Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/79be907d-4c00-32c0-8168-1bed2da5c23e.roa
File:                     79be907d-4c00-32c0-8168-1bed2da5c23e.roa (raw, json)
Hash identifier:          0Ela6xrAD5+RHtNaXcwY9tj5cWdJwtQqQimKUrkPul8=
Subject key identifier:   2F:2B:F0:C9:50:26:0A:94:C9:1A:2A:46:5A:B7:F5:90:27:34:64:54
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F8851D974F1C6EFAFCA062F40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/79be907d-4c00-32c0-8168-1bed2da5c23e.roa
Signing time:             Sat 17 Oct 2026 13:30:18 +0000
ROA not before:           Sat 17 Oct 2026 13:30:18 +0000
ROA not after:            Fri 15 Jan 2027 14:30:18 +0000
asID:                     6204
IP address blocks:        2001:470:4d3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:88:51:d9:74:f1:c6:ef:af:ca:06:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 17 13:30:18 2026 GMT
            Not After : Jan 15 14:30:18 2027 GMT
        Subject: CN=ea9693cb-9a1e-47e9-a8e6-3b91c26574fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8b:a3:b1:75:78:a4:1e:03:bd:3e:b0:f7:c3:
                    2e:33:a8:47:59:37:bf:e6:14:10:96:18:68:ff:1a:
                    42:9b:8c:14:7e:65:93:14:24:82:f0:e9:32:57:99:
                    00:2a:3b:88:53:41:f0:12:bb:9e:d2:49:37:e4:31:
                    da:80:a6:f6:ec:5c:f1:f4:49:05:b5:83:58:7f:fa:
                    09:04:bc:47:e3:f1:5d:31:49:85:d5:4f:38:23:b5:
                    6f:31:95:df:a1:33:8b:03:6f:5a:67:be:c4:47:ab:
                    17:77:08:4e:2d:f8:0d:6c:54:41:ba:10:89:89:fd:
                    8a:ca:1d:57:ca:c1:90:46:60:fb:51:f2:27:14:ab:
                    db:1a:b4:df:d1:02:4c:c3:62:f5:53:32:88:23:26:
                    09:9a:06:10:7c:0d:f2:81:b7:48:41:a4:ed:31:d7:
                    e0:b5:ff:f0:4f:70:13:53:65:59:4b:f4:3a:6a:4c:
                    2b:ac:89:b2:e3:4c:6a:b5:02:ea:3b:f4:38:10:82:
                    06:59:a9:0d:ac:32:09:09:42:f1:4b:27:97:7f:cc:
                    e0:34:b5:8e:61:60:51:35:9a:56:27:4a:a1:e9:37:
                    95:7c:ee:77:8b:68:fe:ef:71:14:0f:ac:9d:66:dc:
                    bf:82:cb:b4:7a:90:a1:6e:70:6e:8d:8a:37:ee:91:
                    f3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2B:F0:C9:50:26:0A:94:C9:1A:2A:46:5A:B7:F5:90:27:34:64:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/79be907d-4c00-32c0-8168-1bed2da5c23e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4d3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:cf:9b:95:7f:5e:0b:1e:ca:8d:90:bd:f0:26:cf:44:5f:06:
         5b:d7:a4:75:bf:b8:d6:27:b1:20:5d:50:87:bc:84:53:80:39:
         7a:7b:1e:02:37:9b:63:9e:22:6b:34:74:18:45:05:d2:8c:4e:
         a2:b4:05:43:d9:1b:cc:d5:89:92:e7:c5:f1:a4:81:34:b4:44:
         fb:0a:53:6c:9d:a7:03:63:96:cd:46:b9:a8:c7:61:c7:78:f8:
         80:10:e6:c9:46:99:d5:e5:24:8b:05:e5:fb:f8:24:c8:02:3d:
         0e:d7:31:66:e0:01:81:8e:29:24:40:43:0c:1c:ee:ee:b5:64:
         fe:53:35:5d:eb:76:fc:49:be:2d:5f:ba:34:f0:ac:4a:df:26:
         a1:00:2c:5f:d6:41:85:03:97:7d:db:7f:c9:f7:b7:39:5e:b0:
         a8:0e:3a:e1:44:de:f2:12:9f:7e:45:cd:2e:39:a2:98:96:c5:
         1b:1d:84:dd:85:c7:34:ba:53:27:8e:1d:f6:65:fd:94:5e:c2:
         2a:25:d5:a3:bf:f6:10:e0:71:2f:dc:e3:19:50:ab:dc:76:b5:
         bc:11:16:a2:2f:1a:47:ff:ff:a7:13:4f:da:f7:e2:e1:61:8f:
         be:54:5c:10:f6:0a:94:e5:ff:17:75:6f:0e:3b:b8:5e:f6:3f:
         41:c3:c1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 07:10:16 2026 by rpki-client