Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2f7afbe-2948-3564-91c0-61b5bde41659.roa
File:                     f2f7afbe-2948-3564-91c0-61b5bde41659.roa (raw, json)
Hash identifier:          mXNELOeD6m5NVYcwDECgdlxnyR8lMkhgDJtJLZHE/yk=
Subject key identifier:   10:24:F9:08:36:74:15:84:B3:5C:BB:83:2D:1E:24:19:96:F0:30:91
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F82ADA7BC16A77FDABCB17600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2f7afbe-2948-3564-91c0-61b5bde41659.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     12222
IP address blocks:        2001:4878:4037::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:a7:bc:16:a7:7f:da:bc:b1:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=4e4b20fb-2b24-4447-9606-790602dad0cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:48:96:74:3e:8d:7b:e5:7e:aa:c0:81:80:4c:
                    0c:ed:36:4e:98:e1:a1:b1:e6:2c:7f:3c:83:76:10:
                    91:92:91:35:a7:73:be:ab:90:5b:45:16:3c:b6:cf:
                    0d:ae:84:e0:2b:bd:b4:35:25:8d:da:e8:07:61:7b:
                    77:87:ad:9b:7a:86:c5:ab:60:ed:66:c9:dd:bf:77:
                    2f:b5:fd:40:5e:b7:b0:f7:cc:ea:72:25:67:c1:95:
                    0e:66:2e:07:5b:2f:0b:a6:c8:62:dc:d2:1c:1d:ca:
                    fc:50:c2:6e:62:1b:38:8d:a5:1d:3b:60:1e:11:b2:
                    af:38:f0:bc:f4:bd:55:99:09:73:e9:14:d0:ce:00:
                    56:bb:f8:21:23:3d:72:b5:e0:ca:99:0f:32:f7:d4:
                    d4:89:ec:62:32:67:89:34:9e:16:de:53:38:ca:ab:
                    6c:f1:bb:ff:60:ef:25:67:dd:c2:e0:a7:1d:8e:82:
                    a4:db:32:de:ed:9a:16:e2:67:d9:3f:f3:58:c6:d4:
                    2e:99:4c:87:01:77:f7:8f:ab:5b:f0:42:1f:66:c1:
                    f1:f0:9f:7e:39:94:2e:f6:0e:c2:3e:b6:81:24:78:
                    a0:aa:1f:86:c2:30:21:0e:89:2f:19:3a:2a:f0:88:
                    da:55:3e:78:17:da:e4:1e:cd:0a:0a:89:1b:5f:85:
                    50:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:24:F9:08:36:74:15:84:B3:5C:BB:83:2D:1E:24:19:96:F0:30:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2f7afbe-2948-3564-91c0-61b5bde41659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:4037::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:11:93:e1:2a:51:cd:b0:b4:c5:01:a2:57:f4:34:3a:a4:d3:
         6d:02:52:26:ed:8f:00:57:09:70:5a:2f:af:f8:ba:0f:3b:d5:
         6a:94:d7:dc:a1:6b:98:e8:fe:20:96:e6:bc:d3:95:8c:46:89:
         5f:71:7b:d7:34:05:2c:cf:07:c7:52:03:15:28:d9:56:e5:e9:
         f6:c3:e8:a6:7e:a7:55:25:84:79:16:01:78:4b:e5:b7:85:15:
         63:8c:43:63:96:8a:f5:f5:0c:ca:57:07:61:6d:2c:0b:9f:6e:
         18:a4:fa:ee:6c:10:5d:99:c8:da:2a:78:d8:5b:5d:46:14:ed:
         10:a0:0e:62:30:aa:bc:0d:47:dc:5b:df:4c:df:5e:68:c8:fe:
         6e:fe:fc:62:1b:b4:2f:31:bb:a1:d6:7b:f7:cf:bd:26:df:b3:
         99:59:13:49:c7:88:36:48:49:af:79:26:5d:8c:79:ce:4f:4b:
         eb:3b:ad:30:1b:13:9b:50:50:d7:a4:20:c3:5f:80:e5:df:bb:
         9e:22:60:e9:bc:32:ef:c2:25:dc:69:ee:05:49:2c:04:42:96:
         a2:eb:26:18:a5:49:42:43:50:ba:d6:d3:bb:99:f1:cc:bc:c7:
         4d:3b:01:e9:b2:23:9e:89:b2:4d:f0:fb:ca:e3:0c:33:bc:6f:
         39:15:85:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 00:26:32 2026 by rpki-client