Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2686b250-be93-369c-9457-1af672310dd0.roa
File:                     2686b250-be93-369c-9457-1af672310dd0.roa (raw, json)
Hash identifier:          Wau5YiiMHx5hfm5ISqraCgY5zYmVQ0Rit6hgNEX3pfE=
Subject key identifier:   AD:FB:F9:F9:47:93:AD:11:D6:25:F4:FF:82:D1:6A:76:41:33:8B:A5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F86ECBB3FC7A02CA843E6DE00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2686b250-be93-369c-9457-1af672310dd0.roa
Signing time:             Sat 17 Oct 2026 01:30:45 +0000
ROA not before:           Sat 17 Oct 2026 01:30:45 +0000
ROA not after:            Fri 15 Jan 2027 02:30:45 +0000
asID:                     59686
IP address blocks:        2001:470:63d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:86:ec:bb:3f:c7:a0:2c:a8:43:e6:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 17 01:30:45 2026 GMT
            Not After : Jan 15 02:30:45 2027 GMT
        Subject: CN=931fc507-e921-40bc-ab3c-2c4ca34a5f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a8:32:b8:22:35:cb:41:15:b1:fb:30:0e:bd:
                    b5:ea:8e:4f:8b:85:b6:1e:b0:cf:38:cc:01:61:83:
                    28:31:db:a3:55:de:d5:db:65:a1:5d:f7:fe:e5:5e:
                    36:85:4d:f2:1e:5a:df:a5:05:ac:00:37:3d:90:43:
                    12:4b:cc:f4:27:f5:20:c8:8d:20:a7:21:0a:8e:08:
                    f0:36:98:c6:c3:d9:6d:eb:6c:bd:9f:e3:ee:1a:f0:
                    ac:3e:a7:c3:4c:15:5d:eb:29:e5:83:86:81:a6:d3:
                    db:0e:7e:6b:b8:c5:08:a9:67:2c:c1:af:a1:2a:c4:
                    9a:e4:87:1c:d2:ec:17:d7:3c:45:ba:95:4a:78:8d:
                    9f:cd:09:7f:16:0d:92:f4:91:11:b7:fb:89:da:fc:
                    82:b8:75:1a:e6:36:c1:8b:b2:c9:24:65:bc:4e:52:
                    ab:18:b6:d8:fb:2b:ad:56:ab:8d:c1:97:45:c8:de:
                    fa:9e:14:db:e2:57:fc:07:6f:79:36:23:a9:f4:c2:
                    3f:8e:96:f1:29:a7:b6:fc:6d:4b:ae:f6:a4:14:c7:
                    46:83:88:b5:3c:61:82:69:e1:c4:ab:e2:8e:1b:71:
                    02:f0:98:24:0a:72:bf:ec:8f:a6:01:5c:0c:1d:a6:
                    95:e8:fd:09:99:16:3e:0e:45:ec:61:3d:ea:b1:c2:
                    07:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FB:F9:F9:47:93:AD:11:D6:25:F4:FF:82:D1:6A:76:41:33:8B:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2686b250-be93-369c-9457-1af672310dd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:63d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:35:79:da:6c:06:09:4c:5e:29:2d:5c:01:67:7d:42:18:fe:
         c6:fa:2a:36:57:5c:da:0c:7e:56:7b:e1:dd:4d:da:29:fc:d7:
         d9:df:76:bb:c9:8e:63:a4:a5:35:10:ba:ae:01:93:69:dc:50:
         40:78:ac:ce:57:21:5b:fd:c9:bc:c5:f8:65:ae:b3:15:a4:a4:
         f5:34:84:aa:84:31:1a:3c:36:d9:f4:0e:1c:ff:5a:08:e4:f9:
         8b:ee:19:7e:8b:c7:5a:4c:97:7f:81:ad:b7:0f:5c:be:7e:7b:
         3e:82:bb:ff:c6:32:4c:b7:e3:40:15:86:34:c2:01:bb:8c:3c:
         b4:18:c6:85:f4:48:67:d0:23:97:5b:14:e8:6f:47:df:61:83:
         04:49:c0:a0:09:66:40:ad:59:48:dd:ac:c1:4c:ac:95:74:f9:
         84:7a:1c:8c:e5:1e:bb:7d:d4:44:44:38:7d:72:5e:f7:3b:6f:
         77:9e:7d:7b:a3:47:1e:d2:65:10:d7:8c:85:28:b3:c7:05:7d:
         90:1b:d6:03:a4:0b:e3:c7:31:e0:30:d9:d3:c3:97:65:e1:af:
         77:68:09:00:9d:b4:f4:46:1d:de:3c:8b:90:6b:96:a8:47:a1:
         7d:25:62:94:0b:9b:70:7f:1f:ae:d1:f7:10:ff:f8:93:0c:87:
         41:9d:fd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:10:52 2026 by rpki-client