Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5a3c32c-0cd9-3952-9e0f-8af283cf2a9e.roa
File:                     d5a3c32c-0cd9-3952-9e0f-8af283cf2a9e.roa (raw, json)
Hash identifier:          fGDfPDXVYfksVluiWYuqMWbHThY3oBEIiW1gz8Q0k7c=
Subject key identifier:   67:B7:8F:D5:DA:1D:0F:F8:DA:2B:10:54:F5:A1:15:DD:B6:CC:25:5B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F49881FE0C13DB0454A4B7D98
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5a3c32c-0cd9-3952-9e0f-8af283cf2a9e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20141
IP address blocks:        2001:470:4f6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:1f:e0:c1:3d:b0:45:4a:4b:7d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=973767be-98f4-4ad6-83ef-6fb65ae8e81c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:95:d0:4e:bd:8d:1a:3f:cd:fa:35:c4:2e:c5:
                    30:23:92:10:9a:e1:f8:04:a6:0e:6d:12:1c:96:ce:
                    b1:a0:06:32:f1:1f:ba:7b:a0:a5:b5:7a:22:f1:59:
                    ff:fd:da:f7:40:7c:91:de:8a:fa:a8:ac:d6:39:48:
                    d7:67:d9:2c:53:bc:e3:84:03:c0:16:b4:6b:53:40:
                    1c:06:f3:c4:ff:81:3a:41:fd:12:b9:75:6d:4b:68:
                    88:60:57:e0:14:20:25:d6:2c:50:f4:d7:b0:90:e7:
                    fd:14:d0:d2:84:42:cd:37:1a:85:f0:d1:cb:8d:b1:
                    48:9c:c7:5d:40:a8:c1:e2:05:33:4b:96:2a:db:6a:
                    fc:e5:02:07:f9:32:05:4c:b1:cd:1f:db:ae:bb:68:
                    b4:12:00:44:f7:21:7f:2e:93:9b:e1:6d:ae:dd:c4:
                    b4:c6:82:d0:a1:36:65:5b:58:4a:17:35:b1:e5:5e:
                    c6:d6:06:64:1c:72:6b:2e:54:dc:2d:40:46:28:05:
                    ba:f9:46:e7:23:a3:4f:45:9c:9f:a8:39:b7:b1:36:
                    00:20:a1:74:f2:c0:32:aa:1f:63:0b:69:a2:58:02:
                    2a:e8:af:19:a1:d6:43:a8:bd:c9:9f:62:f5:9c:9b:
                    a0:98:d6:5b:23:b9:5b:bd:99:55:d9:f3:af:9e:7f:
                    48:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B7:8F:D5:DA:1D:0F:F8:DA:2B:10:54:F5:A1:15:DD:B6:CC:25:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5a3c32c-0cd9-3952-9e0f-8af283cf2a9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4f6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:89:97:a8:ac:b3:66:7d:ab:9b:cc:c9:cd:8a:83:32:e7:00:
         4b:14:2b:1a:33:7d:c8:95:3f:92:5d:b1:c3:55:b2:0a:b3:4b:
         a3:77:1d:18:e2:57:28:13:4b:cf:a8:db:88:36:37:2f:af:71:
         4c:8d:0a:13:bd:36:88:26:56:ec:13:e1:67:4d:ba:51:7b:e9:
         c5:27:42:d0:5c:c4:8e:66:2f:c7:8a:2c:f5:5d:33:59:9c:33:
         8e:4d:0b:69:c0:f7:91:7b:0e:ca:67:bc:42:70:63:c3:44:37:
         07:9d:31:6f:09:cc:98:b2:ce:90:e4:b8:65:30:2d:8d:1f:5e:
         23:1c:d2:5c:79:44:55:d7:ba:a5:27:6e:91:42:a2:38:61:81:
         b4:2e:4e:a1:a8:28:06:be:59:54:b4:77:29:4a:57:e6:b9:f5:
         86:71:da:c5:95:1e:78:e9:8b:ad:22:2a:22:b6:f6:1a:39:35:
         ee:90:ca:2e:28:52:a7:42:4f:19:59:1d:c7:ee:7f:76:bf:fd:
         2b:90:c7:59:a6:e5:57:14:cf:3a:fb:3c:9c:bc:78:35:a8:fb:
         07:7f:05:cf:19:07:84:53:5d:84:0a:10:77:ab:83:66:33:1c:
         39:dd:3a:ec:cd:0d:e9:9d:bc:4b:53:19:b6:44:18:0a:14:7c:
         39:ae:ec:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:55:05 2026 by rpki-client