Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e5b5ce1-e1c6-3b0a-b11f-0b94213a2935.roa
File:                     8e5b5ce1-e1c6-3b0a-b11f-0b94213a2935.roa (raw, json)
Hash identifier:          GPvuYwA7x1E7cxzqwIrCWQLXkMj//W2vmo01A8UADIw=
Subject key identifier:   5E:A6:96:9B:8A:CF:F8:73:F6:F7:3E:26:56:0B:97:5B:A6:78:50:94
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F698D6BF52EB8D5296CC23350
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e5b5ce1-e1c6-3b0a-b11f-0b94213a2935.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     402261
IP address blocks:        2001:470:331::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:6b:f5:2e:b8:d5:29:6c:c2:33:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=8551d9d8-f837-4410-b64a-ca5dee5e0224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f0:5f:0d:fb:2e:e6:67:b1:e6:3c:87:e9:59:
                    ad:2c:35:9f:9e:19:91:0a:64:de:17:0b:02:52:78:
                    74:91:60:b7:18:e1:9c:21:1e:d6:97:87:19:fc:e8:
                    64:c6:0e:40:a0:23:9f:2a:ba:42:9d:fb:f6:31:d6:
                    1c:2e:26:bf:c1:8e:dc:5e:25:6d:51:34:1c:d8:5b:
                    73:29:3b:0b:3e:e8:f3:45:b1:ec:f2:1f:7e:7c:4b:
                    75:7e:c9:b6:3f:c7:e6:b2:d5:74:c3:3b:b8:5d:92:
                    9c:c0:8a:0b:cb:ea:45:65:24:b1:96:86:51:e6:70:
                    81:04:6c:c9:1a:fd:d7:87:91:40:e4:7c:70:6b:78:
                    3f:9c:aa:79:38:f5:dc:e6:b9:5a:2a:a4:a3:7f:54:
                    65:01:8c:5e:5f:7f:78:33:a4:c2:f0:9b:6c:78:86:
                    5c:f8:10:ed:68:27:ee:57:52:d7:c9:67:0f:8d:a6:
                    d8:21:e2:a3:49:de:f1:0c:02:05:d8:63:14:9b:da:
                    ac:df:6d:c9:ef:b4:12:34:3b:60:47:df:a4:07:34:
                    f3:f0:b6:8a:73:cb:d0:77:e8:3b:7e:f8:a2:bf:f2:
                    0d:00:ac:32:0a:74:69:fe:41:39:12:64:78:e7:57:
                    27:80:f4:4c:35:03:e4:49:48:08:a5:cc:e9:88:a1:
                    f3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A6:96:9B:8A:CF:F8:73:F6:F7:3E:26:56:0B:97:5B:A6:78:50:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e5b5ce1-e1c6-3b0a-b11f-0b94213a2935.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:331::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b4:11:10:28:54:a1:8f:66:9b:9f:59:41:9e:93:06:d8:fc:
         b2:ea:c4:6b:7e:37:d1:3d:14:1c:e2:40:96:b5:c0:77:c4:2b:
         98:10:5b:06:64:d1:d3:23:10:e7:67:14:d3:18:63:12:d1:38:
         2c:15:a5:e8:09:7e:df:df:2e:8d:57:99:b7:9e:92:63:fb:7b:
         51:71:9f:9c:09:c4:11:47:08:f2:2e:34:36:9c:93:87:12:b1:
         4e:34:b3:06:dc:8e:dc:b3:0a:91:05:90:f3:62:63:07:db:f3:
         1b:02:8a:0d:75:e0:be:38:f7:62:3e:af:c4:43:e3:6b:9c:e7:
         ac:9f:1f:0b:fe:3e:03:be:05:f0:bb:0a:c5:31:f8:51:9e:0c:
         e7:b0:41:3e:17:04:b7:40:31:4f:ec:36:7b:ef:17:ce:27:74:
         b4:fb:13:be:3c:f6:4d:bf:33:8c:75:9f:bb:4e:8e:c5:aa:d2:
         ac:d5:26:1e:6d:9a:f9:2a:15:16:6d:bb:e5:1e:59:22:e4:3d:
         61:3d:33:08:8d:14:1c:8e:ad:52:83:45:75:17:39:2c:40:78:
         2f:24:43:60:a4:ca:8c:ba:d6:d7:97:e5:fe:e4:a2:4d:9f:0a:
         3b:fa:94:88:44:37:3d:a0:aa:0a:7d:1f:16:ba:db:4b:8e:3b:
         16:71:46:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 12:43:38 2026 by rpki-client