Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca7b86b0-1cc8-3c9a-8b77-4d7a4302c0d3.roa
File:                     ca7b86b0-1cc8-3c9a-8b77-4d7a4302c0d3.roa (raw, json)
Hash identifier:          mpcxvrXfMB8q+HWQ5EpyHVq1dyCj79xo1/OZVYPrukY=
Subject key identifier:   27:B8:10:3F:CB:54:16:54:B9:01:8B:19:87:E1:59:DA:DE:CA:85:D1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F4F082F673841642E8AC10C12
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca7b86b0-1cc8-3c9a-8b77-4d7a4302c0d3.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     21714
IP address blocks:        2001:470:3f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:2f:67:38:41:64:2e:8a:c1:0c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=6b200343-1426-4af4-8c73-d2da94678aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bd:50:34:ea:00:01:29:68:e6:ec:40:58:d7:
                    93:27:1d:a3:f0:34:f3:8b:42:73:78:16:7e:d7:e1:
                    22:3a:c0:c3:ee:92:ff:0a:9c:2b:61:17:5d:b0:8a:
                    16:dc:40:a6:44:cc:bf:fc:ea:88:e0:a2:94:ea:61:
                    1d:62:97:b8:e9:51:fc:1c:f4:e3:35:14:f8:54:41:
                    1b:e6:01:cd:f4:1a:54:80:dc:5f:70:fc:a2:52:64:
                    03:9c:62:0e:a2:92:ea:96:43:5f:fb:6f:c7:7a:8a:
                    d0:9d:26:ec:4d:ec:e2:4f:b9:a7:4f:4d:4d:ab:11:
                    09:7e:0f:21:d0:f4:be:3f:6d:75:bc:87:d1:ba:46:
                    c2:fb:49:73:32:e5:27:23:9c:c6:61:65:e8:eb:0b:
                    6b:39:38:ee:96:c5:77:f9:2f:f8:c0:05:ab:83:04:
                    bb:f9:56:13:63:6c:d0:8a:62:4a:8c:26:f7:88:2f:
                    ba:67:41:3f:51:25:fc:fb:99:45:be:9a:3b:57:3e:
                    fb:5c:98:04:5b:43:3f:aa:17:da:fd:26:6a:d8:ee:
                    df:0d:f9:c8:9a:b8:38:e3:f7:9d:e3:73:e9:29:52:
                    0f:07:d1:a3:61:6a:6e:82:ba:68:92:f1:f0:40:df:
                    61:48:5b:da:12:d8:b3:ae:70:01:7f:20:79:05:ae:
                    62:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B8:10:3F:CB:54:16:54:B9:01:8B:19:87:E1:59:DA:DE:CA:85:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca7b86b0-1cc8-3c9a-8b77-4d7a4302c0d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:ef:33:60:24:6a:90:0a:27:3f:30:29:2b:18:3c:5f:65:44:
         e1:68:b5:64:fb:39:a1:89:10:93:af:8c:83:5d:f2:ba:16:4d:
         a0:7e:fe:03:15:1c:b7:b2:d4:17:ac:c8:61:93:41:f3:b4:96:
         3d:eb:f3:d2:2a:a0:d8:01:85:9d:18:a4:df:17:bd:e3:0a:a9:
         ee:a2:64:5c:b4:9c:34:98:0e:0f:dd:d1:4f:44:c6:d2:53:cd:
         20:65:21:bd:8b:73:bf:ab:c4:36:81:0b:79:1c:29:23:51:b6:
         42:21:9a:c2:76:f0:00:d2:76:ee:04:39:3b:ab:ae:82:12:7c:
         e8:67:78:99:9c:8c:1c:33:8e:16:37:19:42:c5:87:b0:7d:bd:
         72:41:8e:92:f9:39:e3:7b:d2:cd:34:60:b7:a5:6c:a9:35:84:
         db:8e:fe:0b:d0:a7:97:ac:80:7f:71:6b:92:78:33:2e:bf:9a:
         58:74:1f:30:e9:87:b3:5e:4d:b8:3c:f7:ab:a8:2e:cc:3f:a5:
         a5:72:84:ae:a5:9b:25:3a:6b:45:cd:4a:6a:a3:bf:6d:bd:4f:
         07:6c:28:04:b1:8a:18:82:95:43:0c:78:6c:b6:fe:ef:51:e6:
         4d:97:3d:86:2a:f8:9d:12:66:d0:c0:02:1e:7d:17:03:00:32:
         f4:16:6d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:43:54 2026 by rpki-client