Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/efc89b79-b2b3-3f1f-b06e-ee30b8bc389f.roa
File:                     efc89b79-b2b3-3f1f-b06e-ee30b8bc389f.roa (raw, json)
Hash identifier:          8mWJnHLlUlp+8WIaLR+e3JsfpFvJJtepyiUy040xknU=
Subject key identifier:   33:DC:97:66:1F:10:87:7A:A7:09:F9:15:AE:CC:02:C9:FD:83:21:94
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F60CD9766CBB04358BD00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/efc89b79-b2b3-3f1f-b06e-ee30b8bc389f.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     46231
IP address blocks:        2001:470:a9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:60:cd:97:66:cb:b0:43:58:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=0f82c819-3aec-4da1-ab74-281abc2c2140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:18:dc:4b:4a:ef:f2:15:52:6f:62:db:65:e5:
                    ff:e1:0d:54:7d:07:07:20:9c:99:6b:30:9f:f4:09:
                    10:10:4f:18:18:5a:0a:3b:43:c7:ce:b4:c9:8c:63:
                    5e:2a:c0:9a:db:36:47:52:29:23:fd:20:ef:8e:67:
                    56:fa:fe:d3:d6:b5:4a:09:31:2b:1c:4f:88:c8:54:
                    f7:2b:e8:32:7b:3b:ff:01:91:bc:6f:34:65:82:c9:
                    79:1d:27:5e:6a:00:46:c6:09:be:46:f0:aa:33:14:
                    d5:6f:68:8a:7b:a4:8e:85:ed:36:62:95:43:5a:78:
                    9b:94:68:db:bb:0c:d6:4d:5d:88:1f:29:c3:38:68:
                    8e:74:b3:a4:61:b5:01:fb:94:99:09:ba:51:7f:a7:
                    53:2f:62:26:fd:10:c0:ea:85:2a:dc:6c:44:f0:65:
                    68:9b:b1:4e:9d:4a:bb:7d:f6:49:b0:c0:f7:dc:7a:
                    7f:96:2a:87:9f:f7:db:0a:c6:c7:c0:17:15:55:0c:
                    56:cc:d5:76:38:b8:93:b3:64:2e:b3:e8:09:2f:fc:
                    08:2f:c8:bd:7f:63:c3:53:d1:3d:fb:72:6b:32:86:
                    2c:89:c6:bc:d5:1d:fa:2f:62:dd:3e:52:e8:28:fc:
                    38:f3:9e:cd:e5:e2:a9:ce:05:27:77:3d:89:18:8b:
                    7f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DC:97:66:1F:10:87:7A:A7:09:F9:15:AE:CC:02:C9:FD:83:21:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/efc89b79-b2b3-3f1f-b06e-ee30b8bc389f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:a9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:00:1b:e9:66:15:32:ac:39:67:5c:87:3c:6e:32:f8:90:02:
         0d:b2:28:43:e5:bd:e2:fe:55:5b:98:1f:ed:d8:4c:e5:1a:9c:
         70:f8:68:57:55:97:0a:da:39:21:f1:cf:44:50:fc:90:f5:57:
         38:a3:3b:35:ab:2c:12:3e:75:b0:8d:d1:e2:b8:dc:98:20:a4:
         ad:05:b8:32:50:f1:bb:e9:3a:bf:8d:01:0b:78:d1:83:ce:81:
         b0:4f:c7:a1:0a:52:cc:e7:5b:e3:8b:54:1d:2d:f5:db:aa:05:
         51:6b:7e:ca:7d:ec:ae:ae:e4:05:1a:68:c2:39:ee:20:bf:87:
         fe:2d:b2:50:a6:2a:d2:0d:e3:6a:bf:d9:20:95:19:2c:de:aa:
         28:46:c4:48:10:07:f4:d1:60:f7:c6:9c:26:79:a1:ac:ea:dc:
         2f:4a:ea:29:c2:ee:4a:a4:27:5f:a5:73:7d:8d:02:a5:ee:26:
         0b:12:28:b0:a9:c8:36:66:43:69:fa:64:3c:23:98:4b:03:cb:
         99:d6:eb:95:66:bf:ad:f4:e7:e8:11:92:87:99:65:80:eb:80:
         6a:c7:a4:0e:1b:a0:43:12:82:2f:be:45:36:31:6d:d4:bf:4b:
         88:68:ca:2a:c2:25:60:31:24:86:a4:36:c5:a7:83:f5:31:66:
         ff:74:f9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:49:36 2026 by rpki-client