Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/622aeb41-0c05-3106-ab4f-4fa4647dd726.roa
File:                     622aeb41-0c05-3106-ab4f-4fa4647dd726.roa (raw, json)
Hash identifier:          PTbyXf/Q0Tp55G9CzT/c5atkWODl40rdKVC/+LD8tS8=
Subject key identifier:   3C:35:54:2E:C1:47:A0:85:4B:51:23:64:F1:82:02:1C:E3:D3:8F:CF
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DE9CC79967372E56B6D00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/622aeb41-0c05-3106-ab4f-4fa4647dd726.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     33302
IP address blocks:        2001:470:19b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:e9:cc:79:96:73:72:e5:6b:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=6d8d3382-6d48-487c-a2c0-8a2c78b2ee78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:72:17:4a:fa:79:ae:71:cd:19:53:41:87:6a:
                    53:91:c1:67:ae:36:4c:a0:9a:5f:0c:e8:21:c4:8f:
                    0c:b5:0f:7c:e1:32:9e:a9:d1:ec:c4:2e:af:e4:4a:
                    c5:a0:7c:cb:08:b5:ef:54:84:97:3a:65:7e:7c:cd:
                    75:58:e3:8d:48:a5:a4:cb:b6:bf:33:1c:c6:c6:0a:
                    ca:ba:e8:6d:b6:e2:b2:86:86:c5:a1:b0:9a:00:bc:
                    4f:3d:5b:f8:85:e5:46:bf:a1:6d:e6:e7:45:d4:ac:
                    81:88:eb:93:f3:64:f0:bb:60:33:8f:97:a8:b3:6f:
                    fd:d8:c4:a7:e5:11:6e:e7:d5:ad:21:dd:89:96:b5:
                    3e:75:77:f5:c3:1a:f6:78:94:60:bf:cf:68:8e:e6:
                    b5:fd:05:02:95:db:2a:95:8d:40:64:ec:fa:e6:a1:
                    af:6c:8d:2e:1b:8c:10:20:43:2e:f4:af:00:ea:74:
                    e2:d6:fa:1d:aa:86:ba:b3:43:0c:9d:68:44:c2:0e:
                    42:a1:b4:4e:44:c6:39:b5:da:21:cc:a8:25:37:59:
                    80:8b:93:2d:6b:5a:b0:74:74:80:f2:89:89:d6:8a:
                    eb:f1:93:a0:c7:7a:1c:28:94:e5:97:0f:cc:5c:9d:
                    4e:d3:a0:84:8a:6a:9f:de:af:fa:94:b9:d9:4d:2f:
                    fc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:35:54:2E:C1:47:A0:85:4B:51:23:64:F1:82:02:1C:E3:D3:8F:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/622aeb41-0c05-3106-ab4f-4fa4647dd726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:19b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:33:95:5b:4a:ed:33:54:b6:f8:17:5a:3a:fa:7f:21:18:2a:
         0b:e9:7d:dc:34:80:42:2a:6d:34:5c:37:25:51:66:04:72:7b:
         63:96:75:7d:f0:5a:23:1e:3f:77:47:6e:f4:4a:5b:84:fd:40:
         9c:fd:3e:c7:c1:c2:63:40:b8:b4:a7:71:be:09:94:11:cc:60:
         92:d5:a4:9a:87:e9:d1:66:7b:14:00:ad:ca:1c:b0:83:41:9e:
         53:7f:4a:a3:d1:98:a5:7f:21:94:b2:54:b1:5e:9d:5f:32:f1:
         da:06:4b:23:b8:e7:07:74:b7:26:e7:39:aa:42:5d:c4:dc:1e:
         97:81:41:9c:05:64:47:0e:fd:9b:9d:7b:e7:cd:34:98:86:42:
         b3:f7:83:fc:3b:eb:c8:7d:d2:0e:ad:1a:fd:ab:2e:d6:cb:b3:
         aa:23:de:64:de:86:ea:15:1d:5d:06:e6:2f:ce:5c:e3:38:92:
         92:8a:f5:25:d8:07:3c:06:05:7f:3a:a3:e3:36:8a:16:13:52:
         78:b5:c0:dd:d8:ae:39:3a:54:3a:56:81:40:21:03:3b:f1:9d:
         8e:fa:c6:c8:93:a9:73:1d:d4:c1:56:d5:38:21:4a:f8:ce:8f:
         c1:47:26:26:04:0b:5e:c6:04:e6:46:6e:c9:e3:17:46:47:fb:
         de:4a:c1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:56:32 2026 by rpki-client