Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f6d4c80-75ca-3c26-a8bb-0d324bea7e71.roa
File:                     1f6d4c80-75ca-3c26-a8bb-0d324bea7e71.roa (raw, json)
Hash identifier:          32KgHznjaN/mkL3ZP9rNIs6jYZFkt0XYTfVCtXdgxGc=
Subject key identifier:   05:5C:82:6B:0C:BC:00:94:B0:08:7F:FD:50:8B:49:94:5D:09:14:10
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584FA6F87A66C3811BE598CCF100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f6d4c80-75ca-3c26-a8bb-0d324bea7e71.roa
Signing time:             Wed 28 Oct 2026 13:00:13 +0000
ROA not before:           Wed 28 Oct 2026 13:00:13 +0000
ROA not after:            Tue 26 Jan 2027 14:00:13 +0000
asID:                     3464
IP address blocks:        2001:470:59f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a6:f8:7a:66:c3:81:1b:e5:98:cc:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 28 13:00:13 2026 GMT
            Not After : Jan 26 14:00:13 2027 GMT
        Subject: CN=fb290904-6cc6-49fc-97b2-4216a14a4324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4d:0f:5f:03:0a:f8:62:29:8a:91:88:a9:49:
                    e2:ec:e3:68:3e:81:70:27:d4:38:59:51:1d:f9:f0:
                    ae:9c:80:22:ce:ae:22:7f:fa:dd:7f:0f:33:02:8a:
                    94:16:16:e6:e0:01:8d:36:1c:1e:12:ef:0c:f9:05:
                    e2:db:b3:c6:71:4a:bb:40:89:7d:49:21:ea:98:69:
                    71:f7:53:b9:72:e1:a1:1e:ce:de:d2:c3:00:12:c7:
                    0c:94:83:83:10:72:2c:23:64:e3:cc:54:39:f7:d2:
                    26:a3:7e:97:a6:2a:ef:09:a0:7f:28:49:f2:de:f0:
                    44:bb:7c:ef:ff:9f:7b:33:aa:81:8c:b5:44:80:db:
                    99:a6:d8:d2:90:5e:f0:7c:09:d6:5e:62:c4:8e:50:
                    dd:68:0a:9f:1a:ce:8f:d3:6f:4f:e7:fd:94:5f:2a:
                    97:c5:d3:0e:1e:4f:6a:99:63:1e:51:b1:81:25:34:
                    fb:ae:0d:bb:29:10:77:64:f6:8f:03:2b:b8:58:18:
                    e2:ad:32:ac:28:c2:93:1e:39:f7:7b:ba:be:61:eb:
                    95:ea:89:bd:cc:ae:59:4a:8f:a2:fc:44:65:8b:da:
                    26:ca:a1:7f:05:d7:d6:cc:1e:f7:77:46:65:67:be:
                    3d:af:c0:ac:a9:bf:d8:44:06:21:d5:ed:bd:53:17:
                    b1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5C:82:6B:0C:BC:00:94:B0:08:7F:FD:50:8B:49:94:5D:09:14:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f6d4c80-75ca-3c26-a8bb-0d324bea7e71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:59f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:c0:18:d9:00:01:05:5d:05:08:bf:31:78:dc:2d:c8:be:e6:
         a1:09:d6:1c:27:7a:91:9c:e5:38:5d:88:87:46:4c:29:7c:52:
         7a:f2:58:d7:55:4b:57:65:62:5b:c7:de:1f:39:2b:16:10:2d:
         d2:3e:79:71:51:d3:22:6a:8a:c8:bf:85:e4:42:11:52:f6:6d:
         59:6f:0d:22:49:d5:08:49:c5:cf:88:a7:bb:cf:f7:d8:d3:83:
         60:4a:3d:11:65:b5:f6:cd:44:64:12:85:9e:78:16:07:66:22:
         35:cb:bf:5f:42:b3:85:28:08:67:ff:80:6d:86:13:e2:ad:ca:
         b7:0e:5a:d5:ec:b4:20:b8:90:7e:1d:08:94:01:b1:6b:9b:69:
         35:d9:9d:44:1a:ef:c9:51:c3:47:17:93:9c:a8:be:05:c9:f8:
         89:26:2d:34:06:3e:40:13:d4:03:77:50:89:6a:11:30:ce:a7:
         7a:04:3e:3c:7b:a2:0a:b4:96:61:06:cd:b6:50:ad:7a:de:c5:
         eb:65:50:c5:f1:2f:6f:d1:4c:e6:a9:3e:6a:d3:0a:11:e8:4f:
         ce:4d:de:25:0e:89:2a:e4:57:b8:ff:fc:37:78:bd:cf:83:57:
         75:e3:d5:43:78:1d:d4:71:82:07:86:6f:28:80:c6:92:86:b2:
         9e:bb:47:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:44:11 2026 by rpki-client