Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b00e7579-a6a8-3f8d-ae47-e0e6e017fb53.roa
File:                     b00e7579-a6a8-3f8d-ae47-e0e6e017fb53.roa (raw, json)
Hash identifier:          9iStJeVjs60+iy4MOn997M2SvG+7pBaKMaQE5qh3WDk=
Subject key identifier:   26:AB:67:6B:15:01:B5:E0:90:9A:1C:FF:6B:ED:B7:D6:D5:7A:02:39
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7E01CA7B0BB7B5C77F00C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b00e7579-a6a8-3f8d-ae47-e0e6e017fb53.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     43440
IP address blocks:        2001:470:2bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7e:01:ca:7b:0b:b7:b5:c7:7f:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=f8987300-de1f-4246-9a1d-38ddf021bb24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8d:45:be:30:8e:db:9a:3b:2c:b4:0a:26:c6:
                    53:51:9e:7b:40:42:d0:39:a7:5e:a9:cc:fa:18:80:
                    71:3b:99:b6:fc:94:60:b3:2e:9e:ef:de:79:70:5f:
                    be:dc:f2:e1:da:e6:68:24:eb:88:da:b8:c5:35:e0:
                    ae:03:0a:3e:63:6c:36:5d:d8:67:57:ea:93:7d:32:
                    99:37:23:e2:09:b4:08:12:76:bb:26:0a:97:3f:24:
                    cf:0e:7f:22:0a:e4:27:7e:60:44:b6:23:11:fd:72:
                    2a:a1:c2:90:92:fd:28:19:b4:a3:97:43:e9:d0:25:
                    5b:76:ec:c8:83:c9:65:b2:dd:fd:17:a0:47:1b:26:
                    0c:27:b1:93:b3:94:09:12:03:de:8c:33:41:d9:86:
                    c7:8a:ab:30:c6:7e:97:05:ec:7d:c3:e8:fd:68:92:
                    4f:69:2a:b8:89:82:d1:33:22:fb:f1:41:95:13:17:
                    69:04:08:f6:68:f1:fd:65:8b:72:25:58:f2:38:91:
                    ce:a9:1a:9c:a3:07:d9:dd:07:b5:81:ec:ee:b7:d2:
                    5e:b3:d0:62:f4:00:d3:24:47:30:1a:a8:e2:4a:0a:
                    04:14:ec:0d:93:9f:2d:b6:b0:9d:70:72:17:88:d1:
                    61:6a:08:e4:48:99:48:7f:42:7c:a6:42:3e:0a:4a:
                    17:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AB:67:6B:15:01:B5:E0:90:9A:1C:FF:6B:ED:B7:D6:D5:7A:02:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b00e7579-a6a8-3f8d-ae47-e0e6e017fb53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:ac:da:fd:d3:fb:47:fe:d6:63:ce:eb:84:97:ac:08:8d:75:
         a4:e5:02:d3:25:35:79:72:28:2b:cf:c8:eb:7e:25:05:a5:1f:
         fa:0e:ea:9a:dc:a0:f2:c8:47:3c:ba:61:88:d1:6a:63:bd:82:
         a7:fb:ad:34:4a:29:78:d6:70:82:74:66:68:6a:1c:ac:9b:08:
         6e:23:e7:3e:d6:03:7e:a3:ee:68:25:d0:5a:aa:95:51:29:4a:
         cc:aa:a3:50:6c:76:32:2d:8b:86:b9:17:e1:c9:74:1e:04:5a:
         34:43:e4:db:c1:3f:36:a1:cd:ec:2b:94:66:11:25:b6:93:80:
         0c:b1:36:a4:b0:54:86:67:5f:a8:cd:63:49:c2:6d:fd:b1:89:
         46:e5:a5:8c:0e:ea:ec:8c:d0:38:36:43:33:cd:b1:d9:4c:71:
         30:3e:61:48:47:be:52:a3:23:ce:32:8d:7d:58:29:2f:dd:03:
         3e:c2:b1:11:3d:59:72:38:a9:89:9f:ee:1e:81:9c:56:00:ac:
         90:70:9d:73:4c:61:f0:cb:f3:f8:ec:d9:72:42:c5:e0:2f:f3:
         9b:be:ea:0d:54:3b:48:b1:6a:64:60:17:61:a6:a3:8e:75:3c:
         6f:e4:60:6e:fe:9d:3a:ae:ca:53:de:f9:92:99:d0:7d:42:ad:
         d7:4c:f1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 08:23:39 2026 by rpki-client