Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f9d579bd-1df8-38cf-9173-78fbe522f911.roa
File:                     f9d579bd-1df8-38cf-9173-78fbe522f911.roa (raw, json)
Hash identifier:          GV39C1GXhLR2+4YkzpRgKufxowLtP+27gcoQ1v2Szm0=
Subject key identifier:   E6:05:72:08:74:F2:C8:6C:79:54:88:6A:3A:E5:5C:B3:BE:E4:12:9E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E2F0453DD37A25ED74859AF38
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f9d579bd-1df8-38cf-9173-78fbe522f911.roa
Signing time:             Mon 15 Jun 2026 21:00:12 +0000
ROA not before:           Mon 15 Jun 2026 21:00:12 +0000
ROA not after:            Sun 13 Sep 2026 21:00:12 +0000
asID:                     399784
IP address blocks:        2001:470:4a6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2f:04:53:dd:37:a2:5e:d7:48:59:af:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 15 21:00:12 2026 GMT
            Not After : Sep 13 21:00:12 2026 GMT
        Subject: CN=4d977b05-c038-4a5d-9a28-0a75c664ac7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b6:9f:d4:f6:68:f9:b7:6d:0b:77:af:85:a7:
                    67:56:90:d8:8c:a9:f3:14:be:4a:2d:56:d9:16:84:
                    45:3a:f8:54:66:16:d0:b9:5a:7c:28:eb:39:2f:0d:
                    60:0c:40:76:ac:12:51:26:6d:4a:f3:53:bf:fe:88:
                    8d:1e:ac:6d:22:95:96:34:d9:c6:7b:ff:70:8d:a6:
                    eb:12:b9:9d:3e:06:71:be:95:15:94:40:8a:04:e9:
                    ba:a6:ca:64:27:ee:ec:6b:42:37:a2:b9:e0:6f:62:
                    56:9e:4d:b7:eb:e1:66:5c:57:69:f2:2c:5e:c7:4b:
                    7d:22:9a:4d:1b:88:49:b5:f2:ac:94:34:7a:d7:1f:
                    2b:5d:dc:cc:a4:bc:9e:3b:44:6e:80:77:a8:e0:13:
                    df:8a:88:37:4a:14:c0:83:06:7c:df:f7:b4:e9:38:
                    b2:8e:23:1c:1c:9c:e2:58:31:ca:c2:e8:bb:ae:40:
                    80:63:7c:55:87:50:fa:81:b5:a9:50:57:00:83:56:
                    98:7f:85:6f:ba:82:1e:bc:34:6a:cb:ef:66:40:85:
                    6c:55:ad:6f:58:c2:1b:56:34:dd:be:27:73:6b:a2:
                    d3:2d:1c:3b:15:c5:77:91:97:07:d0:72:01:df:e9:
                    7a:34:14:4d:4f:db:db:a2:55:cd:fc:52:b7:e0:a1:
                    fe:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:05:72:08:74:F2:C8:6C:79:54:88:6A:3A:E5:5C:B3:BE:E4:12:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f9d579bd-1df8-38cf-9173-78fbe522f911.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4a6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:28:23:dd:f6:bc:37:79:c6:33:db:de:d1:cc:81:97:d3:6f:
         ea:b9:70:dc:e3:ef:f5:c8:f2:a4:04:2c:5c:b3:c2:f2:6d:68:
         35:1a:5f:f3:5e:59:9f:9e:8e:3d:0e:8a:b4:9b:1c:30:d0:39:
         62:62:e1:58:d3:bc:12:2c:85:d7:2e:d9:11:49:40:33:8f:af:
         82:b1:66:d5:ff:13:5a:aa:19:ce:1d:76:40:12:de:0b:62:e1:
         f9:56:20:bf:bf:27:2a:55:96:bb:f9:d0:19:89:3a:30:7d:ed:
         a5:7f:06:d2:6c:9d:16:7c:57:da:f0:06:a7:3d:0a:69:0e:50:
         07:a3:1b:e8:4d:76:a5:01:b3:53:3e:b9:88:94:5c:6b:c4:45:
         af:9b:cd:d8:3b:ff:be:ca:53:60:68:df:1e:a5:fc:44:7b:41:
         f5:dc:0f:2a:e5:c0:1f:28:9f:db:c6:1a:9c:5b:46:ce:ed:1f:
         af:83:9b:cd:7b:f0:ff:49:37:9f:c4:43:b9:c2:0e:28:8c:3f:
         c2:d4:6b:2e:b3:a3:80:d2:92:5e:2a:4e:b4:5f:db:b2:74:82:
         db:72:9f:b6:5b:fa:38:96:e5:71:05:10:99:2d:5b:ad:a1:f8:
         90:ee:3e:60:90:24:64:e2:23:8d:6d:1c:ef:09:14:69:45:2f:
         67:ea:49:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:13:40 2026 by rpki-client