Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76ec390b-186d-3e56-9bef-b2d0d4ff5941.roa
File:                     76ec390b-186d-3e56-9bef-b2d0d4ff5941.roa (raw, json)
Hash identifier:          9N5+DpPS2yCNrjpCA4IMlDsfJKHRwPHF9RYgbOl6Reo=
Subject key identifier:   EC:AC:FE:16:EF:87:C0:40:CF:FB:B6:34:71:73:F9:2D:45:FC:A2:0B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DDF9FA78E91A74B8B9278
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76ec390b-186d-3e56-9bef-b2d0d4ff5941.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     22115
IP address blocks:        2001:470:104::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:df:9f:a7:8e:91:a7:4b:8b:92:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=6291fdda-ad72-466e-9afd-b502f76a645e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ff:47:98:f4:0d:e5:46:80:23:dd:5f:a4:48:
                    66:22:ba:05:f9:ef:78:12:52:7b:f7:12:95:79:51:
                    cf:51:ab:25:27:73:1b:a8:33:cc:37:9f:2c:f5:aa:
                    1e:eb:52:04:4d:99:46:f3:cf:d6:82:c4:ea:6a:90:
                    08:16:cb:cf:ef:94:26:31:24:1b:29:26:9d:ea:d5:
                    c0:56:f3:a9:16:68:b1:dc:30:ca:53:be:f1:93:e6:
                    65:24:10:fe:26:00:13:58:fd:57:e8:26:3d:21:13:
                    bd:a0:40:a1:d9:c5:5a:e2:01:7b:df:4b:8c:14:76:
                    ca:d2:3c:83:f0:e3:4d:d2:5e:7f:6a:d1:26:d4:23:
                    03:c8:a5:7b:c6:41:c9:8a:e1:f2:e2:49:89:af:c2:
                    75:9f:4d:4b:9c:0a:8c:5e:bd:80:0f:f0:d4:3e:5d:
                    88:be:8b:1c:14:9d:5c:f9:91:72:10:4e:e2:d4:ca:
                    15:56:b5:f5:47:9a:e0:ea:1b:a5:12:ef:aa:32:c9:
                    cd:55:f5:ed:7a:30:9c:17:a8:3e:55:f6:7b:55:50:
                    d0:ee:2e:44:d2:44:7b:7e:0d:8a:64:d0:a3:f3:da:
                    6a:ef:61:9f:06:13:78:93:3b:d1:4c:82:2f:6c:3f:
                    33:90:73:ca:3b:6f:99:e0:4a:7f:68:30:fc:1d:aa:
                    ed:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AC:FE:16:EF:87:C0:40:CF:FB:B6:34:71:73:F9:2D:45:FC:A2:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/76ec390b-186d-3e56-9bef-b2d0d4ff5941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:104::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:6a:6d:f6:57:bc:64:98:37:cb:ae:51:23:27:34:35:b6:b9:
         68:57:49:01:c6:09:53:34:40:d5:64:69:ce:ac:6e:dc:57:b6:
         80:36:ae:ea:6d:23:d8:87:b2:4c:01:94:51:41:44:88:00:d7:
         9d:66:8c:bb:a4:67:3b:7b:d0:8b:a3:25:9b:e9:2a:b7:2b:ff:
         89:58:80:d0:ed:d7:a1:0e:b2:a7:55:b1:e7:42:5c:0e:d2:0c:
         82:10:78:21:e3:bc:5d:39:d6:a0:a6:9f:06:bd:60:92:01:e4:
         0c:d2:33:15:cc:da:fd:ef:10:14:0d:60:1d:9a:e8:d5:ea:66:
         d0:ef:38:cb:4c:04:35:06:8c:25:8f:76:66:c9:38:67:71:c0:
         2e:3f:09:71:69:33:75:e7:37:01:b2:e8:99:15:86:33:e8:51:
         96:ba:f3:88:a7:2b:12:02:3d:0f:a1:03:9f:87:62:f8:3e:34:
         5a:eb:6f:ad:24:18:12:83:ce:5b:b9:e0:ce:d8:6d:02:1c:31:
         da:f6:e1:53:a7:44:4e:67:ae:7c:9d:0c:76:d6:e6:5f:ab:7c:
         03:3d:7d:ad:71:62:ab:ea:1b:3f:7f:09:7c:ae:60:02:bd:6c:
         3a:5d:41:f7:ad:0d:95:6b:1a:be:13:bb:6b:26:a6:eb:78:24:
         ec:78:a5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 17:42:39 2026 by rpki-client