69g8XUjA4jgcoM=
Subject key identifier:   F2:7E:9A:90:84:36:C8:C1:EA:0A:A8:DC:5D:05:38:1A:53:B2:D6:A3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E736A38D42E38237419C20800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5a41810-eb90-34d6-9453-d21653c9d4a2.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     11247
IP address blocks:        2001:470:360::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:38:d4:2e:38:23:74:19:c2:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=6caa4796-6b13-4780-8931-e7efe565287b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:10:b4:09:dc:a0:97:c7:7f:96:84:9e:06:d3:
                    e8:36:67:6d:d5:c1:92:1a:ac:43:20:79:a4:a0:32:
                    d8:c2:51:c0:9d:e6:d5:df:cb:4c:44:19:bb:ed:a6:
                    75:9c:92:80:4c:2c:46:f5:fd:23:22:e0:78:dc:11:
                    99:ce:69:58:e5:51:e8:0c:30:b5:21:da:c1:1b:aa:
                    21:bc:dc:f4:fb:8a:2e:fa:05:5d:ed:18:3e:6d:39:
                    79:2c:63:f2:9e:2e:db:62:3e:71:8b:12:8c:a0:2a:
                    85:4f:76:1e:da:f7:f4:7a:85:de:c6:5e:4a:5a:30:
                    19:50:51:9c:38:4b:fc:65:94:91:d1:ee:ef:f4:97:
                    fd:9b:2a:25:04:f4:2c:91:45:07:5d:3d:43:62:8e:
                    92:5b:87:29:3d:24:6e:fb:a7:3f:5e:06:eb:16:ee:
                    b2:cc:95:0d:16:94:af:2b:d7:a7:a0:87:95:8f:89:
                    93:f7:68:49:81:8a:78:59:e6:86:ac:12:93:9b:72:
                    c9:36:31:e7:ac:bf:f2:a4:42:cb:2e:c2:90:45:54:
                    9c:0e:52:d3:0b:ae:b2:91:88:d8:4c:80:06:83:1b:
                    f2:23:9f:35:df:91:35:78:51:d7:3b:22:87:77:8a:
                    2b:aa:36:b1:a7:09:ba:e4:12:9f:9a:1b:78:a8:b5:
                    41:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7E:9A:90:84:36:C8:C1:EA:0A:A8:DC:5D:05:38:1A:53:B2:D6:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5a41810-eb90-34d6-9453-d21653c9d4a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:360::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:17:34:9a:e7:6c:e9:a8:6a:53:b3:25:b4:a7:17:5d:d8:12:
         cb:89:d9:9b:b4:ef:0e:28:8d:c9:3f:04:4f:08:16:8e:50:2d:
         a4:59:71:3d:a3:f4:4e:2d:eb:71:d6:ee:1b:aa:df:ae:45:5d:
         7f:33:db:e7:dc:35:59:3e:05:15:09:b0:46:4f:6b:20:7b:9c:
         50:35:da:36:ce:40:bc:ea:b4:f7:42:51:e1:67:19:55:95:f4:
         43:68:61:56:4b:02:58:bd:42:3d:5f:90:61:bf:4a:46:8b:cd:
         df:9c:fe:97:e8:4b:fc:5d:f1:28:dd:d0:09:45:de:b4:69:4d:
         f7:02:d6:d3:68:15:05:b1:27:58:dc:70:83:9b:06:ac:67:ed:
         76:17:3b:14:81:df:8a:0f:03:4f:24:1c:d7:cb:26:10:33:fd:
         2f:c5:5f:a7:c1:10:15:57:7f:73:bd:7c:58:1c:45:c8:96:f6:
         1d:e7:53:a3:e6:bc:5e:4a:f0:da:b7:48:c3:da:9b:75:dd:15:
         32:61:39:02:1e:8b:13:5b:3b:7e:e9:c3:8a:93:64:64:03:0c:
         7f:1d:5c:da:64:a9:3a:6c:59:c6:e2:c9:90:d5:cc:a0:bb:1b:
         64:f3:3f:3a:79:bf:2a:12:35:a2:38:38:71:71:f7:b3:17:cc:
         2c:2f:42:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:48:11 2026 by rpki-client