Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/084d6208-1377-37c5-ae6b-9442b96f194d.roa
File:                     084d6208-1377-37c5-ae6b-9442b96f194d.roa (raw, json)
Hash identifier:          vnfhX4CuP7+FPWoNQ3wu6YUqdKKkxz973h5UaPTZ89w=
Subject key identifier:   C8:34:39:E3:FB:FA:7B:E1:68:07:00:F5:AE:73:B8:57:72:67:0D:52
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DE1C22053CE61F0DA2800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/084d6208-1377-37c5-ae6b-9442b96f194d.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     29802
IP address blocks:        2001:470:19b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:e1:c2:20:53:ce:61:f0:da:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=c90427af-0104-4214-86c1-7820f9398a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c8:40:b5:5b:90:cb:3b:e3:9c:fd:29:4d:01:
                    20:02:41:83:a7:28:56:b7:2b:f1:a8:69:08:3c:84:
                    93:a2:74:f3:7f:cd:2e:47:4b:a9:8b:fc:44:6d:27:
                    a2:96:ea:b8:89:18:f2:18:79:6a:18:2b:02:13:67:
                    e5:d5:30:be:30:f4:35:46:89:55:53:7c:f4:b2:21:
                    40:45:f2:b9:76:3e:35:84:4c:2e:f9:ed:70:4a:45:
                    30:ca:2d:bb:cc:a8:bf:69:0d:a7:c6:1f:cf:92:6b:
                    e1:ba:f8:6c:04:2d:fa:00:b6:58:6a:c9:bd:6a:2e:
                    1c:fa:b8:0a:5a:58:5b:87:54:3f:b5:e6:c8:d6:10:
                    80:e6:83:ac:e1:07:f0:f3:27:bb:7a:d9:91:e3:8a:
                    d5:c8:7a:bf:a7:73:29:43:0b:bb:0a:3e:8d:21:43:
                    19:eb:a8:76:f3:24:82:e4:c0:da:83:24:52:e8:da:
                    69:e9:8d:6a:ea:9f:19:c9:c3:95:ff:38:53:99:45:
                    9b:51:a4:37:dd:09:20:0b:94:4d:da:6b:80:70:f0:
                    24:2e:48:b0:b4:25:70:cb:fb:43:e8:bf:1d:d5:5a:
                    fb:e3:17:76:f1:f3:63:5a:46:ee:3d:85:99:c7:73:
                    68:a0:b8:22:1e:05:dd:f9:36:54:82:63:a2:a1:53:
                    df:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:34:39:E3:FB:FA:7B:E1:68:07:00:F5:AE:73:B8:57:72:67:0D:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/084d6208-1377-37c5-ae6b-9442b96f194d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:19b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:42:4a:60:0a:0b:e0:67:5c:9d:0b:48:ed:60:15:e1:be:83:
         48:d4:61:82:4a:ba:33:8b:18:d7:92:a1:56:be:57:73:cd:66:
         15:e9:af:9a:72:6b:e5:55:fa:b4:c9:bb:c7:57:b7:b9:1f:c3:
         04:b0:48:ea:e2:d0:00:d2:af:c7:c7:e8:14:ae:82:69:19:ec:
         dc:37:1d:bf:a2:3e:bd:7b:54:7d:9b:0a:63:e3:64:94:5c:c3:
         7c:ec:1a:10:25:a9:55:96:d2:88:61:12:7c:c0:01:cf:aa:f0:
         5d:01:67:37:63:0d:bf:fb:d4:19:34:23:99:44:35:c4:37:c4:
         ac:be:77:7e:51:f5:14:69:d8:89:91:cf:f7:f6:d9:09:3c:5b:
         6e:36:4e:26:69:e6:43:2f:78:63:44:65:8e:cb:04:03:21:3f:
         84:68:96:41:bc:cb:91:e7:72:dd:5e:f3:88:ec:5f:42:1c:4c:
         41:e8:24:f9:c0:c8:12:be:95:80:36:6f:55:ef:7a:f5:b6:86:
         56:85:1f:e8:3b:d4:72:61:17:55:6e:64:b5:d2:3e:32:68:97:
         9f:dc:38:67:d5:dc:21:08:36:ab:e7:55:ca:b6:0b:66:93:5f:
         9e:73:18:46:d3:80:b5:06:36:1d:09:69:8c:7f:6f:40:a0:a7:
         78:98:ec:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 08:13:37 2026 by rpki-client