Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c178daa-b824-31c1-81e6-a1685bcf7421.roa
File:                     5c178daa-b824-31c1-81e6-a1685bcf7421.roa (raw, json)
Hash identifier:          DcW/ejy4YoaR8PrRR+UHddksJMusDMWjKyQUBdnE/+k=
Subject key identifier:   E6:C4:CD:0B:3A:AB:BC:DA:34:26:E3:20:1A:2B:28:81:A3:28:A8:0E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F9A68BF36266239DCEEACF300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c178daa-b824-31c1-81e6-a1685bcf7421.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     983
IP address blocks:        2001:470:508::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:bf:36:26:62:39:dc:ee:ac:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=322a7797-524b-4918-affe-b93c713a0a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:da:6a:07:bf:ef:88:da:9b:aa:7c:2c:47:0d:
                    db:5a:90:69:da:4c:14:05:d5:04:5c:c1:55:79:d9:
                    ad:f4:4c:f9:e0:01:1d:b9:c4:75:7b:a0:14:27:bd:
                    64:fa:97:ee:a9:1e:1f:f6:39:3b:a2:50:03:78:46:
                    ba:11:ba:01:39:8b:18:73:78:06:dc:64:72:9c:a9:
                    3d:31:93:70:5d:19:96:57:32:c7:19:e0:e7:4e:20:
                    5e:69:ad:74:16:bf:70:71:69:cc:e3:49:94:05:05:
                    38:b2:d9:ce:b4:b6:53:13:e9:3b:98:ec:7c:7f:58:
                    50:08:b8:36:54:3c:1b:8b:a9:aa:95:c9:66:bf:d9:
                    3e:4a:5a:fa:3c:5c:d9:ec:b2:76:2d:0c:da:f9:04:
                    f6:7d:6b:08:0c:35:8e:bf:44:9a:0c:61:85:4d:a8:
                    b3:0c:87:37:69:bb:06:c5:a9:7b:fb:55:f5:e6:b5:
                    bc:a0:b6:9a:70:33:e9:e1:48:ec:cf:0d:ca:2f:99:
                    d6:f7:50:15:3d:c9:93:9a:3c:5c:c1:e5:c0:61:7d:
                    74:cd:6b:7c:29:43:f9:ff:72:65:a6:b3:9c:45:8f:
                    83:e4:13:4f:cc:b2:ab:2f:67:79:20:1f:ce:75:7e:
                    80:67:ad:d6:96:0c:db:af:29:c0:df:bd:66:74:76:
                    ee:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C4:CD:0B:3A:AB:BC:DA:34:26:E3:20:1A:2B:28:81:A3:28:A8:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5c178daa-b824-31c1-81e6-a1685bcf7421.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:508::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:27:8d:20:86:f2:64:43:91:f2:ee:50:86:d2:24:93:2e:88:
         08:77:7d:a8:a0:4c:0d:16:d7:39:a2:da:8e:8e:79:83:b7:40:
         69:22:dc:9d:d0:07:3b:1f:0f:f5:b6:9e:2e:96:fb:55:8c:18:
         01:79:1c:11:bf:55:54:a6:ba:91:5a:53:b5:a2:c5:dd:b1:4f:
         b6:fe:8f:ac:d7:21:75:53:eb:64:0f:e9:4b:14:45:e2:9b:8e:
         fc:d9:4c:30:81:00:7e:a8:da:9f:d9:5f:b5:df:c7:b1:ff:69:
         8a:ff:24:b5:b9:e2:d5:92:d3:9d:6e:79:d0:b7:87:29:f8:8d:
         8f:72:42:6e:29:4d:98:1e:c6:a0:3d:a7:f6:39:f4:03:f4:71:
         01:bb:94:24:bb:f3:22:c0:4d:00:9e:3a:f3:c6:7a:bf:80:5c:
         33:34:7d:65:bf:29:76:a5:7e:44:f6:b6:0a:51:3f:65:c6:41:
         6e:62:19:d1:48:19:6d:3c:69:f1:a1:da:44:2f:af:e5:54:59:
         37:53:23:0d:4c:eb:55:2f:1a:1e:63:f2:74:4d:bb:a1:55:10:
         87:78:a2:f1:7e:2f:93:d4:99:b0:e6:af:70:8e:ae:43:f5:5d:
         a7:21:9f:38:8f:7a:ca:24:0c:f3:e1:a0:bf:30:78:1c:46:80:
         2d:6f:d5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:29:58 2026 by rpki-client