Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/70c9b075-c74d-3d18-b861-45dafc3e29a3.roa
File:                     70c9b075-c74d-3d18-b861-45dafc3e29a3.roa (raw, json)
Hash identifier:          IcYY581TS8XHfqpqSKQQIIBz26pZ4Bjrn+iRLD2JOUU=
Subject key identifier:   05:52:4D:A8:90:23:86:F1:87:39:06:3C:48:EB:14:1E:5A:7F:A2:86
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F86ECB5481B8D6EE366692400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/70c9b075-c74d-3d18-b861-45dafc3e29a3.roa
Signing time:             Sat 17 Oct 2026 01:30:42 +0000
ROA not before:           Sat 17 Oct 2026 01:30:42 +0000
ROA not after:            Fri 15 Jan 2027 02:30:42 +0000
asID:                     61986
IP address blocks:        2001:470:647::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:86:ec:b5:48:1b:8d:6e:e3:66:69:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 17 01:30:42 2026 GMT
            Not After : Jan 15 02:30:42 2027 GMT
        Subject: CN=72f248d8-7951-43cf-a36e-b3656bc5574d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:82:b2:65:85:7e:1d:ef:18:cf:07:14:5a:67:
                    1d:e2:3e:0f:8f:ba:50:6a:a0:b5:d8:00:ca:2e:d7:
                    07:52:83:c7:6f:83:0f:7d:a9:11:c0:99:43:70:63:
                    5f:4d:d8:30:fa:43:c1:75:0e:47:b6:5c:e3:be:fc:
                    a7:e3:6e:76:ec:46:0a:87:0d:4b:b8:b1:ce:6e:f4:
                    99:66:1e:f7:a7:1c:fd:84:80:28:0d:af:02:78:26:
                    34:47:83:56:a1:9f:e8:cf:79:99:8c:0e:64:79:ec:
                    8f:c5:83:7b:28:90:44:83:aa:74:2b:b3:38:16:8e:
                    3b:be:0b:64:d7:93:33:50:07:77:e4:d5:24:3d:39:
                    33:7c:2d:04:ea:3a:39:cb:de:f6:b5:58:9d:40:65:
                    75:0c:ce:98:63:83:57:76:d7:05:a0:a5:7b:c0:e7:
                    6f:b6:bf:a0:cd:87:5f:cb:cc:39:38:1e:2a:99:4a:
                    c8:7b:43:30:b1:6e:32:7f:98:86:f9:37:26:cc:ae:
                    6f:00:d8:83:2e:70:79:05:8b:9a:ef:24:b0:87:fd:
                    8a:44:f6:25:85:3f:5c:38:68:73:03:5e:3f:41:1d:
                    f3:79:e3:84:cb:ea:c8:cd:e5:18:ec:1e:be:f8:f8:
                    0a:96:49:b1:e8:e4:4e:8b:65:ff:a4:2c:e7:30:2a:
                    f3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:52:4D:A8:90:23:86:F1:87:39:06:3C:48:EB:14:1E:5A:7F:A2:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/70c9b075-c74d-3d18-b861-45dafc3e29a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:647::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:73:d3:7b:e4:35:cc:45:8c:2e:69:b7:5e:f4:e5:5a:77:c5:
         4f:0e:9a:8d:00:86:5f:0d:6a:b3:fd:fa:e1:bb:c2:1d:0e:ba:
         a8:5a:5b:ca:0b:f9:0f:5a:d8:f5:f8:4e:4e:b3:ae:f9:47:a6:
         0a:13:65:8b:5a:02:e8:d2:86:e5:ae:68:cf:0c:6a:30:1c:33:
         55:92:c4:23:91:a9:fd:c1:82:19:c5:2d:53:e3:f2:08:34:e7:
         61:60:3a:49:89:9e:c9:4b:2e:15:5d:02:f5:4f:bb:3b:98:b2:
         63:97:91:8d:73:84:c2:70:3e:7a:77:5e:7e:33:2e:a6:a6:e9:
         ee:46:48:18:20:d2:9a:b7:c1:13:1c:3d:27:29:d9:74:6a:b3:
         ad:1c:b1:b7:d9:c4:7a:47:06:cc:ca:12:27:9f:33:6d:d8:c7:
         54:fe:c5:02:d9:d4:ed:af:7e:27:03:41:a5:db:92:de:eb:d6:
         b5:d0:9f:ef:95:7d:b6:13:fb:35:d5:ed:62:6f:9b:de:2d:76:
         cb:71:6c:32:a4:8b:79:79:da:0a:a4:60:00:e2:d2:c3:a2:3e:
         22:ea:91:28:74:64:1a:e3:3a:f5:ba:c2:90:f7:51:35:9a:1d:
         56:64:e4:be:9c:68:0f:f2:b7:be:1f:ae:5e:e3:d3:32:e5:4f:
         2d:4e:b9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 18:08:07 2026 by rpki-client