Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23de0344-69c3-3e63-af41-e684fa481263.roa
File:                     23de0344-69c3-3e63-af41-e684fa481263.roa (raw, json)
Hash identifier:          2fM6eGlov0ZSRfAInSvAgsKXKIF0zfAnCdOlSEt2W1s=
Subject key identifier:   92:AE:CB:8B:C7:78:1C:FE:44:0C:1A:0E:B6:91:41:F6:F9:E8:8D:C0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DE0A69315E9EC6663C9C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23de0344-69c3-3e63-af41-e684fa481263.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     207465
IP address blocks:        2001:470:140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:e0:a6:93:15:e9:ec:66:63:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=df9a08f9-95b8-40ce-b14e-32ad08fedb45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:42:0c:b3:f6:26:90:ec:48:51:6f:b1:ac:62:
                    13:ba:41:6c:5b:03:65:2f:08:da:ba:13:c8:14:76:
                    60:4f:9f:b4:65:7a:5a:ad:79:45:9e:eb:09:6f:93:
                    79:03:77:ac:f5:b6:af:d2:6b:30:59:fc:b7:a1:3c:
                    64:ea:89:f3:63:ce:31:65:c6:c7:3f:cb:90:68:05:
                    08:da:97:51:06:8e:ee:08:66:30:c3:38:91:ef:8e:
                    46:7a:88:c3:c1:b0:73:ad:7f:d8:17:75:54:3d:de:
                    75:1e:5c:4b:fe:e8:f6:04:6e:25:8c:1c:fa:52:4d:
                    58:3b:41:0b:6b:17:dd:9c:dc:dd:36:ea:7e:1a:70:
                    d2:02:26:a0:cb:27:b2:c5:41:ba:82:86:bd:a4:c1:
                    d8:32:58:8a:67:0e:a6:32:24:e7:36:52:33:8e:34:
                    8c:5d:d9:08:5a:d0:07:d9:3f:dc:b4:fd:34:d7:a5:
                    26:b5:ef:cf:f9:c2:29:e6:df:c0:18:cd:36:db:53:
                    ac:3b:d4:08:0b:8e:29:17:6f:06:e8:f0:4e:3e:48:
                    44:90:44:29:3e:c5:d4:54:df:ff:d5:dd:4e:51:47:
                    7f:30:e8:e5:ab:41:4f:a5:14:97:f1:b7:c5:0d:e9:
                    05:4c:ae:13:f3:09:9e:e4:33:54:3c:8f:2e:ef:e9:
                    1c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AE:CB:8B:C7:78:1C:FE:44:0C:1A:0E:B6:91:41:F6:F9:E8:8D:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23de0344-69c3-3e63-af41-e684fa481263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:140::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:49:1e:b8:60:0f:a5:da:bc:72:6d:23:a5:c6:a6:5b:a4:f9:
         fb:0c:95:e6:70:9b:cc:12:77:ad:67:f5:60:64:33:9d:e8:58:
         7b:bf:38:65:c9:3e:42:e4:5d:08:8f:2c:22:3b:1e:b8:3c:71:
         56:d3:75:a8:61:59:70:be:c4:a5:ec:64:d3:69:ec:23:33:fd:
         b5:c8:31:ff:90:43:4e:63:df:b8:74:8a:ed:77:91:b7:bd:14:
         4e:e0:40:3a:5d:80:ff:68:a7:73:1b:cc:27:73:97:4b:62:88:
         c2:ef:d3:8b:5c:65:22:10:9a:bc:8f:64:eb:a8:44:a7:99:2e:
         35:b6:ac:06:4a:65:bd:d8:5d:92:83:81:e3:f9:d0:99:82:f1:
         14:43:3a:85:0c:9f:63:e6:d1:5a:e6:0a:ed:83:b8:4c:88:ce:
         97:5d:49:b6:c9:99:f6:01:5a:a6:77:69:95:16:1f:9a:a9:89:
         bd:c7:80:60:a2:ed:23:50:85:39:2c:29:40:fd:ba:5e:99:24:
         0a:46:e6:6c:b8:6a:3b:2d:a4:b9:b2:7e:53:35:1d:b7:ff:a3:
         bd:e9:83:38:11:b2:7d:29:91:7b:48:39:8d:1c:18:1e:05:6e:
         11:cd:1c:41:af:5e:cc:02:e0:85:fa:e5:ca:e9:ec:32:45:1b:
         81:38:1c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:36:00 2026 by rpki-client