Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/56e8abc1-3687-30f2-b33d-2f0b918722fc.roa
File:                     56e8abc1-3687-30f2-b33d-2f0b918722fc.roa (raw, json)
Hash identifier:          +oqGSPqVtg8NYCcBMPeN2+OIGuJefX2kTLmeGhb9Ndo=
Subject key identifier:   A5:D0:93:43:F2:94:C7:9A:27:FF:8F:02:F3:F7:AC:D0:3D:3B:61:48
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F49739135A104235C50558580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/56e8abc1-3687-30f2-b33d-2f0b918722fc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     30094
IP address blocks:        2001:470:4d6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:91:35:a1:04:23:5c:50:55:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=46ec30ac-8ef8-4eb9-9238-1a9eb66d5291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1f:c8:2c:ae:cc:7e:0f:ce:f4:8e:f7:98:68:
                    ca:92:02:ce:a6:95:6b:5e:fa:4f:86:53:5d:7d:a1:
                    2b:2e:b8:e7:ae:7f:3a:54:28:8f:18:5f:16:5d:af:
                    ed:18:77:c3:6e:7a:65:6e:2d:2f:06:ae:63:a1:74:
                    b3:f6:a6:be:f6:d1:cd:da:ed:ae:c5:c8:a5:24:dd:
                    c1:96:81:d4:48:d1:38:8a:52:73:64:64:ed:f5:f0:
                    25:43:f9:d0:c5:c6:ff:0b:58:47:d4:46:2e:ed:f3:
                    00:be:13:46:8e:c1:f8:e3:de:c2:f3:54:ce:f4:cc:
                    0f:8f:08:54:e8:63:6e:a3:ff:7c:09:49:6e:71:52:
                    76:74:6d:07:72:de:ff:3e:89:f9:12:0d:89:d0:23:
                    5d:be:7a:97:14:e4:d2:da:ea:02:dd:00:0f:ce:b8:
                    34:fc:80:9c:9a:cd:01:57:d4:20:05:79:a1:83:e3:
                    96:79:0c:85:fc:90:b9:22:3c:b3:46:d6:2b:21:57:
                    e7:f4:46:a5:12:dc:57:61:5b:f9:ea:cf:6d:a7:d9:
                    92:7b:59:de:fd:81:1c:81:cc:38:39:01:5f:86:77:
                    96:a2:73:8d:81:25:29:e4:4b:08:12:b4:cd:99:f3:
                    00:5e:1c:78:11:27:3c:07:18:f6:81:36:ec:32:0b:
                    e6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D0:93:43:F2:94:C7:9A:27:FF:8F:02:F3:F7:AC:D0:3D:3B:61:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/56e8abc1-3687-30f2-b33d-2f0b918722fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4d6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:1e:25:d6:bb:fb:12:60:00:76:03:bc:45:3c:d7:12:86:16:
         3e:87:55:02:75:09:13:1e:b6:6e:eb:47:4c:4c:3f:ae:39:0e:
         5b:0d:81:18:2a:c2:60:38:5d:65:ca:36:e0:1a:96:82:bc:90:
         cd:8d:7b:d9:59:a5:d5:89:ab:1f:f0:18:e8:da:1e:7b:95:b8:
         c3:07:53:61:be:1e:66:74:bd:68:7a:6e:f9:a6:18:d7:55:8b:
         ff:59:c5:0b:d7:eb:24:0f:2b:9e:f6:76:a3:e9:c0:05:68:4a:
         e7:80:dc:46:1d:42:4d:38:81:ba:64:9e:ea:b5:02:e0:f7:2d:
         80:2a:9c:77:55:81:0c:85:f8:3c:0b:e4:6a:be:6f:fa:39:58:
         0c:f3:11:be:47:10:2f:c8:d5:94:20:21:df:d1:79:40:8e:36:
         48:86:53:2e:8d:d6:67:0d:63:6c:d2:ae:3b:4f:97:14:8a:49:
         d6:45:27:b2:18:36:7c:03:a7:c6:de:1a:92:bb:0a:8b:3b:3d:
         00:cb:75:de:28:76:d9:10:b3:5a:10:c2:c1:8d:76:c3:db:1e:
         a6:e0:a4:09:00:32:ae:86:23:34:3d:e2:81:21:6f:2f:bd:ac:
         c9:d5:52:58:25:c9:30:dc:d2:d0:40:2f:10:3f:9b:ad:61:55:
         23:32:00:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:06:47 2026 by rpki-client