Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba59b760-0142-3f51-af33-d337e00ea9a6.roa
File:                     ba59b760-0142-3f51-af33-d337e00ea9a6.roa (raw, json)
Hash identifier:          rHf40QKVsAxc9Pep3PDFO2F0NFHAJJrK0f8OpNaFWhA=
Subject key identifier:   DB:A6:CF:AC:18:F2:23:33:9C:F1:C6:A6:78:15:6A:C0:E1:FA:7B:84
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F85786300816F70FFACCCFC40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba59b760-0142-3f51-af33-d337e00ea9a6.roa
Signing time:             Fri 16 Oct 2026 13:00:12 +0000
ROA not before:           Fri 16 Oct 2026 13:00:12 +0000
ROA not after:            Thu 14 Jan 2027 14:00:12 +0000
asID:                     12222
IP address blocks:        2001:4878:a038::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:78:63:00:81:6f:70:ff:ac:cc:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 16 13:00:12 2026 GMT
            Not After : Jan 14 14:00:12 2027 GMT
        Subject: CN=5de790bb-e2eb-42e1-b474-50986b1bbb3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dc:99:61:f4:3f:5a:21:28:ef:e2:fe:5f:81:
                    53:1e:98:cf:f3:d4:c3:5d:26:73:12:ed:d8:c5:49:
                    e2:cb:ce:fb:01:30:63:57:60:c7:35:77:89:b7:89:
                    1f:02:58:aa:4c:25:22:bd:ec:c9:5e:8f:c3:2c:6b:
                    fc:c0:89:70:60:fb:c5:9b:dc:99:a9:a4:52:33:63:
                    0c:cc:d9:6d:14:a0:16:32:2b:47:a2:66:26:3d:32:
                    11:25:d0:e8:fc:24:5a:01:da:fe:a1:98:27:63:b0:
                    2a:fa:60:6a:03:cc:cb:b4:99:b5:0e:8e:62:33:68:
                    1a:0b:aa:28:a3:c1:54:47:87:68:2e:35:d3:28:32:
                    b2:72:43:fd:aa:29:58:8b:b1:0f:34:b9:53:c5:2d:
                    83:45:51:d4:f7:e9:48:0a:07:21:ad:58:51:98:e3:
                    95:70:d3:6a:8b:d9:52:e1:46:1b:6e:5e:35:56:37:
                    b3:42:c7:c5:80:27:c1:44:13:26:cf:5a:7e:8a:29:
                    d2:3c:a2:30:02:62:d6:94:2d:97:bf:67:0b:76:db:
                    3c:93:29:14:ec:d0:5b:c7:01:1a:32:f3:e4:3c:e1:
                    a5:39:ae:bc:4a:c3:32:7a:69:a4:e5:e3:a7:33:ce:
                    2f:42:56:da:01:6d:2a:2c:a5:41:a2:1e:0a:bf:bd:
                    d2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A6:CF:AC:18:F2:23:33:9C:F1:C6:A6:78:15:6A:C0:E1:FA:7B:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba59b760-0142-3f51-af33-d337e00ea9a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:a038::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:fb:32:d4:cc:f9:81:d2:8e:31:19:ce:7a:05:72:f3:87:ba:
         fc:30:38:d9:58:3e:21:36:b4:15:ff:dc:9a:cb:8f:f3:f9:88:
         31:82:b5:98:84:68:63:a0:40:1c:56:da:20:24:75:18:a0:4f:
         41:50:9e:eb:3f:fa:44:27:e0:a0:79:2e:7c:d6:55:d0:88:e0:
         91:f1:10:d8:af:f5:3a:48:a0:42:7e:cc:e3:8c:0f:20:3e:91:
         e1:3e:35:e2:e5:6c:32:f0:00:32:6f:87:8e:96:c0:57:05:d7:
         1d:7f:2c:c9:30:68:75:e4:a9:bd:a8:50:d7:c3:59:df:9c:e6:
         3c:a2:6c:f7:89:8a:a7:28:c0:56:ef:8a:55:af:3b:e2:99:be:
         1b:80:8d:de:af:5c:e8:3f:a8:85:74:30:00:6e:66:5b:4c:e0:
         b1:aa:2d:73:7c:f9:5f:d2:db:bf:a6:fb:bf:7b:16:85:4c:47:
         27:82:99:81:8a:f7:fa:a9:69:85:a4:f4:41:6e:ae:02:2e:eb:
         1e:e3:15:8f:6b:c4:69:d1:b6:2f:66:a4:e1:9f:5f:ca:29:9e:
         3a:6b:2e:fe:a2:74:9b:70:22:bd:3b:dd:3b:bd:0e:1a:3b:41:
         63:0b:83:26:cf:9e:14:28:e1:59:a8:0c:ec:c0:94:88:53:78:
         82:4c:1e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:19:25 2026 by rpki-client