Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/37c31b4a-aa5a-30a2-9c5e-6a955c275fa8.roa
File:                     37c31b4a-aa5a-30a2-9c5e-6a955c275fa8.roa (raw, json)
Hash identifier:          6QDfbh7Qy+RKAJPZRVNYyW300fMyNAqUtT39EySczVo=
Subject key identifier:   6B:E0:A4:BE:12:C2:CC:43:06:C3:F7:5C:C3:44:66:9C:E8:09:6F:3E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F8DE74D371FC28FD4D1571580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/37c31b4a-aa5a-30a2-9c5e-6a955c275fa8.roa
Signing time:             Mon 19 Oct 2026 13:30:28 +0000
ROA not before:           Mon 19 Oct 2026 13:30:28 +0000
ROA not after:            Sun 17 Jan 2027 14:30:28 +0000
asID:                     43633
IP address blocks:        2001:470:174::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:e7:4d:37:1f:c2:8f:d4:d1:57:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 19 13:30:28 2026 GMT
            Not After : Jan 17 14:30:28 2027 GMT
        Subject: CN=2a728d89-ad86-48ed-960b-5f5a3aa19666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f2:17:ae:77:a3:55:ef:fa:af:57:29:29:6f:
                    f8:46:a5:0d:ed:40:c6:9a:4f:0e:a1:54:73:a1:37:
                    79:de:a3:fa:83:ac:91:c2:0e:a5:f0:91:63:54:5f:
                    f5:91:ac:08:82:cc:a3:e7:06:3e:e9:1a:1c:c7:5f:
                    07:43:3a:4d:1d:02:b6:9d:ef:17:37:ec:6a:82:de:
                    d8:37:60:b6:33:79:d6:e4:1a:cf:3c:c3:f7:9d:95:
                    14:7d:8f:80:c2:ad:53:79:a7:30:bc:50:c8:37:25:
                    71:66:bb:f8:30:0c:c7:3e:59:3d:11:d7:36:35:97:
                    26:9a:93:11:f2:c9:a7:c1:45:21:42:2d:99:95:8d:
                    24:e7:5b:c8:3a:fe:6a:26:57:25:27:71:47:b7:7d:
                    57:a0:4d:4a:a4:ee:70:f4:a0:2d:f2:75:a7:d9:57:
                    75:88:7f:f3:6f:a7:a2:02:12:ef:3a:49:e9:b9:ed:
                    b3:28:1c:80:10:73:a7:99:ef:9b:f3:42:e1:6d:6a:
                    a2:c4:9f:5c:c0:c7:02:2d:d6:52:cd:9b:a7:34:32:
                    21:56:9c:4f:4e:85:5b:5e:12:5f:28:7b:85:81:e1:
                    eb:e9:b0:c7:8f:9f:89:99:77:34:6b:6e:91:1f:38:
                    c9:f4:80:c3:f2:0b:26:92:c0:2c:91:94:29:e7:e0:
                    a2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E0:A4:BE:12:C2:CC:43:06:C3:F7:5C:C3:44:66:9C:E8:09:6F:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/37c31b4a-aa5a-30a2-9c5e-6a955c275fa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:174::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:0c:ef:ee:ff:e4:4f:00:57:38:9b:44:a5:74:51:ff:af:b6:
         b3:01:54:1b:78:50:f4:bb:61:84:39:fc:4c:0a:fe:bc:73:36:
         6b:f1:06:b5:9f:f8:13:74:1f:6b:f5:3b:09:f8:65:ff:5b:06:
         e3:34:44:87:fc:07:77:08:98:3b:0f:a7:74:82:27:7b:6c:6b:
         a0:d5:3f:f0:e7:64:d0:b4:eb:24:bd:56:d7:44:1a:d7:78:45:
         65:01:e3:2d:59:55:af:18:a2:0a:55:9c:1c:2a:bc:42:b6:89:
         6c:72:1c:58:04:15:61:2f:a7:d5:8f:61:7f:47:71:9a:77:eb:
         6b:95:e5:1d:b4:e4:0e:1c:23:93:1b:18:3b:5b:42:a0:f1:02:
         2a:85:c9:35:34:91:9c:6d:22:7e:c3:a5:31:8f:4a:6e:06:ee:
         b3:1e:4c:1d:d5:fc:81:41:2b:0a:09:85:d1:d6:27:e1:10:a1:
         51:16:20:c8:c5:e3:58:1a:fb:08:01:11:ab:72:de:72:ae:d4:
         3f:53:f1:3c:3c:67:db:09:b0:13:10:b3:8a:39:d8:b5:d7:1e:
         6a:29:31:8d:71:1c:d8:8e:32:c2:0b:6c:ef:cd:d3:7d:9b:cb:
         f8:00:98:14:78:5c:23:99:17:7c:fa:84:24:e3:91:e5:54:07:
         0c:d6:91:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:20:47 2026 by rpki-client