Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ec21106f-5b31-3120-bfea-adc47b296c7b.roa
File:                     ec21106f-5b31-3120-bfea-adc47b296c7b.roa (raw, json)
Hash identifier:          rQ+P+NP14cjVrJSZ4vlmoi+Hr1wm/i3mJnNHl/alyVY=
Subject key identifier:   3B:42:A5:AC:93:94:FB:6D:78:03:AF:6A:8D:2C:9E:D1:F5:26:B5:6C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F86ECB2490F12DC8768E72E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ec21106f-5b31-3120-bfea-adc47b296c7b.roa
Signing time:             Sat 17 Oct 2026 01:30:41 +0000
ROA not before:           Sat 17 Oct 2026 01:30:41 +0000
ROA not after:            Fri 15 Jan 2027 02:30:41 +0000
asID:                     57332
IP address blocks:        2001:470:647::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:86:ec:b2:49:0f:12:dc:87:68:e7:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 17 01:30:41 2026 GMT
            Not After : Jan 15 02:30:41 2027 GMT
        Subject: CN=64d590a8-3274-4bcc-a18c-d7f6fd2c3524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bd:77:9c:76:03:26:b1:88:b1:78:bb:47:e7:
                    59:21:6a:00:eb:6f:a9:c6:0f:ca:24:d6:dc:ea:81:
                    bf:c2:fc:13:e4:08:ea:7b:11:dd:7e:90:69:24:7d:
                    2b:e5:15:f3:ab:ac:3a:84:15:77:81:75:c9:55:a9:
                    cf:1f:69:49:61:72:ba:e7:04:9c:5f:00:c2:a7:31:
                    ea:48:e0:1b:4f:3f:e2:e8:2f:a2:9a:43:f3:e0:89:
                    ee:93:a0:39:0b:a7:e6:58:99:80:e6:2d:e0:e8:11:
                    fd:af:5e:69:50:eb:58:ef:1e:f3:03:50:57:1c:3c:
                    ff:37:46:e1:ec:57:a4:e5:6c:03:89:b5:b1:13:23:
                    aa:7c:9b:ac:7d:43:2e:a5:46:f9:ba:86:c4:7e:a0:
                    7a:54:ed:d3:d5:68:2a:49:52:ca:9b:bb:53:f4:67:
                    31:7c:d3:16:e4:a5:8e:35:44:7a:7b:8a:87:b3:cb:
                    e6:0b:cf:1e:ad:6b:f2:4a:3d:df:96:71:13:d9:96:
                    2a:5a:b0:64:30:73:5e:70:be:82:e1:7f:87:a5:dc:
                    41:01:89:55:ab:af:44:7b:e4:5f:f6:04:98:36:0c:
                    eb:4b:f2:96:17:86:6b:d8:92:77:d7:5d:78:70:9f:
                    18:0f:d0:d8:f3:39:5b:7c:5e:fc:10:a2:bc:cb:cc:
                    44:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:42:A5:AC:93:94:FB:6D:78:03:AF:6A:8D:2C:9E:D1:F5:26:B5:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ec21106f-5b31-3120-bfea-adc47b296c7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:647::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:73:c1:cd:ec:e7:d1:5a:d7:da:a7:f3:80:70:99:e6:a2:aa:
         a0:d7:84:36:66:4e:5f:2b:a9:1a:4f:af:ef:b3:e9:db:fc:53:
         19:b1:f3:85:55:50:de:f2:0b:94:b0:44:93:b3:86:a1:52:e7:
         3d:b3:08:66:bd:a1:78:2d:e9:ea:ea:a0:2b:6f:a5:3c:cb:5e:
         5e:ba:c6:a2:55:c5:5c:42:68:1d:47:9c:13:00:73:9d:6a:8a:
         9c:74:05:07:21:04:03:8d:f3:9a:dd:21:a9:71:b6:bf:7d:0d:
         ea:f9:60:d8:f1:c6:27:4a:b2:37:53:6c:01:aa:16:04:9b:8c:
         13:ee:bd:db:73:15:59:63:96:61:0c:2c:30:b2:7f:7c:2b:07:
         bb:ff:97:07:5a:49:ff:62:18:28:03:ea:c6:53:66:73:8e:16:
         9e:7a:fc:5e:24:ab:c8:31:52:f5:8b:51:18:c4:05:23:57:36:
         6c:4a:84:ff:30:75:f0:da:2b:7b:c5:47:57:84:43:f2:19:d2:
         0b:a0:5d:8c:a0:89:c0:cd:62:c5:99:5b:00:23:b3:72:ef:4e:
         96:14:48:2c:ee:af:25:85:9c:93:d7:87:97:6f:27:b4:04:d8:
         e2:44:fb:96:ac:9d:a4:84:af:b3:56:33:46:49:81:e9:61:48:
         40:01:86:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:29:23 2026 by rpki-client