Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/646c6b86-c78b-3396-8cc4-73f0fd500d9f.roa
File:                     646c6b86-c78b-3396-8cc4-73f0fd500d9f.roa (raw, json)
Hash identifier:          TLyApO4Nz5OUWzummF9tHk5opySQ8TmZ/o/9ptNhlsw=
Subject key identifier:   D5:9C:41:8B:15:7F:F5:FC:A6:FB:BE:A1:ED:45:D6:5C:B3:0A:1C:C6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F63F82E4F5EC909188AA4B980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/646c6b86-c78b-3396-8cc4-73f0fd500d9f.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     56286
IP address blocks:        2001:470:498::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:2e:4f:5e:c9:09:18:8a:a4:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=670aa62f-d65d-44da-b47b-72e85fd48804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:56:25:57:28:57:ed:e3:44:05:9d:45:43:eb:
                    f4:2e:b0:da:85:ff:85:4a:4c:ea:10:ad:17:55:fe:
                    6b:eb:b8:7d:8e:41:53:d2:ca:a5:45:c5:da:72:6c:
                    03:fa:f0:31:fd:82:c3:b3:3b:db:ec:7f:ec:42:12:
                    67:72:9c:b9:c0:32:79:1d:a6:53:6a:c6:89:fd:91:
                    c0:37:a4:19:c0:b1:c5:dd:53:de:91:98:b1:9f:93:
                    68:b7:9d:1a:0a:d8:03:97:b9:5c:f3:6a:e3:c7:74:
                    ac:a4:53:98:ee:5d:9b:28:bc:95:4c:e7:bd:ae:a5:
                    1e:4c:c2:69:0f:ef:09:7b:6a:b3:2e:e3:2e:ee:8a:
                    bd:73:05:0e:da:fe:3e:b8:f2:46:3e:b6:96:56:3e:
                    54:72:91:52:d2:08:82:c9:5a:10:54:b4:8d:68:0b:
                    ed:b8:f8:30:94:5c:21:32:33:54:4f:ca:8c:47:18:
                    1e:b5:3a:4f:ce:c4:3b:99:8f:23:59:86:65:cd:19:
                    91:2f:72:15:8d:d4:9b:e2:18:98:15:74:fb:93:78:
                    7c:1f:7e:52:97:78:a2:e5:55:3f:23:b2:2c:d7:a6:
                    6c:8a:32:d9:56:ec:2e:82:14:45:94:1f:54:4b:c4:
                    7e:59:2c:45:b3:07:05:30:bb:e6:7e:a7:d2:bf:e9:
                    76:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9C:41:8B:15:7F:F5:FC:A6:FB:BE:A1:ED:45:D6:5C:B3:0A:1C:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/646c6b86-c78b-3396-8cc4-73f0fd500d9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:498::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:85:27:c4:92:af:3f:58:0d:66:6a:53:ca:34:bc:3a:c9:bd:
         9a:4f:81:e9:c7:37:6f:b8:e3:c6:7a:ac:45:70:c3:73:17:ba:
         4b:48:f7:45:e4:4d:db:64:a3:94:53:12:c2:b6:84:25:cc:f6:
         6b:d9:e6:f6:c8:39:76:17:cf:a0:71:37:99:fb:7a:d5:7b:8c:
         4f:d8:d3:14:3b:66:2b:63:75:ca:38:fa:53:45:72:cc:40:6e:
         bc:1a:c5:35:42:92:ab:1f:22:03:5d:24:79:a0:c8:79:2b:3c:
         96:ac:6d:b4:7c:4f:fc:08:bc:22:ca:20:ce:6e:f7:53:bc:9a:
         88:97:de:bf:e2:c5:4b:51:a7:f0:3e:b0:77:ce:7e:9b:2c:a9:
         f1:a1:84:b4:f1:59:e8:24:07:a1:5e:d8:69:3b:28:e7:c7:6e:
         57:36:3b:89:1a:68:60:d9:24:4f:22:99:d6:be:74:7b:20:48:
         48:7a:25:a1:de:5c:ea:7a:71:30:93:76:34:53:9b:96:0f:f0:
         fd:41:32:e4:c2:e0:4a:d6:de:d8:c2:a8:2d:48:1a:9b:54:ff:
         96:f9:c2:be:a7:b3:6f:6f:82:68:64:5f:7c:ce:9a:4a:5b:30:
         7e:3f:2c:85:45:56:67:28:b1:36:59:01:fb:5e:fd:a0:21:5a:
         ad:95:92:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:58:45 2026 by rpki-client