Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9a5f2d8-8b7f-36de-b907-a3d969db3468.roa
File:                     b9a5f2d8-8b7f-36de-b907-a3d969db3468.roa (raw, json)
Hash identifier:          VbkUwp6h8iTRbRxwPYl+yGGIUgSbNtHANks+TRaeeKY=
Subject key identifier:   BC:71:36:07:4A:D8:50:12:67:97:4A:16:AF:38:67:9D:45:D9:6A:C1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DEA114C1E7FE8F0BFF748
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9a5f2d8-8b7f-36de-b907-a3d969db3468.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     3853
IP address blocks:        2001:470:2f4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:ea:11:4c:1e:7f:e8:f0:bf:f7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=48230e01-33dd-4094-aaef-bbde3d588810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:15:3a:d0:ec:76:97:6c:c0:36:97:84:e4:12:
                    d8:f2:ca:fc:9a:52:16:37:01:c0:4f:1d:73:4f:69:
                    c2:21:d1:b8:49:b7:4d:6f:cd:cb:d6:59:bd:93:50:
                    84:dd:29:c2:80:91:f3:b9:5d:cd:e5:d6:ab:f5:dd:
                    83:23:ff:17:60:94:89:4e:a6:8f:03:e3:d5:76:b0:
                    ad:a1:1b:7c:0c:7d:aa:7d:d7:d0:49:f5:fa:99:e9:
                    82:4c:cc:71:5a:1a:d5:eb:92:61:8e:c6:31:17:71:
                    54:77:de:3b:68:c7:ee:d3:2d:ec:42:ad:d4:75:a7:
                    98:fd:f0:5e:dd:10:ef:30:a8:3e:f9:f2:7b:23:29:
                    78:87:aa:e9:eb:98:ec:ed:e5:4c:2f:02:29:98:93:
                    a1:1c:a9:5d:0f:e2:3b:7a:92:7e:74:83:99:be:a2:
                    2c:60:ad:f7:b3:62:7a:5d:48:22:f6:8d:86:36:ff:
                    66:d6:0b:0b:2c:bb:c3:b0:49:f9:9b:60:96:1f:59:
                    6a:ec:c4:8b:20:11:23:be:1a:13:0c:81:fe:f2:c5:
                    4e:5d:a8:38:00:a7:60:0b:df:67:23:bf:f4:98:1f:
                    4a:77:d1:b6:96:9a:7f:f5:21:a6:0f:4e:82:e3:4c:
                    49:49:72:04:d0:1d:67:86:8d:1e:90:7c:c7:32:5f:
                    30:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:71:36:07:4A:D8:50:12:67:97:4A:16:AF:38:67:9D:45:D9:6A:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b9a5f2d8-8b7f-36de-b907-a3d969db3468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2f4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:3d:ca:de:83:50:18:61:d1:78:86:a0:d8:4e:1b:ec:4b:c2:
         f3:87:eb:00:86:57:45:c5:af:74:e6:4e:1e:b0:2c:47:ff:25:
         82:8f:e0:19:56:4a:d5:58:75:f7:c8:cc:6a:88:cf:46:aa:99:
         e7:fe:f3:f1:14:45:d0:d6:fc:bb:82:aa:9e:45:30:ae:28:59:
         13:ac:4c:86:63:ab:1f:e1:f9:cb:4e:2e:4c:37:68:83:90:4c:
         9e:f4:76:56:1a:66:ae:55:de:81:9a:36:b4:0c:2f:50:ec:59:
         37:34:42:f8:7d:b1:3e:0a:9d:0e:62:32:41:d4:14:0c:d4:76:
         14:fc:c3:a6:0e:22:51:c9:1d:95:c9:40:8a:6b:f2:f2:5a:51:
         40:bd:50:64:59:76:1c:9e:92:13:c6:31:a5:ef:cf:79:75:e2:
         a8:3d:29:66:fa:7b:f1:0d:b8:ea:20:b5:74:ce:2b:73:7b:94:
         da:4f:9a:b3:0d:a7:9e:d8:a3:4e:64:18:12:05:9c:76:b9:da:
         93:7a:b0:e7:9c:94:b7:f4:c6:05:6a:95:d6:2e:a6:44:4d:9b:
         7c:fb:c6:46:85:58:58:9d:98:0e:7b:77:fe:32:cd:07:02:ae:
         d5:9a:86:3f:08:20:3f:9b:df:a1:4e:3f:da:ac:17:53:d4:c6:
         ad:0e:47:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:47:47 2026 by rpki-client