Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff9c09fb-87f3-3690-8f51-2c5fb8684343.roa
File:                     ff9c09fb-87f3-3690-8f51-2c5fb8684343.roa (raw, json)
Hash identifier:          hO4c3Z53AGA8Gs5eSBVMGwO6b+aLf0qgS0C6NpC5Gqg=
Subject key identifier:   0F:F0:E9:0E:14:2E:3B:06:00:88:7E:0B:A9:16:D6:75:FA:A6:A3:2E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3CF9C0C0FC61218BA9EC5C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff9c09fb-87f3-3690-8f51-2c5fb8684343.roa
Signing time:             Sat 20 Jun 2026 21:00:12 +0000
ROA not before:           Sat 20 Jun 2026 21:00:12 +0000
ROA not after:            Fri 18 Sep 2026 21:00:12 +0000
asID:                     51500
IP address blocks:        2001:470:44c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3c:f9:c0:c0:fc:61:21:8b:a9:ec:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 20 21:00:12 2026 GMT
            Not After : Sep 18 21:00:12 2026 GMT
        Subject: CN=89299c15-4a88-4cf6-82dd-4f80d03ea99d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6b:c7:5b:87:b6:00:55:f1:1a:d1:d8:4d:d2:
                    d3:bd:08:e0:7f:1e:8b:d6:64:55:75:1d:63:d7:d4:
                    94:0d:f3:6a:c1:e5:de:dd:e7:41:34:35:e7:91:42:
                    31:1d:aa:1e:9d:4a:9d:b1:a4:8e:44:2e:a6:6b:8c:
                    3f:e7:9f:c9:85:0f:11:63:27:08:61:44:c0:58:58:
                    b6:5b:c3:46:0f:d6:64:7d:82:86:04:7c:6b:3a:f6:
                    f2:5b:cb:b8:e1:31:d7:61:66:44:8d:ac:7c:7d:31:
                    d8:5c:fb:71:49:5e:61:34:93:5d:1c:d4:b1:ff:60:
                    02:cb:4a:02:14:21:54:de:61:0d:fc:2b:f3:b7:ec:
                    04:db:0c:4b:13:ba:f8:ee:4b:5d:a3:c2:cc:b0:5c:
                    58:70:11:1e:d2:cd:7f:b0:51:30:70:cc:94:e4:d8:
                    eb:6d:34:db:69:b5:53:66:2c:34:69:e7:ca:b7:24:
                    6f:d1:60:34:76:2c:26:91:e8:57:51:2a:d1:e2:0e:
                    9f:56:7b:46:df:61:50:e5:68:8e:b6:99:db:d4:77:
                    f0:9b:8a:3a:8f:35:4d:01:6c:7b:98:89:99:e6:84:
                    33:e8:69:0f:b7:76:54:4b:14:f5:d4:2b:20:e9:0c:
                    be:58:f8:96:0d:c8:8e:25:a2:f6:0f:ff:f3:04:fc:
                    d4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F0:E9:0E:14:2E:3B:06:00:88:7E:0B:A9:16:D6:75:FA:A6:A3:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff9c09fb-87f3-3690-8f51-2c5fb8684343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:44c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:d1:84:d1:69:fd:4c:e1:62:3c:54:fe:0c:a7:df:62:c5:5c:
         f5:c0:9e:06:4f:93:88:64:3a:94:a9:77:50:a4:20:f5:62:f3:
         fe:c6:95:2d:db:2d:d5:27:29:bc:8f:ad:f6:01:9d:68:85:ae:
         c2:8d:7d:d5:d3:35:18:5b:d1:e2:8a:f7:98:30:28:df:6f:62:
         00:dd:37:fc:25:12:96:29:63:5d:da:7a:2f:45:22:bc:d8:31:
         de:5a:0d:3e:f3:a8:83:b3:f2:ad:25:40:96:38:d6:77:7f:14:
         0d:d2:50:2c:d1:07:64:4e:a0:7f:d4:54:53:5e:c8:6c:8f:28:
         d9:11:2f:83:0c:5c:c8:f6:f1:b6:2d:d7:5b:74:92:28:1d:6a:
         1a:25:f3:dc:e7:af:57:d4:45:63:41:6b:71:31:94:26:10:6b:
         5b:a2:7f:96:d7:a1:b0:87:e3:1d:33:b8:cf:ff:8b:1b:92:af:
         cf:6a:e1:ed:7e:e0:03:b3:6a:46:92:9a:dd:74:b6:ac:1b:69:
         7a:6d:ab:0d:75:fe:56:1e:5d:a2:50:d7:5e:a4:00:3b:3f:ab:
         d6:fc:6a:d5:2d:df:f9:f2:ce:73:bc:e9:49:7a:82:95:91:99:
         d4:be:5e:ec:e7:73:08:dd:99:9f:de:57:32:c2:86:bc:39:99:
         f6:15:0f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:09:05 2026 by rpki-client