Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0868ac9d-cf60-3004-a29f-14d8f9e2e2a3.roa
File:                     0868ac9d-cf60-3004-a29f-14d8f9e2e2a3.roa (raw, json)
Hash identifier:          toZiKHCBGV8/Xeg+ZEF7KPc9LtTSdTA1S3nn5OoSCy0=
Subject key identifier:   50:92:0D:88:41:C3:23:CF:6B:2A:D8:9A:65:2B:46:6F:96:D8:25:0F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DE970DB27B3AD75F6EB40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0868ac9d-cf60-3004-a29f-14d8f9e2e2a3.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     31151
IP address blocks:        2001:470:2df::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:e9:70:db:27:b3:ad:75:f6:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=b0d63da1-3716-4261-9a95-956b02404d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:19:24:8e:d0:95:3c:71:fc:9a:07:78:dc:b6:
                    23:3f:9d:69:6f:16:d1:b6:68:df:a6:8c:2f:af:5b:
                    19:cc:a1:92:9d:5d:b9:7d:c1:f6:6c:29:e7:7a:c5:
                    d0:1d:61:c3:1a:f9:9a:a7:e7:96:69:61:db:82:46:
                    fd:fb:73:26:27:35:63:46:e5:0f:04:13:01:5c:1c:
                    60:45:5c:50:cb:1e:6c:6e:92:7d:35:56:89:bd:c3:
                    ee:49:da:77:2e:21:db:c2:87:b8:02:2b:e8:d0:43:
                    ae:c6:66:77:cb:65:20:33:8b:68:d1:d7:99:df:b1:
                    7a:ab:c3:f8:ec:0f:d1:7d:e0:d8:3d:ac:c5:07:4c:
                    10:ca:20:e9:6a:fa:61:cb:48:62:3d:1e:34:c7:b3:
                    de:c8:fb:c5:47:85:29:fc:25:d5:02:7c:3b:54:6b:
                    40:b2:78:8b:d7:6e:bf:7e:80:d3:a7:dd:82:8d:1b:
                    b5:9b:88:37:c1:6f:f7:11:2f:64:d4:e5:9a:59:aa:
                    97:98:dd:38:6a:c0:83:d2:59:e5:ae:5b:24:5b:5d:
                    91:2c:75:40:05:44:e1:d6:75:2b:a8:66:ae:62:e2:
                    78:e8:f4:5b:a8:b7:e2:14:f2:5c:58:3c:2f:84:a4:
                    60:0a:7a:e9:a3:30:b0:b0:46:e3:3b:01:04:64:e7:
                    c6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:92:0D:88:41:C3:23:CF:6B:2A:D8:9A:65:2B:46:6F:96:D8:25:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0868ac9d-cf60-3004-a29f-14d8f9e2e2a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2df::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:f5:ef:41:08:c6:43:79:25:92:20:45:21:2b:f8:9a:7d:f2:
         a4:41:0e:13:00:c3:4b:7f:1a:13:9c:21:91:d8:c6:60:f3:b4:
         80:aa:0d:04:95:1e:63:f1:4e:1b:2d:0a:48:d1:90:44:ea:4b:
         05:5d:4f:2d:a9:97:f4:2a:6c:19:55:56:98:f9:44:4a:13:b1:
         92:c2:da:ff:ad:ea:ef:fd:92:a3:08:f8:f9:c6:ba:6e:31:c3:
         2a:16:57:62:6d:50:d0:d4:86:11:75:7e:2b:71:56:5f:4a:78:
         63:a8:7e:48:31:71:39:f6:51:10:71:6d:f5:32:9d:5b:d4:60:
         70:47:98:35:74:21:3d:24:34:7a:94:2e:ce:50:25:9b:4b:eb:
         86:24:b6:47:ca:57:a9:e9:aa:00:99:b9:da:4b:27:d9:f8:08:
         b1:8c:0c:4e:cf:17:2c:34:d0:fa:0b:72:b7:51:14:13:9e:ec:
         51:57:e5:45:70:43:ff:d9:9a:31:a9:59:ed:86:71:9b:98:1b:
         d0:e4:4c:88:0a:6e:69:16:0d:d0:c0:69:3c:81:81:a7:eb:90:
         87:0b:f4:21:fc:d2:8a:df:e5:da:87:5f:b1:4d:7b:77:ef:a6:
         5c:14:a5:9c:3c:fe:bc:90:2c:29:6e:00:36:3e:1f:a7:7d:93:
         0c:ec:46:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 06:52:23 2026 by rpki-client