Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf3bb9e8-5782-3a3d-a297-51b23f8e3c5a.roa
File:                     bf3bb9e8-5782-3a3d-a297-51b23f8e3c5a.roa (raw, json)
Hash identifier:          Pn9NFfEgnSzplMiT7RFLd4yPsGmr6URJKqIUxvq10Gc=
Subject key identifier:   0C:79:32:60:97:C3:F7:25:B2:27:B1:23:C3:C0:BF:27:ED:7C:BA:F7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F814840F7406EB63C56FDC580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf3bb9e8-5782-3a3d-a297-51b23f8e3c5a.roa
Signing time:             Thu 15 Oct 2026 01:00:12 +0000
ROA not before:           Thu 15 Oct 2026 01:00:12 +0000
ROA not after:            Wed 13 Jan 2027 02:00:12 +0000
asID:                     198408
IP address blocks:        2001:470:44c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:81:48:40:f7:40:6e:b6:3c:56:fd:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 15 01:00:12 2026 GMT
            Not After : Jan 13 02:00:12 2027 GMT
        Subject: CN=0ad33e6f-e443-4fa1-b96a-b7e2f0a4ce1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a9:6b:9e:9a:1b:fe:71:38:75:23:3f:c1:35:
                    e0:b8:cc:c4:ff:a1:a8:88:c7:78:f7:59:11:ff:65:
                    ca:c2:13:a2:61:63:9e:6a:b2:75:d8:83:17:5d:3b:
                    9d:f6:2d:55:60:6d:90:9b:27:38:a4:fd:82:03:51:
                    b3:ba:90:a5:25:20:26:b5:fc:8f:c0:ab:79:c4:56:
                    a1:a2:f6:01:ae:2a:ea:93:dd:c1:b2:f0:ad:29:d8:
                    d7:12:4e:81:fe:81:6f:1e:78:99:04:b7:7b:73:32:
                    0b:0f:20:91:01:2d:11:1f:0a:fa:01:c9:87:10:d8:
                    50:67:2a:0c:e8:b4:12:7a:4c:30:a1:0b:db:8e:b3:
                    76:c7:c0:87:74:51:25:79:f0:b6:b1:17:79:19:99:
                    c9:02:fa:c6:1a:36:76:a6:ad:89:4f:70:fc:15:ee:
                    10:9b:4d:44:be:23:4b:07:32:54:4f:f9:e9:58:8e:
                    98:07:da:fd:97:ef:c6:7b:25:38:16:b3:8c:36:4f:
                    b9:b3:24:ba:1b:82:de:a2:74:be:6f:31:7f:21:5d:
                    4e:8f:0b:40:b9:bc:31:bb:5c:f0:c3:cf:fe:dc:af:
                    75:0b:25:1d:a0:a0:ff:ac:17:60:c6:9f:49:57:b0:
                    1c:3c:cb:67:51:42:9b:f1:16:a8:09:71:ed:05:9c:
                    2d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:79:32:60:97:C3:F7:25:B2:27:B1:23:C3:C0:BF:27:ED:7C:BA:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf3bb9e8-5782-3a3d-a297-51b23f8e3c5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:44c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c2:dd:f3:b3:9b:50:90:c6:17:39:28:38:64:4f:e3:4a:be:
         52:3b:00:63:59:ad:db:3d:c3:8e:06:ad:2d:63:56:ea:1c:0d:
         93:a4:7b:71:b5:6e:9f:ec:95:ae:d9:2f:d9:22:31:9b:9e:a3:
         c1:91:e0:ae:42:84:d4:89:a8:9e:e4:80:4e:39:ad:d8:6e:95:
         cd:74:d0:53:ed:a8:fd:7d:00:a5:5e:a8:66:8c:45:bc:9e:dd:
         d2:14:c5:2e:86:22:b5:a5:90:ee:a2:cd:51:ac:c4:72:d3:2d:
         6d:60:77:21:a3:d4:49:af:9a:dc:ed:6b:ce:38:a7:b5:da:25:
         9c:f3:ad:56:9f:18:9d:08:17:6f:b7:ae:07:3a:84:bf:63:7f:
         8d:71:9c:19:62:82:c6:b1:99:75:9e:8e:5d:ac:2a:a8:6c:0e:
         5b:21:b4:53:41:66:aa:94:c1:23:9e:23:19:74:bf:00:1f:5a:
         d6:95:b0:e1:f0:48:f8:c4:67:d7:f9:25:bb:43:a1:49:14:6b:
         17:4c:55:19:8f:38:1a:df:62:06:a7:13:13:b7:28:12:25:51:
         09:b7:56:35:ec:3b:93:bc:65:56:ac:a4:2b:ae:1c:ff:8d:b0:
         9f:fc:d2:b3:f1:5f:c0:d8:cb:13:a9:1c:83:d8:0b:d4:c8:95:
         ea:fb:1f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:19:43 2026 by rpki-client