Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29865fbc-e059-3569-9174-26f8c5227be3.roa
File:                     29865fbc-e059-3569-9174-26f8c5227be3.roa (raw, json)
Hash identifier:          yVbJc2Vfm1HWwDDGBC//X9/aPqnJblxaONQGdLI9WwU=
Subject key identifier:   F9:88:EE:0B:B6:52:51:85:7E:BE:A9:EC:D4:B1:7E:13:31:1D:38:31
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7361B304600E8A4A19B697C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29865fbc-e059-3569-9174-26f8c5227be3.roa
Signing time:             Sat 10 Oct 2026 01:30:16 +0000
ROA not before:           Sat 10 Oct 2026 01:30:16 +0000
ROA not after:            Fri 08 Jan 2027 02:30:16 +0000
asID:                     328296
IP address blocks:        2001:470:640::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:73:61:b3:04:60:0e:8a:4a:19:b6:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 10 01:30:16 2026 GMT
            Not After : Jan  8 02:30:16 2027 GMT
        Subject: CN=8be3e4b3-7d37-49ea-b81e-d59b875ab806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:da:2c:ec:a6:81:fb:41:8d:9d:52:73:92:2a:
                    8a:ba:21:85:ab:ff:e8:cd:b7:13:28:0a:e9:0b:e3:
                    72:8c:06:0c:6b:b2:bf:db:08:f2:f8:af:e1:e7:10:
                    a0:d7:b8:e8:76:66:64:9d:b3:61:dc:e4:5b:c3:90:
                    42:ed:24:a6:9c:99:46:39:3b:d9:78:aa:f3:af:73:
                    69:79:1c:4c:3e:f6:60:08:be:4a:4a:6c:a2:2a:d8:
                    09:c8:44:86:84:21:b2:4f:5d:2e:f7:1e:bf:af:4b:
                    0c:0f:de:8f:e8:9d:5b:3f:66:2f:aa:58:c4:35:72:
                    15:fe:11:e9:c8:38:39:f1:79:ae:fa:ef:da:26:92:
                    79:55:f1:94:e3:1e:f8:71:99:3c:ac:ec:95:00:54:
                    da:e9:78:12:86:61:b4:be:c0:7b:44:f0:f8:20:15:
                    5f:3f:29:d6:63:83:39:5b:c1:e4:17:b2:a9:65:69:
                    58:c1:d5:ed:a6:37:7b:8e:6d:b4:0c:b1:8f:82:19:
                    4b:9b:09:1d:89:36:a3:43:f5:53:92:3b:21:8d:3a:
                    db:60:14:1b:03:d8:8b:18:fd:9a:f2:aa:4f:1a:06:
                    d2:b2:a0:5d:2a:16:20:52:03:51:b0:9e:7b:f0:35:
                    56:ab:52:4b:a0:98:a5:e9:f7:84:9a:b3:fd:09:66:
                    83:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:88:EE:0B:B6:52:51:85:7E:BE:A9:EC:D4:B1:7E:13:31:1D:38:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/29865fbc-e059-3569-9174-26f8c5227be3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:640::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:97:08:d4:d0:30:2a:12:dc:0e:61:b4:b5:a8:84:9b:c8:16:
         66:2e:2c:ca:a0:60:f5:4c:e5:25:01:ad:de:2b:a7:d1:b6:9d:
         d2:5a:db:d2:36:39:ac:c3:aa:40:ce:50:45:23:97:c5:31:46:
         7b:fa:0d:93:75:2a:f2:6c:af:01:b2:a0:f6:88:d3:92:46:d5:
         e8:f5:6b:86:f4:1e:b5:9f:18:93:5e:6b:95:3f:ff:6e:5e:38:
         78:ea:5c:01:46:b1:3d:d2:b5:c7:ee:15:a6:27:92:34:4a:24:
         c5:c4:6e:64:f7:7e:65:e9:7f:b2:4d:70:6c:6a:8b:97:65:8a:
         15:99:52:04:97:67:44:4e:d7:cf:d5:7b:55:03:fc:5d:cb:81:
         27:4e:6c:18:ab:41:98:49:1a:8e:0c:40:15:d7:14:dc:14:e4:
         ed:46:de:91:24:b1:f2:f7:f4:41:74:5a:3b:91:d3:5f:c3:03:
         c9:d7:ed:cd:1c:ed:4b:6c:6d:83:24:ee:ae:5f:c4:e3:bc:59:
         b5:04:cd:1d:5b:a5:09:94:83:17:ad:44:9a:28:d5:2e:a2:81:
         a7:b0:5e:29:f4:46:18:ca:5c:a6:93:9e:32:30:0a:ee:86:c9:
         33:aa:9f:1c:9b:7e:00:23:b4:bf:ec:cb:28:70:23:e3:50:08:
         89:63:69:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:22:31 2026 by rpki-client