Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/71d9a8bc-387f-3265-aece-013d84c93629.roa
File:                     71d9a8bc-387f-3265-aece-013d84c93629.roa (raw, json)
Hash identifier:          /47VWWr29qYjeTTwLcM69LgFJ3l2Q85JXqH6mbAYnHI=
Subject key identifier:   53:07:2B:22:83:E6:84:DA:26:38:34:C8:39:C7:C1:46:6B:24:29:D5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DE597D6BB8627F25932A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/71d9a8bc-387f-3265-aece-013d84c93629.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     17210
IP address blocks:        2001:470:268::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:e5:97:d6:bb:86:27:f2:59:32:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=c11ca197-f54f-4928-b939-c11c8b6fb834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:04:f2:cb:ec:e1:2a:15:69:46:07:e0:a5:59:
                    a3:d2:71:14:fb:5c:d5:af:a6:f9:f4:44:23:e7:14:
                    e7:81:b7:ad:72:86:9e:5c:01:58:ad:06:cd:2a:4e:
                    d6:d5:35:ea:5a:8b:bc:f1:b3:b8:de:07:9c:da:4a:
                    65:38:31:90:46:5f:d7:8b:79:75:06:a7:4f:c3:9b:
                    05:ec:3a:d1:db:9a:11:21:f4:d9:c9:d6:ca:2c:8d:
                    3d:77:e5:c1:5a:68:aa:f7:45:3b:1e:e9:53:6b:53:
                    dc:79:ce:e9:e9:b0:c9:bf:41:d1:bf:e5:d9:78:b4:
                    bf:f4:ee:e1:49:bb:d2:c7:f4:e4:be:23:fe:d1:c5:
                    b8:a9:f4:18:f2:44:ae:ee:1c:ce:4f:01:d4:c5:c3:
                    20:00:b6:5e:2b:0c:8f:28:9a:d1:6b:1d:57:9b:02:
                    73:be:35:d0:f0:58:5a:62:3e:52:fc:ec:c8:a5:83:
                    fe:d3:68:18:f6:72:86:a9:14:69:42:88:75:d3:1c:
                    e7:55:e3:5a:55:32:c6:b6:32:f8:32:e1:64:37:57:
                    76:7e:e1:87:78:b2:62:3b:88:85:93:0d:13:d9:a7:
                    67:bc:05:c6:8f:f4:63:48:e9:08:f3:78:64:1b:17:
                    73:cc:45:1d:bc:bb:82:17:09:fc:45:e2:d4:53:7b:
                    38:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:07:2B:22:83:E6:84:DA:26:38:34:C8:39:C7:C1:46:6B:24:29:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/71d9a8bc-387f-3265-aece-013d84c93629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:268::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:15:b8:53:15:17:34:74:3e:0f:50:fa:97:37:73:aa:74:53:
         39:02:82:ef:60:3c:14:04:b5:ab:86:58:10:d2:be:87:bc:da:
         6e:72:c5:37:24:46:be:98:72:fc:6b:8d:e3:ef:14:c1:1e:30:
         41:fd:47:ec:84:d0:b6:7d:1d:73:4d:39:df:28:39:0a:47:b9:
         85:0b:41:5f:c4:f3:44:d0:b7:53:d4:7e:5d:1e:f9:a0:ee:40:
         54:f1:cd:a1:a7:fb:e9:66:ea:a7:e4:01:3f:03:5c:b6:4d:27:
         43:8d:da:cf:a8:0f:87:1b:83:f5:64:7c:2d:67:7c:3c:39:d1:
         27:d1:fd:25:5d:2c:08:5a:ed:c7:be:c3:8c:82:8b:1e:9c:12:
         8d:54:f2:c9:6b:ea:ef:67:91:5d:b2:c4:48:7b:e4:8a:8a:c9:
         19:04:2a:0c:3e:69:e5:c9:75:63:cf:52:7c:74:20:5a:27:e2:
         7c:f5:93:b6:df:34:ea:b5:7d:3f:23:32:10:14:77:f0:f8:44:
         19:09:26:62:2a:d7:bf:33:4f:15:b6:64:75:a3:ab:1d:56:03:
         6e:df:c1:ac:a4:e4:18:d6:3d:c2:26:25:49:8d:fc:88:7d:c5:
         53:bb:5f:b8:d4:27:37:fa:81:05:01:ae:73:64:98:74:8c:8c:
         7e:60:98:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:52:13 2026 by rpki-client