Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1a51a1de-0053-3e36-b3c7-288e4c9b0971.roa
File:                     1a51a1de-0053-3e36-b3c7-288e4c9b0971.roa (raw, json)
Hash identifier:          EobAPCXzKA2beynvIiBUgTkM8org8Sv8XcpsBeed0BM=
Subject key identifier:   1C:69:D7:D6:36:68:D8:5B:AA:E2:15:42:58:0C:7A:B9:5A:62:2F:1F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584FB3AAD1B1120E2AF1B3E0C800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1a51a1de-0053-3e36-b3c7-288e4c9b0971.roa
Signing time:             Mon 02 Nov 2026 02:00:13 +0000
ROA not before:           Mon 02 Nov 2026 02:00:13 +0000
ROA not after:            Sun 31 Jan 2027 02:00:13 +0000
asID:                     40263
IP address blocks:        2001:470:32b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b3:aa:d1:b1:12:0e:2a:f1:b3:e0:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov  2 02:00:13 2026 GMT
            Not After : Jan 31 02:00:13 2027 GMT
        Subject: CN=6f444daa-32f7-4c1d-a398-1e650a5bc3b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:97:d3:f1:8d:ce:0b:77:00:e6:ba:26:de:ab:
                    87:c3:d2:52:30:4d:38:28:d6:a6:b3:3f:91:42:7b:
                    72:26:d1:5b:48:6e:04:8b:4d:03:0c:55:3a:4e:74:
                    b2:79:72:e6:07:97:ae:ed:12:5f:95:43:f4:ea:d9:
                    c5:ae:0d:91:de:d2:d4:cb:50:02:bb:d3:e4:16:4f:
                    48:1f:94:03:3f:d9:49:ea:64:6a:11:4a:5a:4a:8e:
                    37:a7:5c:90:46:52:62:2b:fd:c7:0d:c5:ba:f3:8a:
                    e3:1f:6e:fb:f9:10:7b:be:2a:3c:0e:5e:06:1d:71:
                    40:e0:1c:c6:54:ac:52:9e:5e:81:4c:2b:db:ec:fb:
                    4c:59:bf:3a:2c:28:d7:c3:73:7c:c9:22:2a:ec:ff:
                    0a:42:e0:ec:4f:74:59:d5:e4:a5:04:62:1f:e8:9f:
                    8f:38:f9:00:37:61:b2:9c:2b:80:05:35:1d:a3:8a:
                    af:a3:7f:24:c0:db:2a:6b:22:1f:6d:15:2a:fe:f5:
                    81:bd:bf:87:0b:ac:f4:f4:ff:15:73:b6:a0:8c:79:
                    af:4e:59:d1:f8:e2:56:3b:50:5a:b2:0c:9f:30:eb:
                    f5:63:4b:18:d8:f6:cc:7f:54:dc:92:5d:47:2b:e2:
                    6b:6b:34:f4:5e:01:a7:b6:dc:cf:53:a3:48:0d:38:
                    f9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:69:D7:D6:36:68:D8:5B:AA:E2:15:42:58:0C:7A:B9:5A:62:2F:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1a51a1de-0053-3e36-b3c7-288e4c9b0971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:32b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:55:41:3e:8d:0e:f6:98:a0:a9:c5:f4:c5:ce:e4:a7:05:f5:
         be:8a:6d:88:32:da:da:aa:6a:0b:d9:cc:ed:49:ed:58:65:b8:
         94:6f:08:64:67:1c:b0:4d:24:8a:72:4f:6c:46:c8:aa:0a:1e:
         f3:9d:55:e3:a6:31:1b:a2:b3:86:d7:c0:e3:13:ff:52:32:cc:
         b1:ad:6e:a5:a8:0e:60:58:a7:d4:76:21:24:98:f5:f1:6e:5c:
         7f:eb:58:e5:15:cd:9f:c9:0e:8b:81:f2:59:c4:2e:37:97:84:
         c9:6a:bd:34:94:9e:c1:80:72:47:5e:ea:f3:f6:92:3d:86:01:
         3b:f4:4a:1f:b3:52:4a:8f:7f:ab:e1:8f:5f:7a:db:89:d2:ad:
         5a:79:39:5c:d2:25:1a:75:bb:51:c6:87:c2:8d:88:ae:cb:84:
         c3:14:45:65:e9:bc:21:85:3d:b8:2b:12:65:5b:f6:bf:11:0a:
         29:4a:ac:29:6f:5b:2e:fc:f3:27:ea:7a:e0:9d:e5:ec:04:31:
         c3:47:ef:50:25:4a:33:57:7c:2d:3d:87:5e:c8:eb:b0:37:70:
         ca:d5:70:0b:ee:ab:6b:e8:4b:fb:c8:9c:ee:20:50:da:61:fd:
         3b:04:66:f4:a2:f0:34:b6:8a:76:75:4b:15:51:32:58:0a:81:
         70:20:fd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:11:22 2026 by rpki-client