Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5b1d4d7-a4c5-3122-acfa-a3a7f2938fea.roa
File:                     d5b1d4d7-a4c5-3122-acfa-a3a7f2938fea.roa (raw, json)
Hash identifier:          YEvILEw/poCfwNqVnb41FdvGu2ProTsay2OI9CC2syM=
Subject key identifier:   1C:D4:F2:41:39:D0:CC:86:3B:5A:DE:BE:00:87:EF:36:7F:22:E4:49
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F7E7DEB1A62C3A8FCE7458C10
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5b1d4d7-a4c5-3122-acfa-a3a7f2938fea.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     46760
IP address blocks:        2001:470:31b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:eb:1a:62:c3:a8:fc:e7:45:8c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=2b3d9a57-2581-4d11-91f7-49074fef6ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:74:58:4a:4f:54:92:09:98:41:3b:d5:e5:17:
                    1e:51:92:f9:c1:73:91:a8:5b:f0:a2:1f:f1:c4:2b:
                    bd:49:c3:03:e7:c5:f6:32:9a:ac:fc:0c:70:6f:bd:
                    57:6b:4c:4a:ac:b7:75:0c:04:df:8a:a6:7d:48:bd:
                    cb:c6:3f:85:29:ae:cc:c2:1c:cd:08:07:2c:ed:9e:
                    d4:69:7c:98:2c:41:89:67:01:f3:32:1c:b6:ac:4e:
                    c6:49:69:e7:1b:44:4c:96:c3:db:bf:31:e7:05:ac:
                    de:63:db:b6:74:0f:57:94:c7:f1:eb:d2:44:3a:91:
                    f2:f6:a3:11:85:bd:9e:0d:32:38:5c:aa:3a:27:f8:
                    53:d0:80:f9:9a:6c:e8:68:86:80:a1:1c:d3:e6:57:
                    31:54:07:03:2a:97:76:ea:48:8f:be:35:e7:43:bc:
                    c5:8d:75:b4:f4:5f:f9:0e:99:23:b5:c6:9b:0c:ce:
                    50:a0:33:3d:bd:9a:25:f0:ba:f2:7d:7b:74:e0:de:
                    16:29:bc:58:1e:79:6b:23:c8:55:21:62:67:b8:b4:
                    07:b0:04:b2:97:55:89:65:9c:ac:ab:88:6e:41:4d:
                    b3:c4:46:dd:83:fb:0e:47:15:51:51:36:51:cf:54:
                    f5:1c:90:72:4f:46:e8:72:f8:ab:35:1f:c5:d7:32:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D4:F2:41:39:D0:CC:86:3B:5A:DE:BE:00:87:EF:36:7F:22:E4:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d5b1d4d7-a4c5-3122-acfa-a3a7f2938fea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:31b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:4d:38:4b:a2:e1:9f:d1:c2:fb:2e:00:f5:06:ee:63:18:6b:
         e8:ae:81:01:c5:1b:6a:72:f4:b9:5d:f1:68:21:e9:b5:af:7c:
         63:30:d9:c0:b9:1d:f9:4e:31:8b:96:82:0e:2e:3d:1f:93:06:
         58:40:5c:65:76:7a:6c:e1:28:ac:40:80:e8:27:0e:84:af:39:
         e0:e9:08:cf:d2:c9:1a:8e:50:23:e1:53:16:e2:06:8f:83:bb:
         2e:a7:ac:fe:45:1f:79:e2:a6:4a:bb:a6:6e:80:e4:0d:a7:cc:
         c6:a6:27:cc:11:c0:5e:b4:b6:8b:f1:4f:15:e4:4e:55:75:f9:
         c7:8a:e2:cb:bd:15:c1:3f:37:89:29:8a:45:74:9f:8b:93:36:
         04:a0:ec:a4:8c:53:3a:b6:92:bd:38:a7:b2:f5:8e:0b:d3:a6:
         65:fe:28:10:86:d7:29:48:ae:49:f2:57:e9:ef:71:34:0b:44:
         f2:70:6f:1e:e2:23:ef:5f:a9:0c:c8:3f:f3:5f:ca:91:17:59:
         bc:8c:86:7f:68:e3:50:65:80:a8:d9:57:1e:26:3b:4b:97:1f:
         89:cb:74:97:df:17:c7:e9:c6:6d:f6:3b:58:07:4c:f5:23:fe:
         38:76:bb:b4:c8:ad:4a:84:03:dc:a5:85:7d:3b:26:5a:e2:21:
         95:8c:0f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 06:52:18 2026 by rpki-client