Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fff9ea91-21f3-3786-be09-fd1a98051694.roa
File:                     fff9ea91-21f3-3786-be09-fd1a98051694.roa (raw, json)
Hash identifier:          /XWF1vWeP5ymf8ZdGAdvsOI94i0M6uDl/+1gVExxHws=
Subject key identifier:   CE:E0:22:32:DB:07:83:65:A2:EA:B1:BA:00:70:09:03:09:F9:68:26
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F498993D67A0005DE67C69C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fff9ea91-21f3-3786-be09-fd1a98051694.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     17717
IP address blocks:        2001:470:3fd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:93:d6:7a:00:05:de:67:c6:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7d9f6583-9116-45e8-852c-03735ccdbd74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3b:ef:c1:d1:8a:52:32:cc:3d:1c:01:c3:2b:
                    85:88:e7:a7:66:c8:55:e8:54:f6:50:18:73:e1:66:
                    7a:aa:1a:88:92:47:5a:65:ab:c0:fa:f8:67:b0:32:
                    aa:0f:f3:54:7a:99:5c:d8:23:98:18:1c:01:d4:f6:
                    75:ca:56:71:05:db:84:b7:e6:85:35:ad:61:80:ef:
                    08:6a:81:16:dd:a1:b8:1e:4c:6c:61:12:2b:da:3c:
                    a0:1d:1f:48:0b:0e:c5:b7:ed:f0:db:eb:4a:04:c3:
                    d7:e8:24:77:6a:58:75:34:06:ee:42:f9:a7:80:bc:
                    b5:d3:11:f9:ed:0e:bc:f7:f0:54:8c:41:25:33:3c:
                    1c:1f:67:53:6f:de:14:52:4a:21:02:7e:b7:50:2c:
                    05:34:ec:40:f9:4f:47:3c:6d:aa:38:d7:be:81:7f:
                    bf:78:d4:1a:ef:bd:9b:8c:08:94:49:35:84:ea:d4:
                    65:fb:1b:10:bc:d6:b9:fc:8d:cc:45:8b:65:a8:4f:
                    25:84:28:69:ce:6d:84:5f:be:4f:6f:53:e1:8c:0e:
                    4c:24:62:6c:70:35:7f:98:6b:43:57:56:54:a7:8d:
                    8b:85:e4:e6:4e:b7:74:d2:2b:62:16:e2:ad:cc:09:
                    7b:3e:b3:9d:8d:66:5d:be:7d:9d:35:eb:ee:43:b1:
                    a8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E0:22:32:DB:07:83:65:A2:EA:B1:BA:00:70:09:03:09:F9:68:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fff9ea91-21f3-3786-be09-fd1a98051694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:9c:5a:e4:dc:a0:68:4f:fd:10:32:c1:e6:8f:3f:64:6c:8c:
         ff:7e:f6:66:8b:c1:ec:7e:4d:9c:36:e4:8a:d2:23:db:a8:10:
         09:ee:2e:6c:a0:94:db:d4:bc:5a:81:1b:0b:db:88:dc:fa:a8:
         a3:e5:25:b5:f6:3c:db:f2:2d:92:3e:3a:86:78:13:bf:a0:b4:
         ff:30:b2:19:e9:b1:ad:bf:9f:b9:5f:4a:2a:fc:a5:7f:f3:57:
         e8:4a:96:a4:af:69:e3:18:76:0c:da:1f:66:22:f0:a2:9f:c4:
         84:c7:74:16:38:de:43:de:db:df:a4:5b:15:45:20:6e:c0:68:
         f5:37:7c:6a:0f:63:b6:28:aa:6e:cf:02:1d:6d:65:f4:b1:96:
         85:72:ec:3b:80:b7:d2:3d:b6:c4:4c:2c:1b:93:9c:5b:3a:cc:
         6b:1c:3b:86:fd:11:fc:a4:32:ae:ee:62:39:08:8e:31:5f:f1:
         c0:ce:c0:fe:82:37:15:cf:16:2a:74:a9:57:b4:b3:6c:cd:8d:
         d9:72:a8:50:81:d4:31:db:d1:c6:14:0c:d0:50:c2:e7:36:90:
         a5:e9:6c:4f:5a:c6:6d:d6:9a:d0:9b:76:02:e3:7c:84:5e:28:
         9d:8d:67:77:a1:15:0d:d7:59:86:cf:7e:e1:15:06:4d:ad:31:
         ed:56:f1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:02:18 2026 by rpki-client