Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dd98441f-235d-3caf-bbac-51739dc13b9b.roa
File:                     dd98441f-235d-3caf-bbac-51739dc13b9b.roa (raw, json)
Hash identifier:          8UugJH8+Xg7t/9IGFbpVhaLCTSQpd33wUpYY0QU8/oU=
Subject key identifier:   8B:EC:6F:CE:66:1D:78:1A:CE:04:AE:1D:FA:D5:8B:55:67:AB:E2:90
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F20F7CF309E2738BCE2975500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dd98441f-235d-3caf-bbac-51739dc13b9b.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     24812
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:cf:30:9e:27:38:bc:e2:97:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=fc59698d-5fcb-44db-867c-8ea1afa40539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6c:88:8a:5d:f9:1c:48:d6:6c:e6:c4:4f:7d:
                    57:64:1c:9d:dd:21:11:d1:f8:bb:ba:f7:2e:ce:a1:
                    53:e6:ab:1a:10:a6:aa:97:6a:81:94:5c:9d:2e:12:
                    b0:db:41:54:20:1a:57:16:10:4b:70:db:b0:34:52:
                    34:0d:b3:c1:2a:fa:74:9c:13:4f:a5:ae:de:13:a6:
                    61:ed:61:fe:10:0d:31:c0:91:43:f1:30:26:73:be:
                    e4:c4:ab:6e:de:3e:ca:b4:ce:da:cf:56:c8:f3:9f:
                    d1:e4:9f:a2:4a:33:6a:be:ff:ef:41:cc:5b:d7:2b:
                    39:00:19:aa:ee:65:40:e6:89:3b:4a:8d:32:86:32:
                    3a:49:bb:24:9d:fc:26:d7:e3:1d:0a:1a:5d:32:74:
                    79:d1:af:99:f2:87:33:30:bf:b1:74:5d:3a:98:6e:
                    1e:5f:e0:1c:b2:1e:d3:76:70:f6:ed:09:0b:23:a9:
                    7c:2d:84:9a:b8:e5:3d:e1:43:be:b3:d5:e2:6d:08:
                    85:db:e9:7f:b5:68:ba:7a:b5:b8:99:9a:6d:02:2f:
                    12:9f:6f:f2:cd:b1:ce:af:cf:f6:fd:d3:19:04:a9:
                    48:b2:41:b6:e6:7a:bf:f2:86:ee:db:ae:4c:f2:36:
                    f3:ba:a8:23:37:09:66:3e:ba:f3:6e:91:26:a7:92:
                    37:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EC:6F:CE:66:1D:78:1A:CE:04:AE:1D:FA:D5:8B:55:67:AB:E2:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dd98441f-235d-3caf-bbac-51739dc13b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:a4:69:fe:dc:d9:ad:15:29:47:f2:06:65:90:1f:fa:38:a9:
         b8:d1:6f:8a:0e:2c:46:38:16:26:68:40:46:32:62:81:7f:6e:
         f2:80:be:94:b4:72:73:f4:98:21:7f:b6:9d:fb:83:c9:c6:29:
         42:37:f3:df:0f:70:2d:42:10:96:7e:70:56:d2:a8:aa:af:13:
         f7:54:0e:dd:35:0d:f4:a2:20:2f:40:60:56:7e:5d:37:9e:f9:
         eb:81:ab:53:e8:3b:68:b0:8c:a2:37:d8:a0:eb:6a:b0:f6:ea:
         05:95:90:2a:86:33:b7:3c:d2:90:5f:92:12:b7:98:78:b5:d9:
         6e:70:4f:bd:cc:c6:ac:19:aa:93:99:46:68:6d:58:a2:93:31:
         05:3d:c9:76:c9:c8:87:29:9f:20:e8:be:00:31:08:ac:c3:70:
         62:a7:3c:64:06:bc:1a:9b:c1:1b:d3:6f:84:56:6f:16:d2:df:
         cf:7f:a0:ba:84:2c:d4:5f:7d:89:e4:3e:bb:f7:e8:57:4f:a4:
         9b:ed:a6:7f:d0:fb:e9:b3:8b:3d:03:61:45:20:bd:4f:21:4a:
         46:9c:84:31:2c:6b:76:a7:5b:a5:39:37:c9:7c:b0:1e:56:77:
         89:3b:fa:e5:ce:68:72:ba:1a:b1:7d:11:f7:2a:66:de:47:3c:
         55:f7:e9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:47:19 2026 by rpki-client