Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1a513aad-9c07-371c-92f0-adcc7b52d9f9.roa
File:                     1a513aad-9c07-371c-92f0-adcc7b52d9f9.roa (raw, json)
Hash identifier:          aD0DeGQXmGIDCVfYOvZdfsSYoM7nn+sJzpnACz6hLx0=
Subject key identifier:   30:EF:DD:D1:AD:47:30:2E:BC:9B:B4:EE:50:91:B3:C7:E3:1D:96:CA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F71ED7D22589142B26101CC00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1a513aad-9c07-371c-92f0-adcc7b52d9f9.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     18646
IP address blocks:        2001:470:4a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:7d:22:58:91:42:b2:61:01:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=1e7d3d76-faa6-453c-8cd6-b7cf32977577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:77:3a:12:91:a9:4f:ba:aa:dc:90:59:b8:f9:
                    6b:5f:29:8f:f2:14:be:4b:72:b2:c7:1f:72:d6:d3:
                    9e:52:23:d2:11:bb:e5:67:c2:e9:97:66:97:9a:e9:
                    5f:2e:1e:20:13:8b:9a:a0:b5:46:25:85:36:e6:80:
                    b8:45:31:5e:e2:b9:e0:25:d0:0c:db:f0:63:28:69:
                    42:57:2f:e3:e1:16:71:de:0c:d5:8d:58:1b:47:8f:
                    6d:64:4d:27:8e:f9:0a:ae:dd:9e:14:f9:54:c8:a6:
                    7e:2d:da:19:fa:18:b1:c5:62:ac:1a:ba:9c:d5:d3:
                    43:c4:b1:05:7f:14:03:39:46:98:3d:b2:52:a1:0c:
                    01:2d:25:92:d5:4f:ef:59:ae:ea:98:fc:c8:80:23:
                    b6:08:0b:81:f6:9a:06:34:50:78:1d:bd:e6:fb:a6:
                    2b:01:89:ee:cc:7a:bc:99:35:c6:a6:ea:20:b4:08:
                    fe:1e:0f:cc:70:cc:06:27:0a:9f:6f:03:e3:5f:ef:
                    c4:16:b8:80:63:2d:95:ed:4c:13:2b:59:36:45:aa:
                    e9:42:88:00:84:1e:63:c8:2a:f7:a3:bd:19:74:af:
                    78:d7:96:c0:ed:72:1c:90:8c:47:78:4d:0d:62:4a:
                    74:44:aa:ea:9e:8c:21:ad:a2:58:9f:08:77:29:bb:
                    3a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EF:DD:D1:AD:47:30:2E:BC:9B:B4:EE:50:91:B3:C7:E3:1D:96:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1a513aad-9c07-371c-92f0-adcc7b52d9f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4a0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:e7:00:65:b6:89:fa:66:14:31:8d:1b:77:e0:3b:57:82:e4:
         b5:e9:b7:1c:dc:c6:cd:ef:8e:e2:6a:00:7f:e3:39:ab:ee:db:
         9c:d0:2e:03:89:7f:4e:f4:27:76:dc:93:ff:79:9a:a0:66:9f:
         d6:69:7d:43:5a:80:49:d4:ac:04:68:5a:32:97:d4:ca:a3:3d:
         d1:2c:2c:28:a1:0d:c0:93:9d:3b:17:ee:a3:44:54:c2:41:c7:
         20:14:a2:e1:50:62:25:09:3d:b5:f6:f8:ae:51:28:54:14:5c:
         40:3a:b8:1c:ab:d9:f6:45:9b:38:e6:b6:63:35:0f:e8:cd:f1:
         d1:81:d0:7f:fb:b0:36:03:cc:bd:bc:5e:3f:c0:35:49:21:00:
         97:09:a8:f2:e3:af:6d:07:38:66:d3:00:49:52:d0:4f:f6:cf:
         2e:5e:d6:b8:3a:c9:1f:9a:90:94:80:0e:01:b8:f5:a2:0b:99:
         c2:ba:81:9c:d7:8e:48:9c:46:70:f2:b9:24:a6:55:cf:41:2f:
         91:20:8d:b2:98:50:6b:f2:41:4b:04:fe:cc:44:35:86:2b:3b:
         d6:b3:1d:0d:3a:48:5b:e8:1e:39:8a:70:38:da:bc:6b:97:eb:
         15:6d:aa:cf:62:2a:f2:84:b6:88:d6:66:53:1d:0a:00:f0:7a:
         61:b2:ba:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:21:56 2026 by rpki-client