Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02510d32-350c-313e-936b-3ebdbbc8f953.roa
File:                     02510d32-350c-313e-936b-3ebdbbc8f953.roa (raw, json)
Hash identifier:          LEWjRP8vChsZx5mPqKkeGVD1leORCWPZk5vyUxtIuhs=
Subject key identifier:   A7:47:07:A0:6F:B1:6B:F3:00:2C:CA:2D:91:68:4F:D8:DF:FB:0A:48
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DEB3FCAD91B3280BE5B50
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02510d32-350c-313e-936b-3ebdbbc8f953.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     401117
IP address blocks:        2001:470:323::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:eb:3f:ca:d9:1b:32:80:be:5b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=8d3d470d-02b5-4d08-8a8a-cf69dbb82d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:33:fc:50:c5:36:66:47:59:9c:e5:91:dc:4c:
                    a4:5a:16:e5:26:f2:0d:67:77:3e:97:a8:37:a5:b7:
                    da:3f:d6:cf:f9:b2:df:ba:cd:e5:7c:c6:92:84:19:
                    a4:8c:c7:0b:03:e5:23:87:b4:9d:b5:f7:08:61:4c:
                    ad:62:6f:1f:dc:aa:d1:8c:e6:b3:ff:20:86:2c:7f:
                    1c:2e:bb:59:2c:db:d9:e6:d5:f4:13:e3:b1:06:16:
                    aa:d5:85:60:9b:c1:4a:ad:60:eb:56:8a:6e:54:3a:
                    a8:1b:42:00:8a:a4:d0:09:31:ec:83:15:9d:00:9a:
                    32:12:1a:a1:c5:3b:aa:db:e5:22:0d:1a:6d:53:69:
                    db:09:40:b9:85:5e:0e:c9:d7:e7:21:0c:bb:bd:28:
                    86:73:cf:2b:36:3a:1f:33:31:07:41:b7:f9:e8:b6:
                    15:df:39:d3:08:c0:98:98:04:0c:1b:63:64:48:d3:
                    15:c2:fd:ca:8c:73:05:ba:d2:e4:a5:74:fb:27:e0:
                    69:eb:db:fa:fb:e4:be:f9:ae:7f:9d:4b:b5:72:53:
                    9b:cf:04:28:64:7e:26:ab:b5:e4:de:8e:c0:fa:8f:
                    fd:5a:95:09:32:1f:0c:d0:11:08:9e:42:33:58:70:
                    2d:4a:9f:3e:ce:a0:d2:f4:e6:3e:56:82:9a:c3:f6:
                    c2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:47:07:A0:6F:B1:6B:F3:00:2C:CA:2D:91:68:4F:D8:DF:FB:0A:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02510d32-350c-313e-936b-3ebdbbc8f953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:323::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:c4:6f:0b:7a:c7:f9:04:61:b4:2b:21:14:4d:90:c8:9d:9d:
         67:20:64:a4:69:37:3b:b6:05:c4:ed:31:18:19:fe:65:02:24:
         a6:0d:31:94:5a:84:3e:e1:5d:40:ad:c6:6f:2d:6d:ab:1e:c5:
         91:b0:60:f4:80:bf:13:7a:3e:9f:61:cd:25:c3:2d:a0:01:7a:
         e7:b2:54:90:a8:03:9e:2d:d9:20:4e:41:5c:51:db:46:eb:bd:
         68:99:93:22:bb:29:5d:1f:fa:28:9d:e2:4e:87:fb:ac:d9:23:
         e9:13:c5:3c:50:7e:1b:c6:a1:fa:de:4e:8b:72:df:e0:0a:3a:
         b4:40:63:96:af:14:6a:35:2a:80:d6:ac:33:c2:07:12:2c:66:
         4a:85:2b:d7:a1:87:db:e1:b8:76:88:ed:40:95:98:97:31:1d:
         81:05:89:10:3a:b5:a2:8e:e1:31:0e:20:6a:97:b4:fa:eb:51:
         6f:af:86:88:b4:49:b7:e4:4d:46:b4:71:b0:94:d5:80:b8:c2:
         9d:1e:69:dd:e8:a5:92:f3:a6:b8:9b:4e:81:6e:35:57:47:8e:
         38:39:eb:ae:6f:34:a6:e1:b5:99:e3:dc:d2:0e:76:51:64:5e:
         de:c4:03:0e:6c:b9:56:0a:11:a4:b0:aa:23:c5:9a:0a:52:df:
         e5:72:78:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:48:43 2026 by rpki-client