Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7fb1e2e4-566e-3c5e-b3a4-931895679ca1.roa
File:                     7fb1e2e4-566e-3c5e-b3a4-931895679ca1.roa (raw, json)
Hash identifier:          mjpL/kyw0ItAFbG69ewIcg5KqKqnZA5mOg4AEHSUx1E=
Subject key identifier:   6A:38:5D:3D:6D:C4:39:0E:FC:22:77:0E:06:C6:FA:D2:BE:0A:41:5C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584FAC9CBB7DAA6F3A90F2CCC330
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7fb1e2e4-566e-3c5e-b3a4-931895679ca1.roa
Signing time:             Fri 30 Oct 2026 13:30:17 +0000
ROA not before:           Fri 30 Oct 2026 13:30:17 +0000
ROA not after:            Thu 28 Jan 2027 14:30:17 +0000
asID:                     133334
IP address blocks:        2001:470:658::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ac:9c:bb:7d:aa:6f:3a:90:f2:cc:c3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 30 13:30:17 2026 GMT
            Not After : Jan 28 14:30:17 2027 GMT
        Subject: CN=cddc5b7c-ea76-410e-b163-88ae331d808b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5e:93:8f:cc:8d:ab:62:ff:36:74:6b:88:5b:
                    ef:d0:50:01:db:62:41:56:3f:5d:0c:d7:de:6b:c5:
                    0a:d4:6a:bc:ae:e7:04:36:05:cb:c1:48:78:2d:be:
                    f5:bc:a2:d2:17:2e:44:ac:ac:ae:08:f7:ea:f4:2d:
                    dd:90:20:12:5e:0c:97:04:46:2d:d1:ec:5f:39:62:
                    27:41:b7:50:0e:5b:30:8a:59:ad:9f:07:d6:9b:e2:
                    3e:4d:dc:71:cd:c8:ef:b4:a7:52:5b:64:ec:e0:7e:
                    6b:fb:e1:bb:e4:59:ed:e8:8f:5c:97:c0:f2:9d:81:
                    41:e8:71:ec:21:62:2b:71:75:4d:3a:67:5e:ff:51:
                    67:fe:6e:6a:59:c3:84:7f:62:c5:89:3b:d6:29:35:
                    48:d9:6e:a7:bd:a9:49:64:f0:25:69:d8:cf:97:e1:
                    75:32:d5:31:ef:51:92:c3:ec:f6:de:6a:c7:63:13:
                    e4:c3:fb:9e:08:39:35:c2:ec:9c:46:d6:ba:19:9b:
                    9d:30:d8:ec:07:08:e2:1c:8c:98:62:e9:5b:b9:06:
                    af:41:f4:5c:d0:d7:ab:41:7e:25:44:14:d5:49:75:
                    6d:1e:65:fb:e2:92:a3:42:45:6d:34:c6:9a:84:8d:
                    b1:b1:51:4f:c0:10:57:05:d6:c1:a8:c9:a2:35:42:
                    88:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:38:5D:3D:6D:C4:39:0E:FC:22:77:0E:06:C6:FA:D2:BE:0A:41:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7fb1e2e4-566e-3c5e-b3a4-931895679ca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:658::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:30:33:7a:ea:43:ad:fb:f6:57:af:a1:49:19:5d:8b:de:68:
         7f:cb:4f:36:a0:9e:e8:a5:1b:fc:54:3b:b2:80:e0:aa:a8:2f:
         2b:4b:e8:c4:ef:6a:25:46:73:94:e8:8f:61:41:7f:16:76:1a:
         4f:67:b0:74:17:3d:7f:7b:f1:48:d8:34:7a:2c:ee:f6:35:40:
         8d:69:52:2b:cc:f7:ae:13:bd:76:cb:8b:ba:74:17:64:db:f7:
         6a:45:bb:13:fd:b7:4b:9e:dc:a6:54:d7:4a:34:57:8b:b5:12:
         63:be:a2:db:18:5a:4d:cd:5f:72:b2:4b:da:36:b5:e7:85:a5:
         4a:1e:67:85:16:10:6b:52:67:98:a2:40:f9:5b:e4:92:10:37:
         a4:7b:6a:42:00:95:ec:ff:2f:4e:b0:6e:4d:22:8f:7c:d2:54:
         22:b2:70:57:1e:58:85:49:68:29:2e:f2:e2:22:bc:4b:f7:ff:
         d5:d9:9c:13:62:20:ae:5d:99:fb:dd:1a:2b:d0:bd:d9:ed:f8:
         b0:89:a5:07:b6:c9:cd:59:1e:9b:d2:b8:13:ba:7b:0c:42:53:
         55:75:d5:dc:f4:d2:50:84:81:d1:a9:2e:5a:85:c7:b2:80:3a:
         d6:b0:88:b6:1b:a9:f7:de:52:05:89:cd:96:96:cb:00:91:aa:
         18:1d:af:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:31:59 2026 by rpki-client