Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b6120370-34bf-3026-8038-eba5093dc0dd.roa
File:                     b6120370-34bf-3026-8038-eba5093dc0dd.roa (raw, json)
Hash identifier:          cVrtQoNJSfbPWmywvEny6s8uwbZa5v3lr5RMduehEzc=
Subject key identifier:   C0:32:45:07:A9:90:B0:35:8E:AF:AB:75:DE:62:5D:7C:25:24:3E:F0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F8DE753DDD71E1AD69AB594C8
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b6120370-34bf-3026-8038-eba5093dc0dd.roa
Signing time:             Mon 19 Oct 2026 13:30:31 +0000
ROA not before:           Mon 19 Oct 2026 13:30:31 +0000
ROA not after:            Sun 17 Jan 2027 14:30:31 +0000
asID:                     48957
IP address blocks:        2001:470:174::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:e7:53:dd:d7:1e:1a:d6:9a:b5:94:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 19 13:30:31 2026 GMT
            Not After : Jan 17 14:30:31 2027 GMT
        Subject: CN=3f41fdc6-b874-49f3-a631-b32379bf8941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ae:9e:97:44:28:3a:76:ae:d6:12:10:67:22:
                    02:0d:25:2a:c5:17:99:88:5b:7e:a3:fe:2c:b6:6d:
                    37:b5:04:b1:c1:59:c1:96:58:d1:de:a4:27:49:8f:
                    81:18:0b:db:ba:34:01:7e:ad:23:4e:49:92:15:4d:
                    19:de:93:74:05:54:d3:fc:94:58:cf:f6:60:fe:de:
                    3e:f1:a5:10:a8:bd:6e:13:d8:59:89:16:4e:90:79:
                    6a:9f:ea:51:ec:9b:b5:06:87:e6:02:ae:f7:8b:cc:
                    be:05:10:91:a6:09:4f:6f:80:a1:39:99:05:47:44:
                    ab:bc:90:41:72:61:21:cc:c8:16:4f:3d:21:79:56:
                    d6:03:8c:11:91:13:c2:3a:0a:64:1d:75:de:44:08:
                    be:a5:38:72:32:c1:29:5a:5c:69:73:89:b9:c6:ca:
                    2b:6e:56:2a:93:62:52:f7:38:fb:04:c7:76:13:0d:
                    d2:c4:89:23:5c:2a:6b:f4:5d:ef:98:65:56:45:2a:
                    c5:6d:bf:55:6a:c2:95:e7:35:08:4b:a1:3a:96:d3:
                    b3:24:7f:68:bd:6d:e9:fe:27:93:8d:49:5d:0e:86:
                    11:e3:db:39:0e:34:f1:f7:f4:f9:c0:bd:b1:26:8b:
                    a8:6e:9d:d5:32:bd:da:e8:49:4b:4d:ed:9e:13:59:
                    a2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:32:45:07:A9:90:B0:35:8E:AF:AB:75:DE:62:5D:7C:25:24:3E:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b6120370-34bf-3026-8038-eba5093dc0dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:174::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:22:ce:3e:c1:f9:c3:ea:af:6d:4f:47:24:f2:23:88:90:e8:
         6b:ac:37:fe:06:2c:0d:9a:70:33:db:9a:54:fc:a1:7f:cf:2b:
         d4:02:65:5c:88:c7:9b:56:01:5f:1b:52:92:05:b6:ae:8a:ac:
         81:03:1c:1a:7d:67:85:6f:a2:79:66:d0:8f:b4:3c:8d:37:ce:
         34:8e:91:43:89:b0:24:46:01:36:ea:76:5c:95:0d:f7:65:d8:
         31:bc:6a:66:90:ee:66:2b:dc:bd:11:65:aa:80:6b:08:8e:56:
         5b:1b:ef:5e:19:cb:b0:ce:a3:0f:a7:32:ef:d1:ed:eb:00:05:
         11:92:e8:0b:55:cf:51:c9:cb:45:b8:42:c5:d2:62:37:0b:cb:
         f2:37:22:22:d6:6b:21:6d:b4:fe:a9:82:67:f5:f5:68:e1:10:
         9b:63:5a:85:0c:7d:ce:f4:9b:e8:0b:4f:bd:7a:e9:51:1e:bc:
         5e:c5:00:82:91:a7:11:64:17:0e:4a:e1:35:e5:7b:40:3a:b4:
         d2:33:86:3d:f5:98:ca:b7:d3:66:20:11:3d:33:1f:76:a0:15:
         12:38:ec:41:6d:d0:01:48:21:9c:62:59:39:51:9f:e7:ea:89:
         25:e5:92:88:08:51:29:bd:ba:bf:d9:52:ee:b9:55:7d:ee:13:
         d3:02:6b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:26:04 2026 by rpki-client