Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fc5c554b-f6f1-3ec1-9120-3643ca2e1cf1.roa
File:                     fc5c554b-f6f1-3ec1-9120-3643ca2e1cf1.roa (raw, json)
Hash identifier:          hKfUo/FgISwg0CopaMzAL3FsNxNcczvO6Uf5+RDQjr0=
Subject key identifier:   A3:52:E8:8D:C4:DC:1A:AE:03:99:04:59:64:2B:EC:DE:36:0A:94:91
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F03A7775E97E7BEBE5B96E760
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fc5c554b-f6f1-3ec1-9120-3643ca2e1cf1.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     23511
IP address blocks:        2001:470:4b5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:77:5e:97:e7:be:be:5b:96:e7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=27c3a628-d47b-4b3f-a0d4-7a9bbc20dcb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6d:22:9c:a9:cf:bc:02:65:c8:83:7b:cd:ad:
                    19:f5:08:cb:de:f1:1d:0c:c7:85:91:27:43:08:7b:
                    4e:9e:82:d2:46:d4:67:73:22:31:11:2b:e3:a9:94:
                    02:03:c4:b4:05:7b:1e:36:14:e4:2f:dc:cf:14:2b:
                    1d:a8:5b:3b:03:60:fd:7e:d6:74:74:02:cb:f8:48:
                    eb:f0:15:14:58:e1:d9:b3:6c:fa:2b:44:ea:91:a9:
                    76:58:cc:f6:0a:75:2b:85:56:47:f8:df:1c:fa:5a:
                    fb:6f:63:97:d7:54:d4:d1:7b:e8:9f:e3:0a:ce:d9:
                    7d:e1:a0:fb:05:c1:d2:75:f1:67:86:8f:1b:80:f1:
                    f8:16:e7:a8:36:b5:00:d2:7e:73:98:e7:b2:ea:5e:
                    c4:d0:b8:88:16:b2:bf:db:72:f4:0d:79:36:fb:9e:
                    11:f0:35:91:87:a6:3e:79:27:52:bb:f6:ce:52:18:
                    14:9a:5d:7f:42:0c:7d:a2:47:77:5b:6b:73:31:ae:
                    99:4e:72:40:87:f7:e5:5f:89:25:d8:77:4a:60:cf:
                    a5:a0:18:99:53:69:16:c7:05:76:dc:72:fd:04:a6:
                    44:6b:71:0c:e7:c1:23:2e:e6:ee:1b:da:60:9b:eb:
                    4c:50:f3:d2:d9:ad:33:ad:d2:00:a0:8b:e5:75:fb:
                    15:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:52:E8:8D:C4:DC:1A:AE:03:99:04:59:64:2B:EC:DE:36:0A:94:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fc5c554b-f6f1-3ec1-9120-3643ca2e1cf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4b5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:dd:22:5d:e6:0c:05:d9:9b:3e:7b:52:f5:ff:38:8e:13:f9:
         38:f6:5b:47:e5:12:0d:47:c8:8f:19:5c:48:a7:f0:8c:19:1b:
         36:47:ee:0d:ec:d7:05:2e:38:f5:8d:25:f1:72:b9:90:cd:14:
         bb:6a:bd:22:28:71:3c:08:2a:79:4e:66:f6:30:b4:21:2a:8b:
         d4:10:83:0c:5a:da:42:bf:3c:be:97:85:dd:79:cd:a6:14:14:
         7c:b1:31:f1:1b:79:d2:a0:bd:cf:79:6f:97:c8:10:9d:d8:34:
         7c:ff:30:53:b1:90:74:9b:36:43:ba:23:f2:e8:19:78:23:9c:
         e5:14:c5:5c:7d:2a:e3:15:69:f9:4c:29:75:47:64:29:c2:13:
         b0:d0:f0:26:f9:1a:f6:f6:d4:31:67:d3:05:b5:6e:c8:3d:f6:
         99:36:8e:b5:b7:50:e6:46:6f:ae:5e:d4:16:3a:34:47:09:13:
         3e:21:32:12:a9:0f:77:60:3f:29:24:e4:64:cf:10:91:4d:18:
         ed:73:3c:99:71:03:85:e5:ce:c3:31:33:50:d6:c7:02:57:97:
         be:17:73:65:fd:a4:8e:25:e8:f7:1b:86:a7:c0:a2:54:1b:b1:
         08:8b:02:ca:e2:1c:ae:6e:47:0c:1f:5d:d3:bf:0c:ca:e7:83:
         18:a5:0d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:38:07 2026 by rpki-client