Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/78a81177-5baa-3e8f-bf8c-0ac5dba7973b.roa
File:                     78a81177-5baa-3e8f-bf8c-0ac5dba7973b.roa (raw, json)
Hash identifier:          Hw3+d82Oq8F/ZsgusXkGEFp0mQ6BI7CmXNirANGHLys=
Subject key identifier:   CB:EA:69:95:E4:8E:46:6F:7A:48:82:08:9B:BB:7A:0F:C9:A7:1B:45
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DF96B8A2019C51AEE20E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/78a81177-5baa-3e8f-bf8c-0ac5dba7973b.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     23089
IP address blocks:        2001:470:19f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:f9:6b:8a:20:19:c5:1a:ee:20:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=a86007c7-5791-45ac-9cdf-705a52877fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:aa:b0:6a:f7:3e:16:5f:a5:72:0f:0f:9b:de:
                    dd:3d:0e:e7:c9:f8:7c:0c:95:7b:bc:69:85:20:d2:
                    78:43:47:31:9f:94:c8:a0:36:5e:80:7a:f6:81:59:
                    c3:68:1e:62:45:c3:71:6b:07:7a:5e:fc:9d:28:54:
                    f0:c9:ee:88:50:b8:bf:11:90:fc:27:c3:d0:93:88:
                    7c:be:5e:36:09:19:05:3c:24:a4:2c:fe:c0:5d:ee:
                    62:ca:7d:b6:b6:8d:61:37:81:3a:d0:87:75:6d:e2:
                    17:c6:6d:c6:cc:21:4e:ad:b2:ce:80:f3:ac:ae:98:
                    b4:e0:18:8d:de:f8:0c:28:07:ee:d3:cf:0e:5b:b5:
                    60:de:cc:d3:2a:25:dd:f6:d7:ee:32:4c:ae:02:ae:
                    19:b1:74:07:b4:4e:07:c8:36:b8:4b:b8:a6:d3:ef:
                    b2:4c:2d:4a:a4:f3:2d:fe:63:93:99:4e:df:c1:38:
                    5d:77:f5:5f:02:88:29:f9:19:46:65:f4:f9:9f:ca:
                    47:fb:8f:5d:5d:a5:54:21:1f:f6:fb:67:b7:d7:5e:
                    36:c6:b1:49:77:ef:01:b7:ed:cb:5e:af:f2:94:ea:
                    42:55:eb:f1:71:87:e1:0f:c0:b0:8a:b6:76:b5:2b:
                    56:27:95:56:44:86:2c:4d:a8:96:0d:8c:6a:0d:f4:
                    4f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EA:69:95:E4:8E:46:6F:7A:48:82:08:9B:BB:7A:0F:C9:A7:1B:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/78a81177-5baa-3e8f-bf8c-0ac5dba7973b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:19f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f0:63:c3:83:f1:cf:bc:8e:fe:2e:8d:d2:28:73:d1:53:ae:
         54:9d:ca:d7:80:fe:45:fa:0b:1a:36:ad:98:31:db:c4:88:d8:
         37:9a:a5:74:b8:ef:1b:25:1e:f6:f7:57:ff:eb:2d:df:76:6b:
         0e:27:fd:37:a8:26:c4:eb:f7:cf:bd:2d:bf:81:a6:81:78:f9:
         68:ee:f9:5d:c3:40:d7:82:c9:d1:5f:d6:9e:c0:69:c9:d4:37:
         d8:c3:4c:2d:7d:08:c6:1e:45:d5:14:c8:7f:e7:18:13:79:2c:
         7f:27:42:db:fd:d0:de:bf:81:a2:b0:b8:32:4c:cf:a1:7a:c9:
         94:e9:ea:f4:b7:18:e0:58:5b:8e:39:76:f1:27:d2:0d:05:42:
         a8:51:d4:4f:49:8e:68:fd:b8:aa:35:86:5c:28:88:d8:c8:6f:
         11:70:0c:a0:75:ce:f9:52:a6:ba:b9:9c:32:08:e2:a9:8a:16:
         4c:5c:76:07:1b:d5:99:a0:ee:44:75:b7:08:fc:b9:2f:c6:af:
         56:fa:5e:36:54:51:91:0f:45:9f:45:0f:25:0e:01:7e:52:da:
         c1:a9:69:42:8d:25:a6:41:02:b4:98:d0:00:72:f2:8a:5d:e5:
         a4:01:e9:39:0a:a3:4b:b7:c4:fd:1e:9a:13:3f:97:58:b3:3a:
         5a:fa:67:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:11:15 2026 by rpki-client